flstudio_11[.]1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

flstudio_11.1.exe
Size

348.2MB
MD5

ddaaa231e042bfe80f378e4e0d006e76
SHA1

709e3cc71aec905938a0c0dd64c82d10249c8962
SHA256

79d352413ec91e3c74925718fd3a7e8d6f234d62a2ceffb6a1e7c5b257ec48e9
SHA512

f64e24c77c88c53f8ef396f384a0d094149f2c1fc2e7c9c48d71da56646e2ba8b093375b2829c1b8e9e84d19a76fc4f0eba98db19f2b0da7dabcbfc265921a59
SSDEEP

6291456:8/5YjuChKJa7uE1/r1m6iu8tA3Q8KarvxabS+pWdK+Okau9MTB5ViZGdZD:8R2ByuuE1DPmC1Gv7FVnIZGdZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack002/$PLUGINSDIR/ILUninstall.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/AccessControl.dll
unpack001/$PLUGINSDIR/ILInstallUtil.dll
unpack001/$PLUGINSDIR/System.dll

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$0/uninstall.exe	nsis_installer_1
static1/unpack001/$0/uninstall.exe	nsis_installer_2

Files

flstudio_11.1.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:73:cf:22:62:9c:c1:df:86:f7:98:c9:5e:0a:01:ea:ef:63:9f:98
Signer

Actual PE Digest

67:73:cf:22:62:9c:c1:df:86:f7:98:c9:5e:0a:01:ea:ef:63:9f:98

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$0/Artwork/Fonts/Cuprum.ttf
$0/Artwork/Fonts/Cuprum/OFL.txt
$0/Artwork/Fonts/Francois One/OFL.txt
$0/Artwork/Fonts/FrancoisOne.ttf
$0/Artwork/Fonts/ILCursors.ttf
$0/Artwork/Fonts/ILGlyphs.ttf
$0/Artwork/Fonts/ILGlyphsEx.ttf
$0/Artwork/Fonts/JosefinSans-SemiBold.ttf
$0/Artwork/Fonts/OpenSans-CondLight.ttf
$0/Artwork/Fonts/Open_Sans_Condensed/LICENSE.txt
$0/Artwork/Fonts/PT Sans/OFL.txt
$0/Artwork/Fonts/PT_Sans-Narrow-Web-Regular.ttf
$0/Artwork/Fonts/PT_Sans-Web-Regular.ttf
$0/Artwork/Fonts/Revalia-Regular.ttf
$0/Artwork/Fonts/Revalia/OFL.txt
$0/Artwork/Fonts/RobotoCondensed-Light.ttf
$0/Artwork/Fonts/RobotoCondensed-Regular.ttf
$0/Artwork/Fonts/Roboto_Condensed/LICENSE.txt
$0/Artwork/Fonts/Share-Regular.ttf
$0/Artwork/Fonts/Share/OFL.txt
$0/Artwork/Fonts/Ubuntu-R.ttf
$0/Artwork/Fonts/UbuntuCondensed-Regular.ttf
$0/DelZip190.dll
.dll windows:4 windows x86 arch:x86

380f2d17bd37c3067396a1e157a8ffc0

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:f7:38:64:83:af:aa:aa:8a:31:51:37:47:76:33:3f:a0:92:98:f0
Signer

Actual PE Digest

ed:f7:38:64:83:af:aa:aa:8a:31:51:37:47:76:33:3f:a0:92:98:f0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
CreateDirectoryA
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeleteFileA
DosDateTimeToFileTime
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FormatMessageA
FreeLibrary
GetACP
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetSystemDefaultLangID
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
LocalFree
MapViewOfFile
MoveFileA
MultiByteToWideChar
OpenFileMappingA
OutputDebugStringA
RaiseException
ReadFile
RemoveDirectoryA
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
lstrlenA

shell32

SHChangeNotify
SHFileOperationA

user32

CharLowerBuffA
CharNextA
CharToOemA
EnumThreadWindows
GetDesktopWindow
LoadStringA
MessageBoxA
OemToCharA
wsprintfA

Exports

Exports

DZ_Abort
DZ_Banner
DZ_Exec
DZ_Name
DZ_Path
DZ_PrivVersion
DZ_Version
DllMain
___CPPdebugHook

Sections

.text
Size: 220KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$0/DelZip64.dll
.dll windows:6 windows x64 arch:x64

7dc0facef4ce538c1938af8c3e81ac0b

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d5:32:c1:7b:df:cf:7a:c8:46:79:b4:2b:e0:bc:31:23:01:f0:3c:e4
Signer

Actual PE Digest

d5:32:c1:7b:df:cf:7a:c8:46:79:b4:2b:e0:bc:31:23:01:f0:3c:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Russell\Documents\Visual Studio 2012\Projects\Project1\x64\Release\Delzip64.pdb

Imports

kernel32

FindFirstFileW
SetFilePointer
GetLastError
FindClose
CloseHandle
OutputDebugStringW
FormatMessageW
LocalFree
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameW
EnterCriticalSection
GetModuleFileNameA
DeleteCriticalSection
SetEndOfFile
SetFileTime
WriteFile
ReadFile
CreateFileW
SetLastError
GetFileTime
GetFileAttributesW
GetTimeZoneInformation
DeleteFileW
SetFileAttributesW
GetFullPathNameW
DosDateTimeToFileTime
GetDriveTypeW
LocalFileTimeToFileTime
GetTempPathW
MoveFileWithProgressW
GetFileInformationByHandle
FileTimeToDosDateTime
GetSystemTimeAsFileTime
SetErrorMode
FileTimeToSystemTime
FindNextFileW
FileTimeToLocalFileTime
GetVolumeInformationW
CreateDirectoryW
SetEnvironmentVariableA
HeapSize
WriteConsoleW
HeapReAlloc
LCMapStringEx
FindFirstFileExW
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcessId
GetFileAttributesExW
GetCommandLineA
GetCurrentThreadId
HeapAlloc
RtlPcToFileHeader
RaiseException
HeapFree
GetFileType
PeekNamedPipe
GetCurrentDirectoryW
GetModuleHandleW
GetProcAddress
GetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
RtlUnwindEx
ExitProcess
GetModuleHandleExW
GetProcessHeap
InitializeCriticalSectionAndSpinCount
InitOnceExecuteOnce
QueryPerformanceCounter
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
Sleep
SetStdHandle
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
LoadLibraryExW
LoadLibraryW
CompareStringEx
FlushFileBuffers

user32

CharUpperBuffW
CharLowerBuffA
GetDesktopWindow
MessageBoxW
CharNextA
CharNextW

shell32

SHChangeNotify
SHFileOperationW

Exports

Exports

DZ_Abort
DZ_Banner
DZ_Exec
DZ_Name
DZ_Path
DZ_PrivVersion
DZ_Version

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/DirectWaveCtEngine.dll
.dll windows:5 windows x86 arch:x86

b4d109050cfd8ae9b366181224b9c2be

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:bc:b1:9e:fd:35:ae:7a:c7:bc:ff:1c:61:9c:60:46:70:71:8e:11
Signer

Actual PE Digest

3a:bc:b1:9e:fd:35:ae:7a:c7:bc:ff:1c:61:9c:60:46:70:71:8e:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shlwapi

PathGetCharTypeW
PathFileExistsW
PathRemoveFileSpecW
PathStripToRootW
PathAppendW

shell32

SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoCreateGuid
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize

comdlg32

CommDlgExtendedError
GetOpenFileNameW

advapi32

RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenProcessToken
GetTokenInformation

user32

MessageBeep
wsprintfW
MessageBoxW
RegisterClassW
CreateWindowExW
RegisterDeviceNotificationW
DestroyWindow
UnregisterDeviceNotification
GetDesktopWindow
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
CharUpperW
DefWindowProcW
CharUpperBuffW
UnregisterClassW

oleaut32

VariantClear

kernel32

OutputDebugStringW
GetTickCount
LoadLibraryW
GetProcAddress
OutputDebugStringA
SetErrorMode
GetVersionExW
GetModuleFileNameW
GetLastError
GetLogicalDrives
GetCurrentDirectoryW
GetDriveTypeW
Sleep
lstrcpyW
CreateFileW
GetTempFileNameW
GetFileSize
FindFirstFileW
SetFilePointer
SetEndOfFile
WriteFile
CopyFileW
ReadFile
GetTempPathW
FindClose
RemoveDirectoryW
GetFileTime
GetDiskFreeSpaceExW
QueryDosDeviceW
DeviceIoControl
GetVolumeInformationW
CreateDirectoryW
lstrcmpW
FindNextFileW
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualFree
GetStdHandle
CompareStringW
GetUserDefaultLangID
LockFileEx
UnlockFileEx
GetModuleHandleW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
GetCurrentThread
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
FreeLibrary
SizeofResource
LoadResource
FindResourceA
ExitProcess
DeleteFileW
GetFileAttributesExW
LocalFree
RaiseException
InterlockedDecrement
DuplicateHandle
WriteConsoleW
WriteConsoleA
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetFileAttributesW
IsWow64Process
VirtualQuery
GetComputerNameW
GetSystemInfo
GetUserDefaultLCID
CreateEventA
GetLogicalDriveStringsW
FlushViewOfFile
CloseHandle
FormatMessageA
GetVersion
GetFileType
LoadLibraryA
GetVersionExA
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetCommandLineA
RtlUnwind
SetStdHandle
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
CompareStringA
SetLastError
HeapSize
GetModuleFileNameA
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetLocaleInfoW
GetConsoleOutputCP
SetEnvironmentVariableA
CreateFileA
GlobalMemoryStatus
LockResource

Exports

Exports

CT_Process
CT_ProgramNames

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 190.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 625KB - Virtual size: 625KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/DirectWaveCtEngine_x64.dll
.dll windows:5 windows x64 arch:x64

410a3db4b254853309877ef50e47fbaf

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:77:6c:5d:f8:e0:57:55:e9:95:c0:eb:84:1b:ee:3a:f2:31:af:ee
Signer

Actual PE Digest

3a:77:6c:5d:f8:e0:57:55:e9:95:c0:eb:84:1b:ee:3a:f2:31:af:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

shlwapi

PathStripToRootW
PathGetCharTypeW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW

shell32

SHGetSpecialFolderPathW

ole32

CoCreateGuid
CoCreateInstance
OleUninitialize
OleInitialize
CoUninitialize
CoInitialize

comdlg32

GetOpenFileNameW
CommDlgExtendedError

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource
OpenProcessToken
GetTokenInformation

user32

MessageBoxW
wsprintfW
MessageBeep
CharUpperW
DefWindowProcW
UnregisterClassW
DestroyWindow
UnregisterDeviceNotification
GetDesktopWindow
RegisterDeviceNotificationW
CreateWindowExW
RegisterClassW
GetUserObjectInformationW
GetProcessWindowStation
CharUpperBuffW

kernel32

GetCurrentDirectoryW
GetDriveTypeW
Sleep
lstrcpyW
CreateFileW
GetTempFileNameW
GetFileSize
FindFirstFileW
SetFilePointer
SetEndOfFile
WriteFile
CopyFileW
ReadFile
GetTempPathW
FindClose
RemoveDirectoryW
GetFileTime
GetDiskFreeSpaceExW
QueryDosDeviceW
DeviceIoControl
GetVolumeInformationW
CreateDirectoryW
lstrcmpW
FindNextFileW
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
CompareStringW
GetUserDefaultLangID
LockFileEx
UnlockFileEx
GetModuleHandleW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
GetCurrentThread
TlsAlloc
TlsFree
FindResourceA
ExitProcess
DeleteFileW
GetFileAttributesExW
LocalFree
RaiseException
DuplicateHandle
WriteConsoleW
WriteConsoleA
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetFileAttributesW
GetComputerNameW
GetSystemInfo
GetUserDefaultLCID
IsWow64Process
GetLogicalDrives
GetLogicalDriveStringsW
FlushViewOfFile
FormatMessageA
GetVersion
GetFileType
GetLocaleInfoA
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
GetDateFormatA
SizeofResource
GetSystemTimeAsFileTime
GetTimeZoneInformation
FlsSetValue
GetCommandLineA
RtlUnwindEx
RtlPcToFileHeader
SetStdHandle
DebugBreak
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
CompareStringA
SetHandleCount
GetStartupInfoA
HeapSetInformation
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetModuleFileNameA
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetConsoleOutputCP
GetLocaleInfoW
SetEnvironmentVariableA
CreateFileA
GetLastError
GetVersionExW
SetErrorMode
OutputDebugStringA
GetProcAddress
LoadLibraryW
GetTickCount
OutputDebugStringW
FreeLibrary
CreateEventA
CloseHandle
LoadResource
GlobalMemoryStatus
LockResource
GetACP
GetTimeFormatA

oleaut32

VariantClear

Exports

Exports

CT_Process
CT_ProgramNames

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 191.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/Elastique.dll
.dll windows:5 windows x86 arch:x86

9da43338d315f17a9177bfc1443fe09a

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f3:ea:09:08:39:38:98:68:c6:2c:f6:0b:0e:87:98:87:41:7d:6c:97
Signer

Actual PE Digest

f3:ea:09:08:39:38:98:68:c6:2c:f6:0b:0e:87:98:87:41:7d:6c:97

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\ImageLine\fred\SDKs\zplane\vc\Release\elastique.pdb

Imports

ws2_32

ntohl
htonl

kernel32

GetCurrentProcess
CloseHandle
CreateFileW
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
WriteFile
GetModuleFileNameW
IsProcessorFeaturePresent
IsDebuggerPresent
SetLastError
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
HeapSize
HeapQueryInformation
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers

Exports

Exports

Auftakt_CreateInstance
Auftakt_CreateInstance2
ElCreateInstance
ElDestroyInstance
ElFlushBuffer
ElGetFramesBuffered
ElGetFramesNeeded
ElGetFramesNeededMod
ElProDirect_CreateInstance
ElPro_CreateInstance
ElProcessData
ElReset
ElSetCutOffFreq
ElSetStereoInputMode
ElSetStretchPitchQFactor
ElSetStretchQPitchFactor
Metering_CreateInstance
SolPitchAn_CreateInstance
SolPitchAn_CreatePitchMarks
_g9_ippsExp_32f_A21@12
_g9_ippsLn_32f_A21@12
_g9_ippsSinCos_32f_A24@16
_p8_ippsExp_32f_A21@12
_p8_ippsLn_32f_A21@12
_p8_ippsSinCos_32f_A24@16
_s8_ippsExp_32f_A21@12
_s8_ippsLn_32f_A21@12
_v8_ippsSinCos_32f_A24@16
_w7_ippsExp_32f_A21@12
_w7_ippsLn_32f_A21@12
_w7_ippsSinCos_32f_A24@16
own_ipps_sExp_G9_ctab
own_ipps_sExp_G9_ttab
own_ipps_sExp_P8_ctab
own_ipps_sExp_P8_ttab
own_ipps_sExp_V8_ctab
own_ipps_sExp_V8_ttab
own_ipps_sExp_W7_ctab
own_ipps_sExp_W7_ttab
own_ipps_sLn_G9_ctab
own_ipps_sLn_G9_ttab
own_ipps_sLn_P8_ctab
own_ipps_sLn_P8_ttab
own_ipps_sLn_V8_ctab
own_ipps_sLn_V8_ttab
own_ipps_sLn_W7_ctab
own_ipps_sLn_W7_ttab
own_ipps_sSinCos_G9_ctab
own_ipps_sSinCos_G9_ttab
own_ipps_sSinCos_P8_ctab
own_ipps_sSinCos_P8_ttab
own_ipps_sSinCos_V8_ctab
own_ipps_sSinCos_V8_ttab
own_ipps_sSinCos_W7_ctab
own_ipps_sSinCos_W7_ttab

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/ILMinihostBridge32.exe
.exe windows:5 windows x86 arch:x86

53de097fed7e1f1c14291e2d6e06294d

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c8:19:5a:e8:6c:3e:29:76:10:30:c5:22:af:77:61:24:78:3d:98:3b
Signer

Actual PE Digest

c8:19:5a:e8:6c:3e:29:76:10:30:c5:22:af:77:61:24:78:3d:98:3b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\image-line\cplusplus\ILClasses\trunk\extras\BridgedAudioPluginInstance\Builds\Win\Release\InterprocessPluginScan.pdb

Imports

kernel32

FindClose
GetFileAttributesW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
GetLastError
WriteFile
OutputDebugStringW
GetLocaleInfoW
LoadLibraryW
CreateMutexW
FormatMessageW
FlushFileBuffers
MapViewOfFile
GetModuleFileNameW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GetCommandLineW
GlobalAlloc
CreateEventA
CreateFileMappingA
CreateProcessA
lstrcmpiA
IsBadWritePtr
VirtualProtect
AddVectoredExceptionHandler
SetErrorMode
GetCurrentProcessId
SetLastError
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetStdHandle
SetHandleCount
HeapSize
VirtualAlloc
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetStartupInfoA
GetCommandLineA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateThread
ExitThread
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
RaiseException
ReadFile
TerminateProcess
ReleaseMutex
FreeLibrary
IsDebuggerPresent
ExitProcess
SetThreadAffinityMask
GetCurrentThreadId
TerminateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetVersionExW
UnmapViewOfFile
SetFilePointer
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThread
GetThreadPriority
GetCurrentProcess
GetPriorityClass
SetThreadPriority
SetPriorityClass
ResetEvent
CloseHandle
Sleep
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA
CompareStringW

user32

EnumWindows
GetMessageTime
ReleaseDC
GetDC
SetWindowTextW
GetAncestor
GetAsyncKeyState
GetMessageExtraInfo
GetParent
EnableMenuItem
SetCursorPos
MessageBeep
IsWindow
GetWindowTextW
OpenClipboard
DestroyCursor
SetCursor
LoadCursorW
CreateIconIndirect
GetWindowInfo
IsChild
WindowFromPoint
GetMessagePos
GetCursorPos
SetClipboardData
PostMessageW
DestroyIcon
GetClipboardData
SendMessageTimeoutW
GetSystemMetrics
GetForegroundWindow
SendInput
SystemParametersInfoW
EnumDisplayMonitors
EndPaint
BeginPaint
GetUpdateRgn
MapVirtualKeyW
GetActiveWindow
PeekMessageW
GetMessageW
GetWindowRect
MoveWindow
SetWindowLongW
DestroyWindow
UnregisterClassW
RegisterClassExW
CreateWindowExW
GetDesktopWindow
GetWindowLongW
DestroyCaret
InvalidateRect
ReleaseCapture
GetCapture
SetCapture
TrackMouseEvent
DefWindowProcW
GetFocus
SetFocus
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
AttachThreadInput
GetWindow
SetWindowPos
SendMessageW
EmptyClipboard
CallWindowProcW
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
RedrawWindow
SetLayeredWindowAttributes
CloseClipboard

gdi32

GetKerningPairsW
GetGlyphOutlineW
GetGlyphIndicesW
SetMapperFlags
SetMapMode
CreateFontIndirectW
SelectObject
GetTextMetricsW
DeleteObject
CreateCompatibleDC
DeleteDC
CreateRectRgn
CreateDIBSection
CreateBitmap
RestoreDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
CombineRgn
GetOutlineTextMetricsW
CreateRectRgnIndirect

advapi32

RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

shell32

ExtractAssociatedIconW
SHGetSpecialFolderPathW

ole32

RevokeDragDrop
OleInitialize
OleUninitialize
PropVariantClear
CoCreateInstance
CoTaskMemFree
RegisterDragDrop

winmm

midiOutUnprepareHeader
midiOutLongMsg
midiOutGetDevCapsW
midiInGetNumDevs
midiInGetDevCapsW
midiInUnprepareHeader
midiInPrepareHeader
midiInAddBuffer
midiOutPrepareHeader
midiOutShortMsg
midiOutOpen
midiInStart
midiInStop
midiInReset
midiOutClose
midiInClose
midiInOpen
timeGetTime
timeBeginPeriod
midiOutGetNumDevs

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

imagehlp

MapAndLoad
UnMapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Sections

.text
Size: 849KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/ILMinihostBridge64.exe
.exe windows:5 windows x64 arch:x64

05d6b994e76428587e77442fe444b0f8

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:28:79:9b:0f:c6:df:81:84:b0:09:1b:90:51:d5:42:c2:8c:80:ed
Signer

Actual PE Digest

67:28:79:9b:0f:c6:df:81:84:b0:09:1b:90:51:d5:42:c2:8c:80:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\image-line\cplusplus\ILClasses\trunk\extras\BridgedAudioPluginInstance\Builds\Win\Release\InterprocessPluginScan.pdb

Imports

kernel32

GetFileAttributesW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
GetLastError
WriteFile
OutputDebugStringW
GetLocaleInfoW
LoadLibraryW
CreateMutexW
FormatMessageW
FlushFileBuffers
MapViewOfFile
GetModuleFileNameW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GetCommandLineW
GlobalAlloc
CreateEventA
CreateFileMappingA
CreateProcessA
lstrcmpiA
IsBadWritePtr
VirtualProtect
AddVectoredExceptionHandler
SetErrorMode
GetCurrentProcessId
SetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetStdHandle
SetHandleCount
HeapSize
HeapCreate
HeapSetInformation
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetModuleFileNameA
GetStdHandle
GetStartupInfoA
GetCommandLineA
RtlVirtualUnwind
RtlCaptureContext
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateThread
ExitThread
WideCharToMultiByte
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
RaiseException
ReadFile
FindClose
TerminateProcess
FreeLibrary
ReleaseMutex
ExitProcess
GetModuleHandleA
IsDebuggerPresent
SetThreadAffinityMask
GetCurrentThreadId
TerminateThread
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
UnmapViewOfFile
SetFilePointer
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThread
GetThreadPriority
GetCurrentProcess
GetPriorityClass
SetThreadPriority
SetPriorityClass
ResetEvent
CloseHandle
Sleep
LoadLibraryA
CreateFileA

user32

SetWindowTextW
GetAncestor
GetAsyncKeyState
GetMessageExtraInfo
GetParent
EnableMenuItem
SetCursorPos
MessageBeep
CloseClipboard
GetClipboardData
OpenClipboard
DestroyCursor
GetDC
LoadCursorW
CreateIconIndirect
GetWindowInfo
IsChild
WindowFromPoint
GetMessagePos
GetCursorPos
SetClipboardData
EmptyClipboard
DestroyIcon
GetSystemMetrics
GetForegroundWindow
SendMessageW
GetMessageTime
SendInput
SystemParametersInfoW
EnumDisplayMonitors
EndPaint
BeginPaint
GetUpdateRgn
MapVirtualKeyW
GetActiveWindow
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
EnumWindows
GetWindowTextW
SendMessageTimeoutW
PostMessageW
CallWindowProcW
IsWindow
GetWindowRect
MoveWindow
SetWindowLongPtrW
SetCaretPos
GetWindowPlacement
ShowWindow
GetSystemMenu
DestroyCaret
InvalidateRect
DestroyWindow
UnregisterClassW
RegisterClassExW
CreateWindowExW
GetDesktopWindow
GetWindowLongPtrW
DefWindowProcW
PeekMessageW
GetMessageW
GetFocus
SetFocus
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
AttachThreadInput
GetWindow
ReleaseDC
SetWindowPos
ShowCaret
CreateCaret
SetForegroundWindow
RedrawWindow
SetLayeredWindowAttributes
SetWindowLongW
GetWindowLongW
SetCursor

gdi32

GetTextMetricsW
GetKerningPairsW
GetGlyphOutlineW
GetGlyphIndicesW
SetMapperFlags
SetMapMode
CreateFontIndirectW
GetOutlineTextMetricsW
DeleteObject
CreateCompatibleDC
DeleteDC
CreateDIBSection
CreateBitmap
RestoreDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
SelectObject

advapi32

RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

shell32

ExtractAssociatedIconW
SHGetSpecialFolderPathW

ole32

RevokeDragDrop
OleInitialize
OleUninitialize
PropVariantClear
CoCreateInstance
CoTaskMemFree
RegisterDragDrop

winmm

midiOutUnprepareHeader
midiOutLongMsg
midiOutGetDevCapsW
midiInGetNumDevs
midiInGetDevCapsW
midiInUnprepareHeader
midiInPrepareHeader
midiInAddBuffer
midiOutPrepareHeader
midiOutShortMsg
midiOutOpen
midiInStart
midiInStop
midiInReset
midiOutClose
midiInClose
midiInOpen
timeGetTime
timeBeginPeriod
midiOutGetNumDevs

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

imagehlp

MapAndLoad
UnMapAndLoad
ImageDirectoryEntryToData

rpcrt4

UuidCreate

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/ILPluginScanner32.exe
.exe windows:5 windows x86 arch:x86

ddfa87726fa162fcc5605b7fb9f0dc82

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d3:3f:b0:f5:b7:82:cf:55:bd:95:c0:4a:ba:c1:e3:53:7e:b8:7d:c4
Signer

Actual PE Digest

d3:3f:b0:f5:b7:82:cf:55:bd:95:c0:4a:ba:c1:e3:53:7e:b8:7d:c4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\image-line\cplusplus\ILClasses\trunk\extras\IPCPluginScanner_Demo\Builds\VisualStudio2008\Release\InterprocessPluginScan.pdb

Imports

kernel32

SetFilePointer
GetVersionExW
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteCriticalSection
TerminateThread
GetCurrentThreadId
SetThreadAffinityMask
IsDebuggerPresent
ReleaseMutex
ReadFile
FindClose
GetFileAttributesW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
WriteFile
OutputDebugStringW
GetLocaleInfoW
LoadLibraryW
CreateMutexW
GetDriveTypeW
FormatMessageW
CreateDirectoryW
FlushFileBuffers
GetVolumeInformationW
GetModuleFileNameW
GetLogicalDriveStringsW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GetCommandLineW
GlobalAlloc
CompareStringW
FindResourceW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetStdHandle
SetHandleCount
HeapSize
LCMapStringW
MultiByteToWideChar
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
SetEvent
CreateEventW
SetPriorityClass
FreeLibrary
GetLastError
SetLastError
TerminateProcess
OpenProcess
GetCurrentProcessId
SetErrorMode
AddVectoredExceptionHandler
ExitProcess
CreateFileMappingA
InitializeCriticalSection
MapViewOfFile
EnterCriticalSection
Sleep
LeaveCriticalSection
UnmapViewOfFile
VirtualProtect
IsBadWritePtr
GetModuleHandleA
lstrcmpiA
LoadLibraryA
GetProcAddress
GetCurrentProcess
GetCurrentThread
SetThreadPriority
WaitForSingleObject
CloseHandle
LoadResource
SizeofResource
LockResource
SetEnvironmentVariableA
CompareStringA

user32

TranslateMessage
SetFocus
GetFocus
GetMessageW
PeekMessageW
PostMessageW
SendMessageTimeoutW
GetWindowTextW
EnumWindows
GetMessageTime
ReleaseDC
GetDC
SetWindowTextW
GetAncestor
RegisterClassExW
GetMessageExtraInfo
GetParent
DispatchMessageW
MessageBoxW
SetCursorPos
MessageBeep
CloseClipboard
GetClipboardData
OpenClipboard
DestroyCursor
SetCursor
LoadCursorW
GetIconInfo
CreateIconIndirect
AttachThreadInput
IsChild
WindowFromPoint
GetMessagePos
GetCursorPos
SetClipboardData
EmptyClipboard
EnableMenuItem
GetWindowThreadProcessId
DestroyIcon
GetSystemMetrics
GetForegroundWindow
SendInput
GetClientRect
SystemParametersInfoW
CreateWindowExW
GetDesktopWindow
GetWindowLongW
DefWindowProcW
GetWindow
SetWindowPos
SendMessageW
CallWindowProcW
IsWindow
GetActiveWindow
MapVirtualKeyW
GetUpdateRgn
BeginPaint
EndPaint
EnumDisplayMonitors
GetWindowRect
MoveWindow
SetWindowLongW
DestroyWindow
GetWindowInfo
UnregisterClassW
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
InvalidateRect
DestroyCaret
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
RedrawWindow
SetLayeredWindowAttributes
GetAsyncKeyState

gdi32

GetKerningPairsW
GetGlyphOutlineW
GetGlyphIndicesW
SetMapperFlags
SetMapMode
CreateFontIndirectW
SelectObject
GetTextMetricsW
DeleteObject
CreateCompatibleDC
DeleteDC
CreateRectRgn
GetPixel
CreateDIBSection
GetObjectW
CreateBitmap
RestoreDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
CombineRgn
GetOutlineTextMetricsW
CreateRectRgnIndirect

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetSpecialFolderPathW
ExtractAssociatedIconW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW

ole32

RevokeDragDrop
DoDragDrop
CoTaskMemAlloc
OleInitialize
OleUninitialize
RegisterDragDrop

imagehlp

MapAndLoad
ImageRvaToVa
UnMapAndLoad
ImageDirectoryEntryToData

shlwapi

PathStripToRootW

winmm

timeBeginPeriod
timeGetTime

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

Sections

.text
Size: 870KB - Virtual size: 869KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/ILPluginScanner64.exe
.exe windows:5 windows x64 arch:x64

a53b15766d9800d72604c8389f287db0

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:57:1b:40:fd:64:14:c6:64:f6:da:1a:40:43:f4:1d:9d:39:98:d9
Signer

Actual PE Digest

15:57:1b:40:fd:64:14:c6:64:f6:da:1a:40:43:f4:1d:9d:39:98:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\image-line\cplusplus\ILClasses\trunk\extras\IPCPluginScanner_Demo\Builds\VisualStudio2008\Release\InterprocessPluginScan.pdb

Imports

kernel32

GetVersionExW
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteCriticalSection
TerminateThread
GetCurrentThreadId
SetThreadAffinityMask
IsDebuggerPresent
ReleaseMutex
FindClose
ReadFile
GetFileAttributesW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FindFirstFileW
WriteFile
OutputDebugStringW
GetLocaleInfoW
LoadLibraryW
CreateMutexW
GetDriveTypeW
FormatMessageW
CreateDirectoryW
FlushFileBuffers
GetVolumeInformationW
GetModuleFileNameW
GetLogicalDriveStringsW
GetTempPathW
GlobalUnlock
GlobalSize
GlobalLock
GetCommandLineW
GlobalAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetConsoleOutputCP
WriteConsoleA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetStdHandle
SetHandleCount
HeapSize
LCMapStringW
MultiByteToWideChar
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
HeapCreate
HeapSetInformation
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
WideCharToMultiByte
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetModuleHandleW
GetFileType
RtlPcToFileHeader
RaiseException
RtlCaptureContext
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwindEx
RtlLookupFunctionEntry
SetFilePointer
FindResourceW
SetEvent
CreateEventW
SetPriorityClass
FreeLibrary
GetLastError
SetLastError
LockResource
TerminateProcess
OpenProcess
GetCurrentProcessId
SetErrorMode
AddVectoredExceptionHandler
ExitProcess
CreateFileMappingA
InitializeCriticalSection
MapViewOfFile
EnterCriticalSection
Sleep
LeaveCriticalSection
UnmapViewOfFile
VirtualProtect
IsBadWritePtr
GetModuleHandleA
lstrcmpiA
LoadLibraryA
GetProcAddress
GetCurrentProcess
GetCurrentThread
SetThreadPriority
WaitForSingleObject
CloseHandle
LoadResource
SizeofResource
WriteConsoleW

user32

GetFocus
GetMessageW
PeekMessageW
PostMessageW
SendMessageTimeoutW
GetWindowTextW
EnumWindows
GetMessageTime
ReleaseDC
GetDC
SetWindowTextW
GetAncestor
GetAsyncKeyState
GetMessageExtraInfo
GetParent
DestroyWindow
MessageBoxW
SetFocus
MessageBeep
CloseClipboard
GetClipboardData
OpenClipboard
DestroyCursor
SetCursor
LoadCursorW
GetIconInfo
CreateIconIndirect
GetWindowInfo
IsChild
WindowFromPoint
DispatchMessageW
GetCursorPos
SetClipboardData
EmptyClipboard
DestroyIcon
GetSystemMetrics
SetCursorPos
TranslateMessage
GetForegroundWindow
SendInput
GetClientRect
SystemParametersInfoW
EnumDisplayMonitors
EndPaint
BeginPaint
GetUpdateRgn
UnregisterClassW
RegisterClassExW
CreateWindowExW
GetDesktopWindow
GetWindowLongPtrW
DefWindowProcW
GetWindowThreadProcessId
ReleaseCapture
GetCapture
SetCapture
TrackMouseEvent
GetActiveWindow
MapVirtualKeyW
AttachThreadInput
GetWindow
SetWindowPos
SendMessageW
CallWindowProcW
IsWindow
GetWindowRect
MoveWindow
SetWindowLongPtrW
GetMessagePos
InvalidateRect
DestroyCaret
GetSystemMenu
ShowWindow
GetWindowPlacement
SetCaretPos
ShowCaret
CreateCaret
SetForegroundWindow
RedrawWindow
SetLayeredWindowAttributes
SetWindowLongW
GetWindowLongW
EnableMenuItem

gdi32

GetPixel
GetTextMetricsW
GetKerningPairsW
GetGlyphOutlineW
GetGlyphIndicesW
SetMapperFlags
SetMapMode
CreateFontIndirectW
GetObjectW
GetOutlineTextMetricsW
DeleteObject
CreateCompatibleDC
DeleteDC
CreateDIBSection
CreateBitmap
RestoreDC
StretchDIBits
SaveDC
ExcludeClipRect
GetRegionData
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
SelectObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW
SHGetSpecialFolderPathW
ExtractAssociatedIconW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

RevokeDragDrop
DoDragDrop
CoTaskMemAlloc
OleInitialize
OleUninitialize
RegisterDragDrop

imagehlp

MapAndLoad
ImageRvaToVa
UnMapAndLoad
ImageDirectoryEntryToData

shlwapi

PathStripToRootW

winmm

timeBeginPeriod
timeGetTime

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/ILRemoteServer.dll
.dll windows:5 windows x86 arch:x86

e7b3d7f6818a523b3c0f082bdb50ae0a

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:a3:14:e7:59:f8:ea:fa:a0:c0:be:89:80:29:32:f0:5d:e8:b9:c7
Signer

Actual PE Digest

1d:a3:14:e7:59:f8:ea:fa:a0:c0:be:89:80:29:32:f0:5d:e8:b9:c7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

iphlpapi

GetAdaptersInfo

ws2_32

htonl
sendto
bind
setsockopt
htons
inet_addr
recvfrom
closesocket
WSAStartup
WSACleanup
socket

user32

SendInput

kernel32

WriteConsoleW
SetEndOfFile
GetStringTypeW
LCMapStringW
HeapReAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
CreateFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
CreateThread
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
GetLastError
DecodePointer
EncodePointer
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoW
MultiByteToWideChar
ReadFile
CloseHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
HeapSize

Exports

Exports

ILR_createServerManager

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/ILRemoteServer_x64.dll
.dll windows:6 windows x64 arch:x64

4b724f61892b7c96e8b81e8f508ac6f4

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4f:e0:ec:d6:97:e4:58:0a:0c:7b:b2:39:fe:8b:92:1d:20:0b:bb:8e
Signer

Actual PE Digest

4f:e0:ec:d6:97:e4:58:0a:0c:7b:b2:39:fe:8b:92:1d:20:0b:bb:8e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

iphlpapi

GetAdaptersInfo

ws2_32

htonl
sendto
bind
setsockopt
htons
inet_addr
recvfrom
closesocket
WSAStartup
WSACleanup
socket

user32

SendInput

kernel32

WriteConsoleW
SetEndOfFile
GetStringTypeW
GetConsoleCP
FlushFileBuffers
SetStdHandle
CreateFileW
LCMapStringW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
CreateThread
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
GetLastError
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
ReadFile
GetCommandLineA
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
CloseHandle
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
HeapReAlloc

Exports

Exports

ILR_createServerManager

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/LAMEenc.dll
.dll windows:4 windows x86 arch:x86

654022cc5ae5c599dd653bf802a4d5ce

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a7:5f:68:c3:91:5d:b5:1e:9f:c8:c7:69:63:f6:cf:21:51:bb:ec:a4
Signer

Actual PE Digest

a7:5f:68:c3:91:5d:b5:1e:9f:c8:c7:69:63:f6:cf:21:51:bb:ec:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\programs\sdks\lame\lame-3.98.4\output\lame_enc.pdb

Imports

kernel32

GetModuleFileNameA
GetPrivateProfileIntA
OutputDebugStringA
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
HeapReAlloc
MultiByteToWideChar
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
CloseHandle
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
RaiseException
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/LAMEenc_x64.dll
.dll windows:4 windows x64 arch:x64

e7e522730f5345ac0f43c286facfd3c7

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4a:20:d3:3e:c0:a3:a9:2a:a8:38:bb:98:cb:44:88:47:65:24:a2:36
Signer

Actual PE Digest

4a:20:d3:3e:c0:a3:a9:2a:a8:38:bb:98:cb:44:88:47:65:24:a2:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\ImageLine\3rdparty\SDKs\lame\lame-3.98.4\output\lame_enc_x64.pdb

Imports

kernel32

GetModuleFileNameA
GetPrivateProfileIntA
OutputDebugStringA
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
HeapReAlloc
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlUnwindEx
RtlVirtualUnwind
RtlLookupFunctionEntry
MultiByteToWideChar
ReadFile
HeapSetInformation
HeapCreate
HeapDestroy
GetStdHandle
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
CloseHandle
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
RaiseException

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/QuickFontCache.dll
.dll windows:5 windows x86 arch:x86

f0c0b3cb700b46916e94b31a7296d235

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f2:51:5a:f8:ad:3f:7d:f0:e1:98:4d:71:58:59:a0:57:1c:0b:b5:0f
Signer

Actual PE Digest

f2:51:5a:f8:ad:3f:7d:f0:e1:98:4d:71:58:59:a0:57:1c:0b:b5:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
SystemParametersInfoW
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperW

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
SwitchToThread
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
SetDllDirectoryW
ResetEvent
ReadFile
QueryPerformanceFrequency
LocalFree
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GetVersionExW
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
InterlockedExchangeAdd
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindFirstFileW
FindClose
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

ole32

CoUninitialize
CoInitialize

shell32

SHGetFolderPathA

freetype

FT_Set_Pixel_Sizes
FT_Get_Kerning
FT_Render_Glyph
FT_Load_Glyph
FT_Get_Char_Index
FT_Select_Charmap
FT_Done_Face
FT_New_Face
FT_New_Memory_Face
FT_Done_FreeType
FT_Init_FreeType

Exports

Exports

FontCache_AcquireFont
FontCache_CleanUp

Sections

.text
Size: 430KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$0/QuickFontCache_x64.dll
.dll windows:5 windows x64 arch:x64

eed1ed74766f93ecd9d73fb288280590

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9b:69:96:12:a3:e6:fc:6d:d7:c2:0f:35:48:fe:1f:90:48:b9:05:b5
Signer

Actual PE Digest

9b:69:96:12:a3:e6:fc:6d:d7:c2:0f:35:48:fe:1f:90:48:b9:05:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
SystemParametersInfoW
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperW

kernel32

Sleep
VirtualFree
VirtualAlloc
HeapFree
HeapAlloc
GetProcessHeap
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
SwitchToThread
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
SetDllDirectoryW
ResetEvent
ReadFile
LocalFree
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GetVersionExW
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeLibrary
FormatMessageW
FindFirstFileW
FindClose
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

ole32

CoUninitialize
CoInitialize

shell32

SHGetFolderPathA

freetype_x64

FT_Set_Pixel_Sizes
FT_Get_Kerning
FT_Render_Glyph
FT_Load_Glyph
FT_Get_Char_Index
FT_Select_Charmap
FT_Done_Face
FT_New_Face
FT_New_Memory_Face
FT_Done_FreeType
FT_Init_FreeType

Exports

Exports

FontCache_AcquireFont
FontCache_CleanUp

Sections

.text
Size: 647KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 44KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$0/REX Shared Library.dll
.dll windows:5 windows x86 arch:x86

8325134a805e75d948ccc2006d92681e

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:d4:83:02:0c:b8:a1:4e:d8:81:4a:f4:0e:a8:0a:d2:39:ef:3d:16
Signer

Actual PE Digest

32:d4:83:02:0c:b8:a1:4e:d8:81:4a:f4:0e:a8:0a:d2:39:ef:3d:16

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetCPInfo
FlushFileBuffers
DisableThreadLibraryCalls
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetACP
CreateMutexW
CloseHandle
WaitForSingleObject
ReleaseMutex
Sleep
GetCurrentProcess
InterlockedExchange
QueryPerformanceCounter
CreateFileA
WriteConsoleW
GetConsoleOutputCP
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetModuleHandleW
GetProcAddress
ExitProcess
GetCurrentThreadId
GetCommandLineA
LCMapStringA
LCMapStringW
GetStringTypeW
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA

Exports

Exports

Close
Open
REXCreate
REXDelete
REXGetCreatorInfo
REXGetInfo
REXGetInfoFromBuffer
REXGetSliceInfo
REXRenderPreviewBatch
REXRenderSlice
REXSetOutputSampleRate
REXSetPreviewTempo
REXStartPreview
REXStopPreview

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/REX Shared Library_x64.dll
.dll windows:5 windows x64 arch:x64

abd823488a02e1464603eeadd6ca5b86

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c5:bf:9a:a8:75:a6:da:e6:22:94:bf:95:d8:2d:f5:64:73:8b:30:4b
Signer

Actual PE Digest

c5:bf:9a:a8:75:a6:da:e6:22:94:bf:95:d8:2d:f5:64:73:8b:30:4b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetCPInfo
FlushFileBuffers
DisableThreadLibraryCalls
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetACP
CreateMutexW
CloseHandle
WaitForSingleObject
ReleaseMutex
Sleep
GetCurrentProcess
QueryPerformanceCounter
CreateFileA
WriteConsoleW
GetConsoleOutputCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapFree
GetModuleHandleW
GetProcAddress
ExitProcess
GetCurrentThreadId
FlsSetValue
GetCommandLineA
LCMapStringA
LCMapStringW
GetStringTypeW
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
HeapSetInformation
HeapCreate
HeapDestroy
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA

Exports

Exports

Close
Open
REXCreate
REXDelete
REXGetCreatorInfo
REXGetInfo
REXGetInfoFromBuffer
REXGetSliceInfo
REXRenderPreviewBatch
REXRenderSlice
REXSetOutputSampleRate
REXSetPreviewTempo
REXStartPreview
REXStopPreview

Sections

.text
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/Reverb.dll
.dll windows:4 windows x86 arch:x86

bd65ec4c173739c6ea5c9bffb160ec15

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3b:1a:05:80:04:78:2b:55:f8:ae:8e:a4:05:e1:7f:35:de:d3:e6:5e
Signer

Actual PE Digest

3b:1a:05:80:04:78:2b:55:f8:ae:8e:a4:05:e1:7f:35:de:d3:e6:5e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Exports

Exports

Process_Fruity_32FM_32FS
Process_UF_32FM_32FS

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/Reverb_x64.dll
.dll windows:4 windows x64 arch:x64

8b91309cfba9a6d437f29bb3fbe6069d

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:ef:fd:00:03:13:96:43:71:fa:2d:f6:3e:8d:24:d4:d6:2c:42:89
Signer

Actual PE Digest

2b:ef:fd:00:03:13:96:43:71:fa:2d:f6:3e:8d:24:d4:d6:2c:42:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
SetLastError
GetLastError
TlsSetValue
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlVirtualUnwind
RtlLookupFunctionEntry
HeapSize

Exports

Exports

Process_Fruity_32FM_32FS
Process_UF_32FM_32FS

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/SG.dll
.dll windows:5 windows x86 arch:x86

adfd1f074d1ad27cac50b1735a70221b

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f0:50:e6:c5:7e:c4:f7:78:30:ca:40:45:f5:f2:a1:a2:9b:39:95:ad
Signer

Actual PE Digest

f0:50:e6:c5:7e:c4:f7:78:30:ca:40:45:f5:f2:a1:a2:9b:39:95:ad

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCreateKeyExW
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameW
GetClipboardData
GetClipCursor
GetClientRect
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextA
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharUpperW
CharToOemBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AttachThreadInput
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcmpiW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
UnmapViewOfFile
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetDllDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReadFile
QueryDosDeviceW
OutputDebugStringW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
LockResource
LocalFree
LoadResource
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExW
GetVersion
GetUserDefaultLCID
GetTickCount
GetThreadPriority
GetThreadLocale
GetTempPathA
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringW
CloseHandle
Sleep
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetProcAddress
FreeLibrary

msimg32

AlphaBlend

gdi32

UnrealizeObject
TextOutW
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
OffsetRgn
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetRegionData
GetRandomRgn
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontFamiliesExW
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CloseEnhMetaFile
Chord
BitBlt
ArcTo
Arc
AngleArc

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW

shfolder

SHGetFolderPathA

ole32

CoCreateGuid
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
IsAccelerator
ReleaseStgMedium
OleDraw
OleSetMenuDescriptor
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoGetClassObject
CoUninitialize
CoInitialize
IsEqualGUID

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

shell32

SHGetFileInfoW
SHFileOperationW
ShellExecuteA
Shell_NotifyIconW
DragQueryPoint
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
ord18

msvcrt

memset
memcpy

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

winmm

timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod

msacm32

acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert
acmStreamMessage
acmStreamSize
acmStreamClose
acmStreamOpen
acmFormatSuggest
acmFormatChooseA
acmDriverDetailsA
acmDriverClose
acmDriverOpen
acmDriverEnum
acmMetrics

Exports

Exports

CreatePlugInstance

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$0/SG_x64.dll
.dll windows:5 windows x64 arch:x64

9239b0a79fe3a94ceb0aabb9c555655a

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:82:1f:ad:5b:7e:f1:06:68:75:23:1a:27:86:24:5f:1e:a0:2d:f2
Signer

Actual PE Digest

73:82:1f:ad:5b:7e:f1:06:68:75:23:1a:27:86:24:5f:1e:a0:2d:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCreateKeyExW
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
SetClassLongPtrW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
CreateWindowExW
WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameW
GetClipboardData
GetClipCursor
GetClientRect
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextA
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharUpperW
CharToOemBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AttachThreadInput
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow

kernel32

Sleep
VirtualFree
VirtualAlloc
HeapFree
HeapAlloc
GetProcessHeap
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcmpiW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
UnmapViewOfFile
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetDllDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReadFile
QueryDosDeviceW
OutputDebugStringW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
LockResource
LocalFree
LoadResource
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExW
GetVersion
GetUserDefaultLCID
GetTickCount
GetThreadPriority
GetThreadLocale
GetTempPathA
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringW
CloseHandle
Sleep
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetProcAddress
FreeLibrary
LoadLibraryA

msimg32

AlphaBlend

gdi32

UnrealizeObject
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
OffsetRgn
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetRegionData
GetRandomRgn
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtSelectClipRgn
ExtFloodFill
ExcludeClipRect
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseEnhMetaFile
Chord
BitBlt
ArcTo
Arc
AngleArc

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW

shfolder

SHGetFolderPathA

ole32

CoCreateGuid
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
IsAccelerator
ReleaseStgMedium
OleDraw
OleSetMenuDescriptor
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoGetClassObject
CoUninitialize
CoInitialize
IsEqualGUID

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW

shell32

SHGetFileInfoW
SHFileOperationW
ShellExecuteA
Shell_NotifyIconW
DragQueryPoint
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
ord18

msvcrt

memset
memcpy

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

winmm

timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod

msacm32

acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert
acmStreamMessage
acmStreamSize
acmStreamClose
acmStreamOpen
acmFormatSuggest
acmFormatChooseA
acmDriverDetailsA
acmDriverClose
acmDriverOpen
acmDriverEnum
acmMetrics

Exports

Exports

CreatePlugInstance

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 470KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$0/dsp_ipp.dll
.dll windows:6 windows x86 arch:x86

8b49e586d8b599a7a6e6c35b62d333e2

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c8:56:9a:5a:a4:c6:04:fc:ae:c2:4f:77:de:db:7c:96:97:a0:ad:86
Signer

Actual PE Digest

c8:56:9a:5a:a4:c6:04:fc:ae:c2:4f:77:de:db:7c:96:97:a0:ad:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetStringTypeW
FormatMessageA
GetThreadLocale
MulDiv
RtlUnwind
DecodePointer
EncodePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetStdHandle
GetModuleFileNameW
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
FlushFileBuffers
WriteConsoleW
MultiByteToWideChar
LoadLibraryW
HeapReAlloc
LCMapStringW
LoadLibraryA

user32

GetDC
ReleaseDC

gdi32

GetCurrentObject
GetKerningPairsA
GetGlyphOutlineW
DeleteObject
SelectObject
CreateFontA

Exports

Exports

AggCreateInstance
ippFree
ippGetNumThreads
ippInitCpu
ippMalloc
ippSetDenormAreZeros
ippSetFlushToZero
ippSetNumThreads
ippiAddC_8u_AC4RSfs
ippiAddC_8u_C3IRSfs
ippiAddC_8u_C3RSfs
ippiAddC_8u_C4IRSfs
ippiAlphaCompC_8u_AC4R
ippiAlphaCompC_8u_C3R
ippiAlphaCompC_8u_C4R
ippiAlphaComp_8u_AC4R
ippiAlphaPremul_8u_AC4IR
ippiAlphaPremul_8u_AC4R
ippiColorToGray_8u_AC4C1R
ippiColorToGray_8u_C3C1R
ippiCopyConstBorder_8u_C3R
ippiCopyConstBorder_8u_C4R
ippiCopyReplicateBorder_8u_C3R
ippiCopyReplicateBorder_8u_C4R
ippiCopy_8u_AC4C3R
ippiCopy_8u_C1C4R
ippiCopy_8u_C3AC4R
ippiCopy_8u_C3R
ippiCopy_8u_C4R
ippiCopy_8u_P3C3R
ippiFilterBox_8u_C1IR
ippiFilterBox_8u_C3IR
ippiFilterBox_8u_C3R
ippiFilterBox_8u_C4IR
ippiFilterBox_8u_C4R
ippiFilterGauss_8u_C4R
ippiFilterRoundGetBufSize32f_8u_C1R
ippiFilter_8u_C4R
ippiFilter_Round32f_8u_C1R
ippiMirror_8u_C3IR
ippiMirror_8u_C4IR
ippiMirror_8u_C4R
ippiMulC_8u_AC4RSfs
ippiMulC_8u_C1RSfs
ippiMulC_8u_C3IRSfs
ippiMulC_8u_C3RSfs
ippiMulC_8u_C4IRSfs
ippiMulC_8u_C4RSfs
ippiRGBToGray_8u_AC4C1R
ippiRemap_8u_C3R
ippiRemap_8u_C4R
ippiResizeCenter_8u_C3R
ippiResizeCenter_8u_C4R
ippiResizeGetBufSize
ippiResizeSqrPixelGetBufSize
ippiResizeSqrPixel_8u_C3R
ippiResizeSqrPixel_8u_C4R
ippiResize_8u_C3R
ippiResize_8u_C4R
ippiSet_8u_C3R
ippiSet_8u_C4R
ippiSubC_8u_C3IRSfs
ippiSubC_8u_C4IRSfs
ippiWarpAffineQuad_8u_C3R
ippiWarpAffineQuad_8u_C4R
ippiWarpAffine_8u_C3R
ippiWarpAffine_8u_C4R
ippiWarpBilinearQuad_8u_C3R
ippiWarpBilinearQuad_8u_C4R
ippiWarpPerspectiveQuad_8u_C3R
ippiWarpPerspectiveQuad_8u_C4R
ippsAbs_32f
ippsAbs_32f_I
ippsAbs_64f
ippsAbs_64f_I
ippsAddC_32f
ippsAddC_32f_I
ippsAddC_32fc
ippsAddC_64f
ippsAddC_64f_I
ippsAddProductC_32f
ippsAddProduct_32f
ippsAddProduct_32fc
ippsAddProduct_64f
ippsAddProduct_64fc
ippsAdd_32f
ippsAdd_32f_I
ippsAdd_64f
ippsAdd_64f_I
ippsAdd_64fc
ippsAdd_64fc_I
ippsAndC_32u_I
ippsArctan_32f_I
ippsAtan_32f_A11
ippsAtan_32f_A21
ippsAtan_32f_A24
ippsAtan_64f_A53
ippsAutoCorr_NormA_32f
ippsCbrt_32f_A11
ippsCbrt_32f_A21
ippsCbrt_32f_A24
ippsConjCcs_32fc
ippsConjCcs_32fc_I
ippsConjCcs_64fc
ippsConjCcs_64fc_I
ippsConjFlip_32fc
ippsConjFlip_64fc
ippsConjPack_32fc
ippsConjPack_32fc_I
ippsConjPack_64fc
ippsConjPack_64fc_I
ippsConjPerm_32fc
ippsConjPerm_32fc_I
ippsConjPerm_64fc
ippsConjPerm_64fc_I
ippsConj_32fc
ippsConj_32fc_I
ippsConj_64fc
ippsConj_64fc_I
ippsConvBiased_32f
ippsConvCyclic4x4_32f32fc
ippsConvCyclic8x8_32f
ippsConv_32f
ippsConv_64f
ippsConvert_16s32f
ippsConvert_16s32f_Sfs
ippsConvert_16s32s
ippsConvert_16s64f_Sfs
ippsConvert_24s32f
ippsConvert_24s32s
ippsConvert_32f16s_Sfs
ippsConvert_32f24s_Sfs
ippsConvert_32f32s_Sfs
ippsConvert_32f64f
ippsConvert_32f8u_Sfs
ippsConvert_32s16s_Sfs
ippsConvert_32s24s_Sfs
ippsConvert_32s32f
ippsConvert_32s32f_Sfs
ippsConvert_32s64f
ippsConvert_32s64f_Sfs
ippsConvert_64f32f
ippsConvert_64f32s_Sfs
ippsCopy_16s
ippsCopy_32f
ippsCopy_32s
ippsCopy_64f
ippsCopy_64s
ippsCopy_8u
ippsCos_32f_A11
ippsCos_32f_A21
ippsCos_32f_A24
ippsCos_64f_A26
ippsCos_64f_A50
ippsCos_64f_A53
ippsCplxToReal_32fc
ippsCplxToReal_64fc
ippsCrossCorr_32f
ippsDeinterleave_16s
ippsDeinterleave_32f
ippsDivCRev_32f_I
ippsDiv_32f_A11
ippsDiv_32f_A21
ippsDiv_32f_A24
ippsDiv_64f_A53
ippsExp_32f64f
ippsExp_32f_A11
ippsExp_32f_A21
ippsExp_32f_A24
ippsExp_32f_I
ippsExp_64f_A50
ippsExp_64f_A53
ippsExpm1_32f_A11
ippsExpm1_32f_A21
ippsExpm1_32f_A24
ippsFFTFree_R_32f
ippsFFTFree_R_64f
ippsFFTFwd_RToCCS_32f
ippsFFTFwd_RToCCS_32f_I
ippsFFTFwd_RToCCS_64f
ippsFFTFwd_RToCCS_64f_I
ippsFFTFwd_RToPack_32f
ippsFFTFwd_RToPack_32f_I
ippsFFTFwd_RToPack_64f
ippsFFTFwd_RToPack_64f_I
ippsFFTFwd_RToPerm_32f
ippsFFTFwd_RToPerm_32f_I
ippsFFTFwd_RToPerm_64f
ippsFFTFwd_RToPerm_64f_I
ippsFFTGetBufSize_R_32f
ippsFFTGetBufSize_R_64f
ippsFFTGetSize_R_32f
ippsFFTGetSize_R_64f
ippsFFTInitAlloc_R_32f
ippsFFTInitAlloc_R_64f
ippsFFTInit_R_32f
ippsFFTInit_R_64f
ippsFFTInv_CCSToR_32f
ippsFFTInv_CCSToR_32f_I
ippsFFTInv_CCSToR_64f
ippsFFTInv_CCSToR_64f_I
ippsFFTInv_PackToR_32f
ippsFFTInv_PackToR_32f_I
ippsFFTInv_PackToR_64f
ippsFFTInv_PackToR_64f_I
ippsFFTInv_PermToR_32f
ippsFFTInv_PermToR_32f_I
ippsFFTInv_PermToR_64f
ippsFFTInv_PermToR_64f_I
ippsFIR64f_32f
ippsFIR64f_32f_I
ippsFIRFree64f_32f
ippsFIRFree_32f
ippsFIRGenBandpass_64f
ippsFIRGenBandstop_64f
ippsFIRGenHighpass_64f
ippsFIRGenLowpass_64f
ippsFIRInitAlloc64f_32f
ippsFIRInitAlloc_32f
ippsFIRMRInitAlloc64f_32f
ippsFIRMRInitAlloc_32f
ippsFIRSetDlyLine64f_32f
ippsFIRSetDlyLine_32f
ippsFIRSetTaps64f_32f
ippsFIRSetTaps_32f
ippsFIR_32f
ippsFIR_32f_I
ippsFilterMedian_32f_I
ippsFlip_16u_I
ippsFlip_32f
ippsFlip_32f_I
ippsFlip_32fc_I
ippsFlip_64f_I
ippsIIR64f_32f
ippsIIR64f_32f_I
ippsIIRFree64f_32f
ippsIIRFree_32f
ippsIIRFree_32fc
ippsIIRGetDlyLine64f_32f
ippsIIRGetDlyLine_32f
ippsIIRGetDlyLine_32fc
ippsIIRInitAlloc64f_BiQuad_32f
ippsIIRInitAlloc_BiQuad_32f
ippsIIRInitAlloc_BiQuad_32fc
ippsIIRSetDlyLine64f_32f
ippsIIRSetDlyLine_32f
ippsIIRSetDlyLine_32fc
ippsIIRSetTaps64f_32f
ippsIIRSetTaps_32f
ippsIIRSetTaps_32fc
ippsIIR_32f
ippsIIR_32f_I
ippsIIR_32fc
ippsIIR_32fc_I
ippsImag_32fc
ippsImag_64fc
ippsInterleave_16s
ippsInterleave_32f
ippsInv_32f_A21
ippsInv_32f_A24
ippsLn_32f_A11
ippsLn_32f_A21
ippsLn_32f_A24
ippsLn_32f_I
ippsLn_64f32f
ippsLn_64f_A50
ippsLn_64f_A53
ippsLog10_32f_A11
ippsLog10_32f_A21
ippsLog10_32f_A24
ippsLog10_64f_A50
ippsLog10_64f_A53
ippsMagnitude_32fc
ippsMagnitude_64fc
ippsMaxAbs_16s
ippsMaxAbs_32s
ippsMax_16s
ippsMax_32f
ippsMax_32s
ippsMax_64f
ippsMinAbs_16s
ippsMinAbs_32s
ippsMinMax_16s
ippsMinMax_16u
ippsMinMax_32f
ippsMinMax_32s
ippsMinMax_32u
ippsMinMax_64f
ippsMinMax_8u
ippsMin_16s
ippsMin_32f
ippsMin_32s
ippsMin_64f
ippsMove_16s
ippsMove_32f
ippsMove_32s
ippsMove_64f
ippsMove_64s
ippsMove_8u
ippsMulC_32f
ippsMulC_32f_I
ippsMulC_64f
ippsMulC_64f_I
ippsMulC_64fc
ippsMulC_64fc_I
ippsMulPack_32f
ippsMulPack_32f_I
ippsMulPack_64f
ippsMulPack_64f_I
ippsMul_32f
ippsMul_32f32fc
ippsMul_32f32fc_I
ippsMul_32f_I
ippsMul_32fc
ippsMul_32fc_I
ippsMul_64f
ippsMul_64f_I
ippsMul_64fc
ippsMul_64fc_I
ippsOrC_32u_I
ippsPhase_32f
ippsPhase_32fc
ippsPhase_64f
ippsPhase_64fc
ippsPow_32f_A11
ippsPow_32f_A21
ippsPow_32f_A24
ippsPowerSpectr_32fc
ippsPowerSpectr_64fc
ippsPowx_32f_A11
ippsPowx_32f_A21
ippsPowx_32f_A24
ippsPowx_64f_A53
ippsRandGauss_Direct_32f
ippsRandGauss_Direct_64f
ippsRandUniform_Direct_32f
ippsRandUniform_Direct_64f
ippsRealToCplx_32f
ippsRealToCplx_64f
ippsReal_32fc
ippsReal_64fc
ippsRound_32f
ippsRound_64f
ippsSet_16s
ippsSet_16sc
ippsSet_32f
ippsSet_32fc
ippsSet_32s
ippsSet_32sc
ippsSet_64f
ippsSet_64fc
ippsSet_64s
ippsSet_64sc
ippsSet_8u
ippsSinCos_32f_A11
ippsSinCos_32f_A21
ippsSinCos_32f_A24
ippsSinCos_64f_A26
ippsSinCos_64f_A50
ippsSinCos_64f_A53
ippsSin_32f_A11
ippsSin_32f_A21
ippsSin_32f_A24
ippsSin_64f_A26
ippsSin_64f_A50
ippsSin_64f_A53
ippsSqr_32f
ippsSqr_32f_I
ippsSqr_64f
ippsSqr_64f_I
ippsSqrt_32f
ippsSqrt_32f_A11
ippsSqrt_32f_A21
ippsSqrt_32f_A24
ippsSqrt_32f_I
ippsSqrt_64f
ippsSqrt_64f_A50
ippsSqrt_64f_A53
ippsSqrt_64f_I
ippsSubCRev_32f
ippsSubCRev_32f_I
ippsSubCRev_64f_I
ippsSub_32f
ippsSub_32f_I
ippsSub_64f
ippsSub_64f_I
ippsSum_32f
ippsSum_64f
ippsSwapBytes_16u
ippsSwapBytes_16u_I
ippsSwapBytes_24u
ippsSwapBytes_24u_I
ippsSwapBytes_32u
ippsSwapBytes_32u_I
ippsTanh_32f_A11
ippsTanh_32f_A21
ippsTanh_32f_A24
ippsThreshold_GTAbs_32f
ippsThreshold_GTAbs_32f_I
ippsThreshold_GTVal_32f
ippsThreshold_GTVal_32f_I
ippsThreshold_GT_32f
ippsThreshold_GT_32f_I
ippsThreshold_GT_32s
ippsThreshold_GT_32s_I
ippsThreshold_GT_64f_I
ippsThreshold_LTAbs_32f
ippsThreshold_LTAbs_32f_I
ippsThreshold_LTValGTVal_32f
ippsThreshold_LTValGTVal_32f_I
ippsThreshold_LTValGTVal_32s
ippsThreshold_LTValGTVal_32s_I
ippsThreshold_LTVal_32f
ippsThreshold_LTVal_32f_I
ippsThreshold_LTVal_64f
ippsThreshold_LTVal_64f_I
ippsThreshold_LT_32f
ippsThreshold_LT_32f_I
ippsThreshold_LT_32s
ippsThreshold_LT_32s_I
ippsThreshold_LT_64f_I
ippsTone_Direct_32f
ippsTone_Direct_32fc
ippsTone_Direct_64f
ippsTriangle_Direct_32f
ippsTriangle_Direct_32fc
ippsTrunc_32f
ippsTrunc_64f
ippsVectorRamp_32f
ippsVectorRamp_64f
ippsVectorSlope_32f
ippsVectorSlope_32s
ippsVectorSlope_64f
ippsWinKaiser_32f_I
ippsWinKaiser_64f_I
ippsXorC_32u_I
ippsZero_16s
ippsZero_32f
ippsZero_32s
ippsZero_64f
ippsZero_64s
ippsZero_8u

Sections

.text
Size: 17.3MB - Virtual size: 17.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IPPDATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/dsp_ipp_x64.dll
.dll windows:6 windows x64 arch:x64

69b32ccd0020f4bad23e05ee674f1130

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7a:ea:36:24:59:25:29:e0:cd:1d:f9:c3:30:a0:df:a2:bf:8b:09:1c
Signer

Actual PE Digest

7a:ea:36:24:59:25:29:e0:cd:1d:f9:c3:30:a0:df:a2:bf:8b:09:1c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetStringTypeW
HeapReAlloc
CreateFileW
LCMapStringW
MulDiv
FormatMessageA
GetThreadLocale
LoadLibraryA
RtlLookupFunctionEntry
RtlUnwindEx
DecodePointer
EncodePointer
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetLastError
HeapFree
HeapAlloc
RaiseException
RtlPcToFileHeader
FlsGetValue
FlsFree
SetLastError
FlsAlloc
InitializeCriticalSectionAndSpinCount
CloseHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetStdHandle
GetModuleFileNameW
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
FlushFileBuffers
WriteConsoleW
MultiByteToWideChar
LoadLibraryW

user32

GetDC
ReleaseDC

gdi32

GetCurrentObject
GetKerningPairsA
GetGlyphOutlineW
DeleteObject
SelectObject
CreateFontA

Exports

Exports

AggCreateInstance
ippFree
ippGetNumThreads
ippInitCpu
ippMalloc
ippSetDenormAreZeros
ippSetFlushToZero
ippSetNumThreads
ippiAddC_8u_AC4RSfs
ippiAddC_8u_C3IRSfs
ippiAddC_8u_C3RSfs
ippiAddC_8u_C4IRSfs
ippiAlphaCompC_8u_AC4R
ippiAlphaCompC_8u_C3R
ippiAlphaCompC_8u_C4R
ippiAlphaComp_8u_AC4R
ippiAlphaPremul_8u_AC4IR
ippiAlphaPremul_8u_AC4R
ippiColorToGray_8u_AC4C1R
ippiColorToGray_8u_C3C1R
ippiCopyConstBorder_8u_C3R
ippiCopyConstBorder_8u_C4R
ippiCopyReplicateBorder_8u_C3R
ippiCopyReplicateBorder_8u_C4R
ippiCopy_8u_AC4C3R
ippiCopy_8u_C1C4R
ippiCopy_8u_C3AC4R
ippiCopy_8u_C3R
ippiCopy_8u_C4R
ippiCopy_8u_P3C3R
ippiFilterBox_8u_C1IR
ippiFilterBox_8u_C3IR
ippiFilterBox_8u_C3R
ippiFilterBox_8u_C4IR
ippiFilterBox_8u_C4R
ippiFilterGauss_8u_C4R
ippiFilterRoundGetBufSize32f_8u_C1R
ippiFilter_8u_C4R
ippiFilter_Round32f_8u_C1R
ippiMirror_8u_C3IR
ippiMirror_8u_C4IR
ippiMirror_8u_C4R
ippiMulC_8u_AC4RSfs
ippiMulC_8u_C1RSfs
ippiMulC_8u_C3IRSfs
ippiMulC_8u_C3RSfs
ippiMulC_8u_C4IRSfs
ippiMulC_8u_C4RSfs
ippiRGBToGray_8u_AC4C1R
ippiRemap_8u_C3R
ippiRemap_8u_C4R
ippiResizeCenter_8u_C3R
ippiResizeCenter_8u_C4R
ippiResizeGetBufSize
ippiResizeSqrPixelGetBufSize
ippiResizeSqrPixel_8u_C3R
ippiResizeSqrPixel_8u_C4R
ippiResize_8u_C3R
ippiResize_8u_C4R
ippiSet_8u_C3R
ippiSet_8u_C4R
ippiSubC_8u_C3IRSfs
ippiSubC_8u_C4IRSfs
ippiWarpAffineQuad_8u_C3R
ippiWarpAffineQuad_8u_C4R
ippiWarpAffine_8u_C3R
ippiWarpAffine_8u_C4R
ippiWarpBilinearQuad_8u_C3R
ippiWarpBilinearQuad_8u_C4R
ippiWarpPerspectiveQuad_8u_C3R
ippiWarpPerspectiveQuad_8u_C4R
ippsAbs_32f
ippsAbs_32f_I
ippsAbs_64f
ippsAbs_64f_I
ippsAddC_32f
ippsAddC_32f_I
ippsAddC_32fc
ippsAddC_64f
ippsAddC_64f_I
ippsAddProductC_32f
ippsAddProduct_32f
ippsAddProduct_32fc
ippsAddProduct_64f
ippsAddProduct_64fc
ippsAdd_32f
ippsAdd_32f_I
ippsAdd_64f
ippsAdd_64f_I
ippsAdd_64fc
ippsAdd_64fc_I
ippsAndC_32u_I
ippsArctan_32f_I
ippsAtan_32f_A11
ippsAtan_32f_A21
ippsAtan_32f_A24
ippsAtan_64f_A53
ippsAutoCorr_NormA_32f
ippsCbrt_32f_A11
ippsCbrt_32f_A21
ippsCbrt_32f_A24
ippsConjCcs_32fc
ippsConjCcs_32fc_I
ippsConjCcs_64fc
ippsConjCcs_64fc_I
ippsConjFlip_32fc
ippsConjFlip_64fc
ippsConjPack_32fc
ippsConjPack_32fc_I
ippsConjPack_64fc
ippsConjPack_64fc_I
ippsConjPerm_32fc
ippsConjPerm_32fc_I
ippsConjPerm_64fc
ippsConjPerm_64fc_I
ippsConj_32fc
ippsConj_32fc_I
ippsConj_64fc
ippsConj_64fc_I
ippsConvBiased_32f
ippsConvCyclic4x4_32f32fc
ippsConvCyclic8x8_32f
ippsConv_32f
ippsConv_64f
ippsConvert_16s32f
ippsConvert_16s32f_Sfs
ippsConvert_16s32s
ippsConvert_16s64f_Sfs
ippsConvert_24s32f
ippsConvert_24s32s
ippsConvert_32f16s_Sfs
ippsConvert_32f24s_Sfs
ippsConvert_32f32s_Sfs
ippsConvert_32f64f
ippsConvert_32f8u_Sfs
ippsConvert_32s16s_Sfs
ippsConvert_32s24s_Sfs
ippsConvert_32s32f
ippsConvert_32s32f_Sfs
ippsConvert_32s64f
ippsConvert_32s64f_Sfs
ippsConvert_64f32f
ippsConvert_64f32s_Sfs
ippsCopy_16s
ippsCopy_32f
ippsCopy_32s
ippsCopy_64f
ippsCopy_64s
ippsCopy_8u
ippsCos_32f_A11
ippsCos_32f_A21
ippsCos_32f_A24
ippsCos_64f_A26
ippsCos_64f_A50
ippsCos_64f_A53
ippsCplxToReal_32fc
ippsCplxToReal_64fc
ippsCrossCorr_32f
ippsDeinterleave_16s
ippsDeinterleave_32f
ippsDivCRev_32f_I
ippsDiv_32f_A11
ippsDiv_32f_A21
ippsDiv_32f_A24
ippsDiv_64f_A53
ippsExp_32f64f
ippsExp_32f_A11
ippsExp_32f_A21
ippsExp_32f_A24
ippsExp_32f_I
ippsExp_64f_A50
ippsExp_64f_A53
ippsExpm1_32f_A11
ippsExpm1_32f_A21
ippsExpm1_32f_A24
ippsFFTFree_R_32f
ippsFFTFree_R_64f
ippsFFTFwd_RToCCS_32f
ippsFFTFwd_RToCCS_32f_I
ippsFFTFwd_RToCCS_64f
ippsFFTFwd_RToCCS_64f_I
ippsFFTFwd_RToPack_32f
ippsFFTFwd_RToPack_32f_I
ippsFFTFwd_RToPack_64f
ippsFFTFwd_RToPack_64f_I
ippsFFTFwd_RToPerm_32f
ippsFFTFwd_RToPerm_32f_I
ippsFFTFwd_RToPerm_64f
ippsFFTFwd_RToPerm_64f_I
ippsFFTGetBufSize_R_32f
ippsFFTGetBufSize_R_64f
ippsFFTGetSize_R_32f
ippsFFTGetSize_R_64f
ippsFFTInitAlloc_R_32f
ippsFFTInitAlloc_R_64f
ippsFFTInit_R_32f
ippsFFTInit_R_64f
ippsFFTInv_CCSToR_32f
ippsFFTInv_CCSToR_32f_I
ippsFFTInv_CCSToR_64f
ippsFFTInv_CCSToR_64f_I
ippsFFTInv_PackToR_32f
ippsFFTInv_PackToR_32f_I
ippsFFTInv_PackToR_64f
ippsFFTInv_PackToR_64f_I
ippsFFTInv_PermToR_32f
ippsFFTInv_PermToR_32f_I
ippsFFTInv_PermToR_64f
ippsFFTInv_PermToR_64f_I
ippsFIR64f_32f
ippsFIR64f_32f_I
ippsFIRFree64f_32f
ippsFIRFree_32f
ippsFIRGenBandpass_64f
ippsFIRGenBandstop_64f
ippsFIRGenHighpass_64f
ippsFIRGenLowpass_64f
ippsFIRInitAlloc64f_32f
ippsFIRInitAlloc_32f
ippsFIRMRInitAlloc64f_32f
ippsFIRMRInitAlloc_32f
ippsFIRSetDlyLine64f_32f
ippsFIRSetDlyLine_32f
ippsFIRSetTaps64f_32f
ippsFIRSetTaps_32f
ippsFIR_32f
ippsFIR_32f_I
ippsFilterMedian_32f_I
ippsFlip_16u_I
ippsFlip_32f
ippsFlip_32f_I
ippsFlip_32fc_I
ippsFlip_64f_I
ippsIIR64f_32f
ippsIIR64f_32f_I
ippsIIRFree64f_32f
ippsIIRFree_32f
ippsIIRFree_32fc
ippsIIRGetDlyLine64f_32f
ippsIIRGetDlyLine_32f
ippsIIRGetDlyLine_32fc
ippsIIRInitAlloc64f_BiQuad_32f
ippsIIRInitAlloc_BiQuad_32f
ippsIIRInitAlloc_BiQuad_32fc
ippsIIRSetDlyLine64f_32f
ippsIIRSetDlyLine_32f
ippsIIRSetDlyLine_32fc
ippsIIRSetTaps64f_32f
ippsIIRSetTaps_32f
ippsIIRSetTaps_32fc
ippsIIR_32f
ippsIIR_32f_I
ippsIIR_32fc
ippsIIR_32fc_I
ippsImag_32fc
ippsImag_64fc
ippsInterleave_16s
ippsInterleave_32f
ippsInv_32f_A21
ippsInv_32f_A24
ippsLn_32f_A11
ippsLn_32f_A21
ippsLn_32f_A24
ippsLn_32f_I
ippsLn_64f32f
ippsLn_64f_A50
ippsLn_64f_A53
ippsLog10_32f_A11
ippsLog10_32f_A21
ippsLog10_32f_A24
ippsLog10_64f_A50
ippsLog10_64f_A53
ippsMagnitude_32fc
ippsMagnitude_64fc
ippsMaxAbs_16s
ippsMaxAbs_32s
ippsMax_16s
ippsMax_32f
ippsMax_32s
ippsMax_64f
ippsMinAbs_16s
ippsMinAbs_32s
ippsMinMax_16s
ippsMinMax_16u
ippsMinMax_32f
ippsMinMax_32s
ippsMinMax_32u
ippsMinMax_64f
ippsMinMax_8u
ippsMin_16s
ippsMin_32f
ippsMin_32s
ippsMin_64f
ippsMove_16s
ippsMove_32f
ippsMove_32s
ippsMove_64f
ippsMove_64s
ippsMove_8u
ippsMulC_32f
ippsMulC_32f_I
ippsMulC_64f
ippsMulC_64f_I
ippsMulC_64fc
ippsMulC_64fc_I
ippsMulPack_32f
ippsMulPack_32f_I
ippsMulPack_64f
ippsMulPack_64f_I
ippsMul_32f
ippsMul_32f32fc
ippsMul_32f32fc_I
ippsMul_32f_I
ippsMul_32fc
ippsMul_32fc_I
ippsMul_64f
ippsMul_64f_I
ippsMul_64fc
ippsMul_64fc_I
ippsOrC_32u_I
ippsPhase_32f
ippsPhase_32fc
ippsPhase_64f
ippsPhase_64fc
ippsPow_32f_A11
ippsPow_32f_A21
ippsPow_32f_A24
ippsPowerSpectr_32fc
ippsPowerSpectr_64fc
ippsPowx_32f_A11
ippsPowx_32f_A21
ippsPowx_32f_A24
ippsPowx_64f_A53
ippsRandGauss_Direct_32f
ippsRandGauss_Direct_64f
ippsRandUniform_Direct_32f
ippsRandUniform_Direct_64f
ippsRealToCplx_32f
ippsRealToCplx_64f
ippsReal_32fc
ippsReal_64fc
ippsRound_32f
ippsRound_64f
ippsSet_16s
ippsSet_16sc
ippsSet_32f
ippsSet_32fc
ippsSet_32s
ippsSet_32sc
ippsSet_64f
ippsSet_64fc
ippsSet_64s
ippsSet_64sc
ippsSet_8u
ippsSinCos_32f_A11
ippsSinCos_32f_A21
ippsSinCos_32f_A24
ippsSinCos_64f_A26
ippsSinCos_64f_A50
ippsSinCos_64f_A53
ippsSin_32f_A11
ippsSin_32f_A21
ippsSin_32f_A24
ippsSin_64f_A26
ippsSin_64f_A50
ippsSin_64f_A53
ippsSqr_32f
ippsSqr_32f_I
ippsSqr_64f
ippsSqr_64f_I
ippsSqrt_32f
ippsSqrt_32f_A11
ippsSqrt_32f_A21
ippsSqrt_32f_A24
ippsSqrt_32f_I
ippsSqrt_64f
ippsSqrt_64f_A50
ippsSqrt_64f_A53
ippsSqrt_64f_I
ippsSubCRev_32f
ippsSubCRev_32f_I
ippsSubCRev_64f_I
ippsSub_32f
ippsSub_32f_I
ippsSub_64f
ippsSub_64f_I
ippsSum_32f
ippsSum_64f
ippsSwapBytes_16u
ippsSwapBytes_16u_I
ippsSwapBytes_24u
ippsSwapBytes_24u_I
ippsSwapBytes_32u
ippsSwapBytes_32u_I
ippsTanh_32f_A11
ippsTanh_32f_A21
ippsTanh_32f_A24
ippsThreshold_GTAbs_32f
ippsThreshold_GTAbs_32f_I
ippsThreshold_GTVal_32f
ippsThreshold_GTVal_32f_I
ippsThreshold_GT_32f
ippsThreshold_GT_32f_I
ippsThreshold_GT_32s
ippsThreshold_GT_32s_I
ippsThreshold_GT_64f_I
ippsThreshold_LTAbs_32f
ippsThreshold_LTAbs_32f_I
ippsThreshold_LTValGTVal_32f
ippsThreshold_LTValGTVal_32f_I
ippsThreshold_LTValGTVal_32s
ippsThreshold_LTValGTVal_32s_I
ippsThreshold_LTVal_32f
ippsThreshold_LTVal_32f_I
ippsThreshold_LTVal_64f
ippsThreshold_LTVal_64f_I
ippsThreshold_LT_32f
ippsThreshold_LT_32f_I
ippsThreshold_LT_32s
ippsThreshold_LT_32s_I
ippsThreshold_LT_64f_I
ippsTone_Direct_32f
ippsTone_Direct_32fc
ippsTone_Direct_64f
ippsTriangle_Direct_32f
ippsTriangle_Direct_32fc
ippsTrunc_32f
ippsTrunc_64f
ippsVectorRamp_32f
ippsVectorRamp_64f
ippsVectorSlope_32f
ippsVectorSlope_32s
ippsVectorSlope_64f
ippsWinKaiser_32f_I
ippsWinKaiser_64f_I
ippsXorC_32u_I
ippsZero_16s
ippsZero_32f
ippsZero_32s
ippsZero_64f
ippsZero_64s
ippsZero_8u

Sections

.text
Size: 20.1MB - Virtual size: 20.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 487KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 549KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IPPDATA
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/elastique_x64.dll
.dll windows:5 windows x64 arch:x64

a2a1619283853bc492d58190572a9da9

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f3:48:99:f3:af:2e:14:da:63:53:3b:55:b3:ef:ac:2f:47:1f:d0:5f
Signer

Actual PE Digest

f3:48:99:f3:af:2e:14:da:63:53:3b:55:b3:ef:ac:2f:47:1f:d0:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\ImageLine\fred\SDKs\zplane\vc\x64\Release\elastique.pdb

Imports

ws2_32

ntohl
htonl

kernel32

SetUnhandledExceptionFilter
CloseHandle
CreateFileW
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
WriteFile
GetModuleFileNameW
IsProcessorFeaturePresent
IsDebuggerPresent
SetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
HeapSize
HeapQueryInformation
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers

Exports

Exports

Auftakt_CreateInstance
Auftakt_CreateInstance2
ElCreateInstance
ElDestroyInstance
ElFlushBuffer
ElGetFramesBuffered
ElGetFramesNeeded
ElGetFramesNeededMod
ElProDirect_CreateInstance
ElPro_CreateInstance
ElProcessData
ElReset
ElSetCutOffFreq
ElSetStereoInputMode
ElSetStretchPitchQFactor
ElSetStretchQPitchFactor
Metering_CreateInstance
SolPitchAn_CreateInstance
SolPitchAn_CreatePitchMarks

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/freetype.dll
.dll windows:4 windows x86 arch:x86

bcf0865ab946dc4c8e9f7b347fd3ec31

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:0d:bc:19:02:72:05:6c:6f:c6:01:ca:3f:ac:15:0c:28:eb:2b:c4
Signer

Actual PE Digest

e3:0d:bc:19:02:72:05:6c:6f:c6:01:ca:3f:ac:15:0c:28:eb:2b:c4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
CloseHandle
MultiByteToWideChar
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
LoadLibraryA
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile

Exports

Exports

FTC_CMapCache_Lookup
FTC_CMapCache_New
FTC_ImageCache_Lookup
FTC_ImageCache_LookupScaler
FTC_ImageCache_New
FTC_Image_Cache_Lookup
FTC_Image_Cache_New
FTC_Manager_Done
FTC_Manager_LookupFace
FTC_Manager_LookupSize
FTC_Manager_Lookup_Face
FTC_Manager_Lookup_Size
FTC_Manager_New
FTC_Manager_RemoveFaceID
FTC_Manager_Reset
FTC_Node_Unref
FTC_SBitCache_Lookup
FTC_SBitCache_LookupScaler
FTC_SBitCache_New
FTC_SBit_Cache_Lookup
FTC_SBit_Cache_New
FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Alloc
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_New
FT_CMap_Done
FT_CMap_New
FT_CeilFix
FT_ClassicKern_Free
FT_ClassicKern_Validate
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_GlyphSlot
FT_Done_Library
FT_Done_Memory
FT_Done_Size
FT_Face_CheckTrueTypePatents
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_SetUnpatentedHinting
FT_FloorFix
FT_Free
FT_Get_Advance
FT_Get_Advances
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_FSType_Flags
FT_Get_First_Char
FT_Get_Gasp
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Var
FT_Get_Module
FT_Get_Module_Interface
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PFR_Advance
FT_Get_PFR_Kerning
FT_Get_PFR_Metrics
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_TrueType_Engine_Type
FT_Get_WinFNT_Header
FT_Get_X11_Font_Format
FT_GlyphLoader_Add
FT_GlyphLoader_CheckPoints
FT_GlyphLoader_CheckSubGlyphs
FT_GlyphLoader_CopyPoints
FT_GlyphLoader_CreateExtra
FT_GlyphLoader_Done
FT_GlyphLoader_New
FT_GlyphLoader_Prepare
FT_GlyphLoader_Reset
FT_GlyphLoader_Rewind
FT_GlyphSlot_Embolden
FT_GlyphSlot_Oblique
FT_GlyphSlot_Own_Bitmap
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Lookup_Renderer
FT_Match_Size
FT_Matrix_Invert
FT_Matrix_Multiply
FT_Matrix_Multiply_Scaled
FT_MulDiv
FT_MulDiv_No_Round
FT_New_Face
FT_New_GlyphSlot
FT_New_Library
FT_New_Memory
FT_New_Memory_Face
FT_New_Size
FT_OpenType_Free
FT_OpenType_Validate
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Done_Internal
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_BBox
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_New_Internal
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_QAlloc
FT_QRealloc
FT_Raccess_Get_DataOffsets
FT_Raccess_Get_HeaderInfo
FT_Raccess_Guess
FT_Realloc
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Render_Glyph_Internal
FT_Request_Metrics
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Metrics
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Sqrt32
FT_SqrtFixed
FT_Stream_Close
FT_Stream_EnterFrame
FT_Stream_ExitFrame
FT_Stream_ExtractFrame
FT_Stream_Free
FT_Stream_GetChar
FT_Stream_GetULong
FT_Stream_GetULongLE
FT_Stream_GetUOffset
FT_Stream_GetUShort
FT_Stream_GetUShortLE
FT_Stream_New
FT_Stream_Open
FT_Stream_OpenGzip
FT_Stream_OpenLZW
FT_Stream_OpenMemory
FT_Stream_Pos
FT_Stream_Read
FT_Stream_ReadAt
FT_Stream_ReadChar
FT_Stream_ReadFields
FT_Stream_ReadULong
FT_Stream_ReadULongLE
FT_Stream_ReadUOffset
FT_Stream_ReadUShort
FT_Stream_ReadUShortLE
FT_Stream_ReleaseFrame
FT_Stream_Seek
FT_Stream_Skip
FT_Stream_TryRead
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_TrueTypeGX_Free
FT_TrueTypeGX_Validate
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Transform_Scaled
FT_Vector_Unit
TT_New_Context
TT_RunIns
ft_corner_is_flat
ft_corner_orientation
ft_glyphslot_alloc_bitmap
ft_glyphslot_free_bitmap
ft_glyphslot_set_bitmap
ft_highpow2
ft_mem_alloc
ft_mem_dup
ft_mem_free
ft_mem_qalloc
ft_mem_qrealloc
ft_mem_realloc
ft_mem_strcpyn
ft_mem_strdup
ft_module_get_service
ft_service_list_lookup
ft_stub_set_char_sizes
ft_stub_set_pixel_sizes
ft_synthesize_vertical_metrics
ft_validator_error
ft_validator_init
ft_validator_run
ftc_node_destroy

Sections

.text
Size: 340KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/freetype_x64.dll
.dll windows:4 windows x64 arch:x64

c0ffb3280487bf8c3d98531f7c8d3c9b

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

40:38:b6:c5:2e:bf:94:6d:8a:81:87:78:f4:87:dc:1d:d4:8a:e5:8d
Signer

Actual PE Digest

40:38:b6:c5:2e:bf:94:6d:8a:81:87:78:f4:87:dc:1d:d4:8a:e5:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwindEx
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
HeapSize
CloseHandle
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile

Exports

Exports

FTC_CMapCache_Lookup
FTC_CMapCache_New
FTC_ImageCache_Lookup
FTC_ImageCache_LookupScaler
FTC_ImageCache_New
FTC_Image_Cache_Lookup
FTC_Image_Cache_New
FTC_Manager_Done
FTC_Manager_LookupFace
FTC_Manager_LookupSize
FTC_Manager_Lookup_Face
FTC_Manager_Lookup_Size
FTC_Manager_New
FTC_Manager_RemoveFaceID
FTC_Manager_Reset
FTC_Node_Unref
FTC_SBitCache_Lookup
FTC_SBitCache_LookupScaler
FTC_SBitCache_New
FTC_SBit_Cache_Lookup
FTC_SBit_Cache_New
FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Alloc
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_New
FT_CMap_Done
FT_CMap_New
FT_CeilFix
FT_ClassicKern_Free
FT_ClassicKern_Validate
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_GlyphSlot
FT_Done_Library
FT_Done_Memory
FT_Done_Size
FT_Face_CheckTrueTypePatents
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_SetUnpatentedHinting
FT_FloorFix
FT_Free
FT_Get_Advance
FT_Get_Advances
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_FSType_Flags
FT_Get_First_Char
FT_Get_Gasp
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Var
FT_Get_Module
FT_Get_Module_Interface
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PFR_Advance
FT_Get_PFR_Kerning
FT_Get_PFR_Metrics
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_TrueType_Engine_Type
FT_Get_WinFNT_Header
FT_Get_X11_Font_Format
FT_GlyphLoader_Add
FT_GlyphLoader_CheckPoints
FT_GlyphLoader_CheckSubGlyphs
FT_GlyphLoader_CopyPoints
FT_GlyphLoader_CreateExtra
FT_GlyphLoader_Done
FT_GlyphLoader_New
FT_GlyphLoader_Prepare
FT_GlyphLoader_Reset
FT_GlyphLoader_Rewind
FT_GlyphSlot_Embolden
FT_GlyphSlot_Oblique
FT_GlyphSlot_Own_Bitmap
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Lookup_Renderer
FT_Match_Size
FT_Matrix_Invert
FT_Matrix_Multiply
FT_Matrix_Multiply_Scaled
FT_MulDiv
FT_MulDiv_No_Round
FT_MulFix
FT_New_Face
FT_New_GlyphSlot
FT_New_Library
FT_New_Memory
FT_New_Memory_Face
FT_New_Size
FT_OpenType_Free
FT_OpenType_Validate
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Done_Internal
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_BBox
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_New_Internal
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_QAlloc
FT_QRealloc
FT_Raccess_Get_DataOffsets
FT_Raccess_Get_HeaderInfo
FT_Raccess_Guess
FT_Realloc
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Render_Glyph_Internal
FT_Request_Metrics
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Metrics
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Sqrt32
FT_SqrtFixed
FT_Stream_Close
FT_Stream_EnterFrame
FT_Stream_ExitFrame
FT_Stream_ExtractFrame
FT_Stream_Free
FT_Stream_GetChar
FT_Stream_GetULong
FT_Stream_GetULongLE
FT_Stream_GetUOffset
FT_Stream_GetUShort
FT_Stream_GetUShortLE
FT_Stream_New
FT_Stream_Open
FT_Stream_OpenGzip
FT_Stream_OpenLZW
FT_Stream_OpenMemory
FT_Stream_Pos
FT_Stream_Read
FT_Stream_ReadAt
FT_Stream_ReadChar
FT_Stream_ReadFields
FT_Stream_ReadULong
FT_Stream_ReadULongLE
FT_Stream_ReadUOffset
FT_Stream_ReadUShort
FT_Stream_ReadUShortLE
FT_Stream_ReleaseFrame
FT_Stream_Seek
FT_Stream_Skip
FT_Stream_TryRead
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_TrueTypeGX_Free
FT_TrueTypeGX_Validate
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Transform_Scaled
FT_Vector_Unit
TT_New_Context
TT_RunIns
ft_corner_is_flat
ft_corner_orientation
ft_glyphslot_alloc_bitmap
ft_glyphslot_free_bitmap
ft_glyphslot_set_bitmap
ft_highpow2
ft_mem_alloc
ft_mem_dup
ft_mem_free
ft_mem_qalloc
ft_mem_qrealloc
ft_mem_realloc
ft_mem_strcpyn
ft_mem_strdup
ft_module_get_service
ft_service_list_lookup
ft_stub_set_char_sizes
ft_stub_set_pixel_sizes
ft_synthesize_vertical_metrics
ft_validator_error
ft_validator_init
ft_validator_run
ftc_node_destroy

Sections

.text
Size: 397KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/oggio.dll
.dll windows:4 windows x86 arch:x86

d9c287a15b4f325845ba12f6df6e05d7

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9e:18:f2:68:e6:c7:f7:d6:ed:4f:ce:a5:2a:2f:47:5a:49:f7:60:70
Signer

Actual PE Digest

9e:18:f2:68:e6:c7:f7:d6:ed:4f:ce:a5:2a:2f:47:5a:49:f7:60:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RtlUnwind
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
MultiByteToWideChar
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
RaiseException
LoadLibraryA
InitializeCriticalSection
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile

Exports

Exports

?FlacSaveEncode@@YGJPAUTFlacSaveHandle@@PAMJ@Z
?FlacSaveFinish@@YGJPAUTFlacSaveHandle@@@Z
?FlacSaveInit@@YGJPADPAUTOggioSaveFileInfo@@PAPAUTFlacSaveHandle@@@Z
OggioFreeInfo
OggioLoadFile
OggioSaveEncode
OggioSaveFinish
OggioSaveInit

Sections

.text
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024KB - Virtual size: 1021KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/oggio_x64.dll
.dll windows:4 windows x64 arch:x64

0fdca9c1c366492184b19efeacd4d90f

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

00:f8:23:f5:11:2d:6c:9d:2a:d4:83:a6:0b:c4:83:26:5a:bd:c9:15
Signer

Actual PE Digest

00:f8:23:f5:11:2d:6c:9d:2a:d4:83:a6:0b:c4:83:26:5a:bd:c9:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
HeapSetInformation
HeapCreate
HeapDestroy
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WriteFile
GetStdHandle
GetModuleFileNameA
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
CloseHandle
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
HeapSize
MultiByteToWideChar
ReadFile
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
RaiseException
LoadLibraryA
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile

Exports

Exports

?FlacSaveEncode@@YAJPEAUTFlacSaveHandle@@PEAMJ@Z
?FlacSaveFinish@@YAJPEAUTFlacSaveHandle@@@Z
?FlacSaveInit@@YAJPEADPEAUTOggioSaveFileInfo@@PEAPEAUTFlacSaveHandle@@@Z
OggioFreeInfo
OggioLoadFile
OggioSaveEncode
OggioSaveFinish
OggioSaveInit

Sections

.text
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/steam_api.dll
.dll windows:5 windows x86 arch:x86

4b75e8f71ef7ec9d7921abd4eaff587d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:a9:38:ed:c7:ae:ac:8d:c7:1d:cb:b4:b4:f6:11:f8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/09/2012, 00:00

Not After

23/11/2015, 23:59

Subject

CN=Valve,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Valve,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

bc:46:bb:cb:f4:d4:71:91:73:23:bc:54:91:88:8c:4c:f6:d0:a2:6d
Signer

Actual PE Digest

bc:46:bb:cb:f4:d4:71:91:73:23:bc:54:91:88:8c:4c:f6:d0:a2:6d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_win32\build\src\steam_api\Release\steam_api.pdb

Imports

kernel32

CloseHandle
LoadLibraryExA
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
GetCommandLineA
CreateMutexA
OpenProcess
GetModuleFileNameA
GetModuleHandleA
OutputDebugStringA
GetEnvironmentVariableA
SetEnvironmentVariableA
WaitForSingleObject
ReleaseMutex
GetExitCodeProcess
GetProcAddress
GetProcessHeap
SetEndOfFile
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
HeapCreate
HeapDestroy
ExitProcess
IsProcessorFeaturePresent
Sleep
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
CreateFileA
LCMapStringW
GetStringTypeW
WriteConsoleW
SetFilePointer
CreateFileW

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

Exports

Exports

GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamAppList
SteamApps
SteamClient
SteamController
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerHTTP
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMatchmaking
SteamMatchmakingServers
SteamMusic
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUGC
SteamUnifiedMessages
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
VR_GetControlPanel
VR_GetGenericInterface
VR_Init
VR_Shutdown
g_pSteamClientGameServer

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/steam_api64.dll
.dll windows:5 windows x64 arch:x64

3f9d1359f700b8629ff9520a82d2190a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:a9:38:ed:c7:ae:ac:8d:c7:1d:cb:b4:b4:f6:11:f8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/09/2012, 00:00

Not After

23/11/2015, 23:59

Subject

CN=Valve,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Valve,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:96:38:32:fb:75:6d:85:8f:32:ff:de:10:ab:6a:a2:cf:34:6a:b9
Signer

Actual PE Digest

9e:96:38:32:fb:75:6d:85:8f:32:ff:de:10:ab:6a:a2:cf:34:6a:b9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_win64\build\src\steam_api\win64\Release\steam_api64.pdb

Imports

kernel32

CloseHandle
LoadLibraryExA
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
GetCommandLineA
CreateMutexA
OpenProcess
GetModuleFileNameA
GetModuleHandleA
OutputDebugStringA
GetEnvironmentVariableA
SetEnvironmentVariableA
WaitForSingleObject
ReleaseMutex
GetExitCodeProcess
GetProcAddress
GetProcessHeap
SetEndOfFile
DecodePointer
EncodePointer
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FlsSetValue
WriteFile
GetStdHandle
GetModuleFileNameW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
Sleep
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
CreateFileA
LCMapStringW
GetStringTypeW
WriteConsoleW
SetFilePointer
CreateFileW

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

Exports

Exports

GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamAppList
SteamApps
SteamClient
SteamController
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerHTTP
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMatchmaking
SteamMatchmakingServers
SteamMusic
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUGC
SteamUnifiedMessages
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
VR_GetControlPanel
VR_GetGenericInterface
VR_Init
VR_Shutdown
g_pSteamClientGameServer

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/uninstall.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b9:4d:39:a3:a7:9c:d6:c1:7d:45:55:9a:4a:af:9b:bf:9c:8e:6a:5b
Signer

Actual PE Digest

b9:4d:39:a3:a7:9c:d6:c1:7d:45:55:9a:4a:af:9b:bf:9c:8e:6a:5b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ILUninstall.dll
.dll windows:5 windows x86 arch:x86

e467a585796dc48fbb4492ddfcbde1aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
InsertMenuItemW
InsertMenuW
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromWindow

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcpyA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
UnmapViewOfFile
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryW
ReadFile
QueryDosDeviceW
MulDiv
MapViewOfFile
LockResource
LocalFree
LoadResource
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetVolumeInformationW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileMappingW
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
ArcTo
Arc
AngleArc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

Shell_NotifyIconW

Exports

Exports

UninstallFiles

Sections

.text
Size: 655KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
uninstall.fud
$0/wavpackdll.dll
.dll windows:4 windows x86 arch:x86

e3b07025795389915e5f3b3cc31cd07a

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d6:ca:de:f7:75:b5:f7:b8:18:ef:aa:26:06:05:4b:de:5e:ec:ad:ea
Signer

Actual PE Digest

d6:ca:de:f7:75:b5:f7:b8:18:ef:aa:26:06:05:4b:de:5e:ec:ad:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\ImageLine\3rdparty\SDKs\wavpack\src\release\wavpackdll.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
SetStdHandle
SetHandleCount
GetStartupInfoA
MultiByteToWideChar
ReadFile
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
RtlUnwind
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
RaiseException
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

WavpackAddWrapper
WavpackAppendTagItem
WavpackCloseFile
WavpackDeleteTagItem
WavpackFlushSamples
WavpackFreeWrapper
WavpackGetAverageBitrate
WavpackGetBitsPerSample
WavpackGetBytesPerSample
WavpackGetChannelMask
WavpackGetErrorMessage
WavpackGetFileSize
WavpackGetFloatNormExp
WavpackGetInstantBitrate
WavpackGetLibraryVersion
WavpackGetLibraryVersionString
WavpackGetMD5Sum
WavpackGetMode
WavpackGetNumChannels
WavpackGetNumErrors
WavpackGetNumSamples
WavpackGetNumTagItems
WavpackGetProgress
WavpackGetRatio
WavpackGetReducedChannels
WavpackGetSampleIndex
WavpackGetSampleRate
WavpackGetTagItem
WavpackGetTagItemIndexed
WavpackGetVersion
WavpackGetWrapperBytes
WavpackGetWrapperData
WavpackGetWrapperLocation
WavpackLittleEndianToNative
WavpackLossyBlocks
WavpackNativeToLittleEndian
WavpackOpenFileInput
WavpackOpenFileInputEx
WavpackOpenFileOutput
WavpackPackInit
WavpackPackSamples
WavpackSeekSample
WavpackSeekTrailingWrapper
WavpackSetConfiguration
WavpackStoreMD5Sum
WavpackUnpackSamples
WavpackUpdateNumSamples
WavpackWriteTag

Sections

.text
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$0/wavpackdll_x64.dll
.dll windows:4 windows x64 arch:x64

dd20a5625b38c1a4466ef178afd2582d

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:ac:30:ef:df:ae:12:a4:5f:d9:94:3c:c6:b5:22:0a:44:e4:fc:e6
Signer

Actual PE Digest

19:ac:30:ef:df:ae:12:a4:5f:d9:94:3c:c6:b5:22:0a:44:e4:fc:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\ImageLine\3rdparty\SDKs\wavpack\src\x64\release\wavpackdll.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlUnwindEx
SetStdHandle
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
MultiByteToWideChar
ReadFile
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
RaiseException
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

WavpackAddWrapper
WavpackAppendTagItem
WavpackCloseFile
WavpackDeleteTagItem
WavpackFlushSamples
WavpackFreeWrapper
WavpackGetAverageBitrate
WavpackGetBitsPerSample
WavpackGetBytesPerSample
WavpackGetChannelMask
WavpackGetErrorMessage
WavpackGetFileSize
WavpackGetFloatNormExp
WavpackGetInstantBitrate
WavpackGetLibraryVersion
WavpackGetLibraryVersionString
WavpackGetMD5Sum
WavpackGetMode
WavpackGetNumChannels
WavpackGetNumErrors
WavpackGetNumSamples
WavpackGetNumTagItems
WavpackGetProgress
WavpackGetRatio
WavpackGetReducedChannels
WavpackGetSampleIndex
WavpackGetSampleRate
WavpackGetTagItem
WavpackGetTagItemIndexed
WavpackGetVersion
WavpackGetWrapperBytes
WavpackGetWrapperData
WavpackGetWrapperLocation
WavpackLittleEndianToNative
WavpackLossyBlocks
WavpackNativeToLittleEndian
WavpackOpenFileInput
WavpackOpenFileInputEx
WavpackOpenFileOutput
WavpackPackInit
WavpackPackSamples
WavpackSeekSample
WavpackSeekTrailingWrapper
WavpackSetConfiguration
WavpackStoreMD5Sum
WavpackUnpackSamples
WavpackUpdateNumSamples
WavpackWriteTag

Sections

.text
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/AccessControl.dll
.dll windows:4 windows x86 arch:x86

ed83f419402bc3b83a08e3aaf8b5b5b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

ConvertStringSidToSidA
LookupAccountNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetUserNameA
SetNamedSecurityInfoA
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
OpenProcessToken
LookupAccountSidA
ConvertSidToStringSidA
GetSidSubAuthority
GetSidSubAuthorityCount

kernel32

lstrcmpiA
lstrcpyA
LocalAlloc
lstrlenA
LocalFree
GetLastError
GlobalFree
lstrcpynA
GlobalAlloc
GetFileAttributesA
CloseHandle
GetCurrentProcess
lstrcatA

user32

wsprintfA

Exports

Exports

ClearOnFile
ClearOnRegKey
DenyOnFile
DenyOnRegKey
DisableFileInheritance
DisableRegKeyInheritance
EnableFileInheritance
EnableRegKeyInheritance
GetCurrentUserName
GetFileGroup
GetFileOwner
GetRegKeyGroup
GetRegKeyOwner
GrantOnFile
GrantOnRegKey
IsUserTheAdministrator
RevokeOnFile
RevokeOnRegKey
SetFileGroup
SetFileOwner
SetOnFile
SetOnRegKey
SetRegKeyGroup
SetRegKeyOwner
SidToName

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ILInstallUtil.dll
.dll windows:5 windows x86 arch:x86

f54089062a794946c82cd9c08d60bc3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegDeleteValueW
RegCreateKeyExW
RegCloseKey

user32

MessageBoxA
CharNextW
LoadStringW
wvsprintfA
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperW

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
lstrcpynW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcpynA
lstrcpyA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
SwitchToThread
SetLastError
SetFilePointer
SetEvent
SetEndOfFile
ResetEvent
ReadFile
LocalFree
LeaveCriticalSection
IsValidLocale
GlobalFree
GlobalAlloc
GetVersionExW
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileAttributesW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
InterlockedExchangeAdd
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoW
EnterCriticalSection
CreateFileW
CreateEventW
CopyFileW
CompareStringW
CloseHandle
Sleep

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA

Exports

Exports

AssociateFileExt
BackSlashToDoubleBackSlash
CheckFileVersionMinMax
CheckFileVersions
CheckVersion
DoFLUpdate
EnsurePath
FindFLPath
GetPathFromFilename
GetRootPath
GetUserForPermissions
MightBeRegistered
RemoveFileExtAssociation
StoreILPath
SupportsSSE
VerifyFLPath
VerifyFLPathMajorVersion

Sections

.text
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_3_/Downloads/Drumaxx.txt
$_3_/Downloads/FL Mobile Samples.txt
$_3_/Downloads/Harmor.txt
$_3_/Downloads/Legacy.txt
$_3_/Downloads/Loops.txt
$_3_/Downloads/Synthmaker.txt
$_3_/Downloads/bassdrum.txt
$_3_/Downloads/directwave.txt
$_3_/Downloads/fpc.txt
$_3_/Downloads/gms.txt
$_3_/Downloads/morphine.txt
$_3_/Downloads/ogun.txt
$_3_/Downloads/poizone.txt
$_3_/Downloads/sakura.txt
$_3_/Downloads/sawer.txt
$_3_/Downloads/toxic biohazard.txt
$_3_/FLDownload.dll
.dll windows:5 windows x86 arch:x86

bc71e7ac8396ad8e276994ea9b43c0bd

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

df:da:b2:0c:bc:74:66:d7:fa:6d:1a:ac:30:ed:7c:9d:3e:87:3e:93
Signer

Actual PE Digest

df:da:b2:0c:bc:74:66:d7:fa:6d:1a:ac:30:ed:7c:9d:3e:87:3e:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW

kernel32

TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
SetThreadPriority
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
GetProcAddress
MoveFileW
EnterCriticalSection
FindClose
CreateEventW
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
CloseHandle
DeleteFileW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
LoadLibraryA
GetUserDefaultLangID
DecodePointer
EncodePointer
GetFileAttributesW
IsProcessorFeaturePresent
LeaveCriticalSection
GetVersionExW
FormatMessageW
CopyFileW
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
GetACP
CreateThread
ExitThread
LoadLibraryExW
GetTimeZoneInformation
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetFileType
GetStartupInfoW
RaiseException
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
SetLastError
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
HeapFree
FreeEnvironmentStringsW
Sleep
GetLocaleInfoW
TerminateThread
LoadLibraryW
InitializeCriticalSection
WriteFile
SetFileTime
GetCurrentThread
OutputDebugStringW
SetEvent
WaitForSingleObject
CreateDirectoryW
QueryPerformanceCounter
GetCurrentProcess
FreeLibrary
SetEndOfFile
SetFilePointer
FindFirstFileW
ExitProcess
GetConsoleCP
SetStdHandle
SetEnvironmentVariableA
WriteConsoleW

user32

IsChild
GetMessageExtraInfo
SetCapture
SetForegroundWindow
GetParent
TrackMouseEvent
LoadCursorW
GetWindowRect
GetSystemMenu
MapVirtualKeyW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
GetWindowInfo
WindowFromPoint
ShowCaret
BeginPaint
CreateIconIndirect
GetDC
GetCapture
GetForegroundWindow
PeekMessageA
PostQuitMessage
FindWindowA
GetWindowPlacement
GetAsyncKeyState
InvalidateRect
SetCursorPos
GetAncestor
GetClipboardData
SystemParametersInfoW
ReleaseDC
EnableMenuItem
EmptyClipboard
SetWindowLongW
RedrawWindow
DestroyCursor
DestroyCaret
GetDesktopWindow
SetWindowPos
GetCursorPos
SetLayeredWindowAttributes
ShowWindow
GetActiveWindow
CreateCaret
OpenClipboard
MessageBoxW
ReleaseCapture
GetSystemMetrics
SetCaretPos
SendMessageW
SetClipboardData
SetWindowTextW
DestroyIcon
GetMessageTime
GetMessagePos
DestroyWindow
GetMessageW
UnregisterClassW
PostMessageW
GetFocus
SetFocus
TranslateMessage
RegisterClassExW
GetWindowLongW
PeekMessageW
CreateWindowExW
DefWindowProcW
DispatchMessageW
AttachThreadInput
GetWindowThreadProcessId
MessageBeep

gdi32

CreateRectRgn
StretchDIBits
SaveDC
RestoreDC
CreateRectRgnIndirect
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
GetTextMetricsW
GetGlyphOutlineW
GetGlyphIndicesW
GetKerningPairsW
SetMapperFlags
GetOutlineTextMetricsW
SetMapMode
CreateCompatibleDC
SelectObject
DeleteObject
CreateFontIndirectW
CombineRgn
DeleteDC

advapi32

RegQueryValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExA

shell32

ExtractAssociatedIconW
ShellExecuteW
ShellExecuteA
SHGetSpecialFolderPathW

ole32

DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
RegisterDragDrop
CoTaskMemAlloc

wininet

InternetOpenW
HttpSendRequestExW
InternetCrackUrlW
FtpOpenFileW
InternetReadFile
InternetConnectW
InternetWriteFile
InternetSetOptionW
HttpQueryInfoW
HttpOpenRequestW
InternetSetFilePointer
HttpEndRequestW
InternetCloseHandle

winmm

timeBeginPeriod
timeGetTime

imm32

ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

Exports

Exports

CreateSteamObject
addinstance

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_3_/Fonts/CL-Font1-Regular.ttf
$_3_/Fonts/CL-Font2-Regular.ttf
$_3_/Fonts/OFL.txt
$_3_/ILDownloadManager.exe
.exe windows:5 windows x86 arch:x86

ab42ec410cb0c02dc3caec550f53b4f5

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:00:ad:da:90:ea:46:c7:5f:55:11:25:eb:65:2a:71:6e:47:5b:1d
Signer

Actual PE Digest

21:00:ad:da:90:ea:46:c7:5f:55:11:25:eb:65:2a:71:6e:47:5b:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
SetThreadPriority
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
GetProcAddress
MoveFileW
EnterCriticalSection
FindClose
CreateEventW
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
CloseHandle
DeleteFileW
GetVolumeInformationW
GetCommandLineW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
LoadLibraryA
GetUserDefaultLangID
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetFileAttributesW
Sleep
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
SetLastError
GetStringTypeW
GetCPInfo
GetOEMCP
IsValidCodePage
GetProcessHeap
HeapSize
AreFileApisANSI
GetModuleHandleExW
RaiseException
GetStartupInfoW
GetFileType
GetStdHandle
SetFilePointerEx
ReadConsoleW
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetSystemTimeAsFileTime
WideCharToMultiByte
GetTimeZoneInformation
LoadLibraryExW
ExitThread
CreateThread
GetACP
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapReAlloc
HeapAlloc
HeapFree
DecodePointer
EncodePointer
IsProcessorFeaturePresent
LeaveCriticalSection
GetVersionExW
FormatMessageW
GetModuleFileNameA
CopyFileW
GetLocaleInfoW
TerminateThread
LoadLibraryW
InitializeCriticalSection
WriteFile
GetCurrentThread
OutputDebugStringW
SetEvent
WaitForSingleObject
CreateDirectoryW
QueryPerformanceCounter
GetLogicalDriveStringsW
GetCurrentProcess
FreeLibrary
SetEndOfFile
GetDriveTypeW
WriteConsoleW
SetFilePointer
FindFirstFileW
CreateMutexW
ExitProcess
GetConsoleCP
SetStdHandle
SetEnvironmentVariableA

user32

LoadCursorW
TrackMouseEvent
GetParent
SetForegroundWindow
SetCapture
GetMessageExtraInfo
IsChild
GetWindowRect
GetSystemMenu
MapVirtualKeyW
GetAsyncKeyState
GetWindowPlacement
GetForegroundWindow
GetCapture
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
DefWindowProcW
CreateWindowExW
SendMessageTimeoutW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
PeekMessageW
GetWindowTextW
GetWindowLongW
RegisterClassExW
TranslateMessage
EnumWindows
SetFocus
GetFocus
PostMessageW
UnregisterClassW
GetMessageW
DestroyWindow
GetMessagePos
GetMessageTime
DestroyIcon
SetWindowTextW
SetClipboardData
SendMessageW
SetCaretPos
GetSystemMetrics
ReleaseCapture
MessageBoxW
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
GetCursorPos
SetWindowPos
GetDesktopWindow
GetDC
DestroyCaret
DestroyCursor
RedrawWindow
SetWindowLongW
EmptyClipboard
EnableMenuItem
ReleaseDC
SystemParametersInfoW
GetClipboardData
GetAncestor
SetCursorPos
GetWindowInfo
MessageBeep
WindowFromPoint
ShowCaret
BeginPaint
CreateIconIndirect
GetIconInfo
InvalidateRect

gdi32

SetMapperFlags
GetKerningPairsW
GetGlyphIndicesW
CombineRgn
GetOutlineTextMetricsW
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
SetMapMode
SelectObject
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
GetPixel
CreateRectRgn
GetObjectW
StretchDIBits
CreateRectRgnIndirect
GetGlyphOutlineW
SaveDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegQueryValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExA

shell32

SHGetSpecialFolderPathW
ShellExecuteW
ExtractAssociatedIconW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW

ole32

RegisterDragDrop
CoTaskMemAlloc
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize

shlwapi

PathStripToRootW

winmm

timeBeginPeriod
timeGetTime

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 397KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_3_/Stub/FLDownload.dll
.dll windows:4 windows x86 arch:x86

9696f656d9dd7905533227242d722c02

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4a:09:13:a6:5b:7d:37:f6:6f:88:19:c0:e2:46:55:2f:04:5f:52:a0
Signer

Actual PE Digest

4a:09:13:a6:5b:7d:37:f6:6f:88:19:c0:e2:46:55:2f:04:5f:52:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OffsetRect
OemToCharA
MessageBoxA
MapWindowPoints
MapVirtualKeyA
LockWindowUpdate
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualAlloc
SizeofResource
SetThreadLocale
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
ReadFile
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
InterlockedExchange
FreeLibrary
FormatMessageA
FindResourceA
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
RectVisible
RealizePalette
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
BitBlt

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoUninitialize
CoInitialize

comctl32

_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

winmm

timeGetDevCaps
timeEndPeriod
timeBeginPeriod

Exports

Exports

addinstance

Sections

.text
Size: 345KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_3_/Update/Updater.exe
.exe windows:4 windows x86 arch:x86

8b1c863312f6977ce0e438376ff3a4d7

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:e1:6b:e9:dd:fc:f3:5e:2f:3b:ef:1d:30:ac:97:1e:b8:8c:4a:5c
Signer

Actual PE Digest

2d:e1:6b:e9:dd:fc:f3:5e:2f:3b:ef:1d:30:ac:97:1e:b8:8c:4a:5c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
SetFilePointer
SetEvent
GetFileAttributesW
GetFileAttributesExW
ReadFile
GetModuleFileNameW
CreateFileW
WriteFile
CloseHandle
CreateEventW
FlushFileBuffers
GetTempPathW
IsDebuggerPresent
GetProcAddress
ExitProcess
DeleteCriticalSection
GetCurrentProcess
TerminateThread
GetCurrentThreadId
EnterCriticalSection
SetThreadAffinityMask
ReleaseMutex
WaitForSingleObject
CreateMutexW
LeaveCriticalSection
Sleep
SetThreadPriority
InitializeCriticalSection
GetModuleHandleW
GlobalLock
GetCurrentProcessId
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
IsProcessorFeaturePresent
OutputDebugStringW
GetTickCount
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapReAlloc
MultiByteToWideChar
WideCharToMultiByte
ExitThread
CreateThread
GetTimeZoneInformation
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
LoadLibraryA
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetLastError
CreateDirectoryW
GetCurrentThread
GetModuleHandleA

user32

ReleaseDC
CreateIconIndirect
DestroyIcon
DestroyCursor
SetParent
GetKeyState
EndPaint
LoadCursorW
GetUpdateRgn
ShowWindow
SetCursorPos
SetWindowTextW
CreateCursor
SetWindowLongW
InvalidateRect
SystemParametersInfoW
CallWindowProcW
WindowFromPoint
TrackMouseEvent
GetParent
EnumDisplayMonitors
GetForegroundWindow
SetCapture
GetSystemMetrics
GetCursorPos
MoveWindow
GetMessageTime
PostMessageW
SetCursor
GetActiveWindow
SetWindowPos
GetCapture
IsChild
GetDC
GetWindowInfo
GetDesktopWindow
SetForegroundWindow
GetMessagePos
EnableMenuItem
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
MessageBeep
DispatchMessageW
DestroyWindow
GetFocus
SendMessageTimeoutW
GetWindowLongW
AttachThreadInput
GetWindowThreadProcessId
MapVirtualKeyW
GetSystemMenu
GetWindowPlacement
GetWindowTextW
GetMessageW
SetFocus
CreateWindowExW
PeekMessageW
EnumWindows
DefWindowProcW
UnregisterClassW
BeginPaint
TranslateMessage
GetWindowRect
SendMessageW
ReleaseCapture
RegisterClassExW

msvfw32

DrawDibDraw
DrawDibOpen

winmm

timeBeginPeriod

opengl32

wglGetProcAddress
wglDeleteContext
wglMakeCurrent
wglShareLists
wglGetCurrentContext
glViewport
wglCreateContext

gdi32

DeleteObject
ExcludeClipRect
GetTextMetricsW
GetGlyphIndicesW
CreateFontIndirectW
GetOutlineTextMetricsW
EnumFontFamiliesExW
GetGlyphOutlineW
SetMapperFlags
GetKerningPairsW
CreateHalftonePalette
SaveDC
SetMapMode
SwapBuffers
SelectObject
CreateCompatibleBitmap
RealizePalette
GetPixelFormat
CreateRectRgnIndirect
SetPixel
RestoreDC
SetStretchBltMode
SetPixelFormat
SelectPalette
StretchDIBits
CreateRectRgn
DeleteDC
CreateBitmap
DescribePixelFormat
CreateDIBSection
GetRegionData
ChoosePixelFormat
GetDeviceCaps
CombineRgn
CreateCompatibleDC

advapi32

RegCloseKey
RegOpenKeyExW

shell32

ExtractAssociatedIconW
Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW

ole32

OleInitialize
OleUninitialize
RevokeDragDrop
RegisterDragDrop

Sections

.text
Size: 584KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_4_/Downloads/Drumaxx.txt
$_4_/Downloads/FL Mobile Samples.txt
$_4_/Downloads/Harmor.txt
$_4_/Downloads/Legacy.txt
$_4_/Downloads/Loops.txt
$_4_/Downloads/Synthmaker.txt
$_4_/Downloads/bassdrum.txt
$_4_/Downloads/directwave.txt
$_4_/Downloads/fpc.txt
$_4_/Downloads/gms.txt
$_4_/Downloads/morphine.txt
$_4_/Downloads/ogun.txt
$_4_/Downloads/poizone.txt
$_4_/Downloads/sakura.txt
$_4_/Downloads/sawer.txt
$_4_/Downloads/toxic biohazard.txt
$_4_/FLDownload.dll
.dll windows:5 windows x86 arch:x86

bc71e7ac8396ad8e276994ea9b43c0bd

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

df:da:b2:0c:bc:74:66:d7:fa:6d:1a:ac:30:ed:7c:9d:3e:87:3e:93
Signer

Actual PE Digest

df:da:b2:0c:bc:74:66:d7:fa:6d:1a:ac:30:ed:7c:9d:3e:87:3e:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW

kernel32

TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
SetThreadPriority
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
GetProcAddress
MoveFileW
EnterCriticalSection
FindClose
CreateEventW
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
CloseHandle
DeleteFileW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
LoadLibraryA
GetUserDefaultLangID
DecodePointer
EncodePointer
GetFileAttributesW
IsProcessorFeaturePresent
LeaveCriticalSection
GetVersionExW
FormatMessageW
CopyFileW
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
GetACP
CreateThread
ExitThread
LoadLibraryExW
GetTimeZoneInformation
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetFileType
GetStartupInfoW
RaiseException
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
SetLastError
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
HeapFree
FreeEnvironmentStringsW
Sleep
GetLocaleInfoW
TerminateThread
LoadLibraryW
InitializeCriticalSection
WriteFile
SetFileTime
GetCurrentThread
OutputDebugStringW
SetEvent
WaitForSingleObject
CreateDirectoryW
QueryPerformanceCounter
GetCurrentProcess
FreeLibrary
SetEndOfFile
SetFilePointer
FindFirstFileW
ExitProcess
GetConsoleCP
SetStdHandle
SetEnvironmentVariableA
WriteConsoleW

user32

IsChild
GetMessageExtraInfo
SetCapture
SetForegroundWindow
GetParent
TrackMouseEvent
LoadCursorW
GetWindowRect
GetSystemMenu
MapVirtualKeyW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
GetWindowInfo
WindowFromPoint
ShowCaret
BeginPaint
CreateIconIndirect
GetDC
GetCapture
GetForegroundWindow
PeekMessageA
PostQuitMessage
FindWindowA
GetWindowPlacement
GetAsyncKeyState
InvalidateRect
SetCursorPos
GetAncestor
GetClipboardData
SystemParametersInfoW
ReleaseDC
EnableMenuItem
EmptyClipboard
SetWindowLongW
RedrawWindow
DestroyCursor
DestroyCaret
GetDesktopWindow
SetWindowPos
GetCursorPos
SetLayeredWindowAttributes
ShowWindow
GetActiveWindow
CreateCaret
OpenClipboard
MessageBoxW
ReleaseCapture
GetSystemMetrics
SetCaretPos
SendMessageW
SetClipboardData
SetWindowTextW
DestroyIcon
GetMessageTime
GetMessagePos
DestroyWindow
GetMessageW
UnregisterClassW
PostMessageW
GetFocus
SetFocus
TranslateMessage
RegisterClassExW
GetWindowLongW
PeekMessageW
CreateWindowExW
DefWindowProcW
DispatchMessageW
AttachThreadInput
GetWindowThreadProcessId
MessageBeep

gdi32

CreateRectRgn
StretchDIBits
SaveDC
RestoreDC
CreateRectRgnIndirect
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
GetTextMetricsW
GetGlyphOutlineW
GetGlyphIndicesW
GetKerningPairsW
SetMapperFlags
GetOutlineTextMetricsW
SetMapMode
CreateCompatibleDC
SelectObject
DeleteObject
CreateFontIndirectW
CombineRgn
DeleteDC

advapi32

RegQueryValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExA

shell32

ExtractAssociatedIconW
ShellExecuteW
ShellExecuteA
SHGetSpecialFolderPathW

ole32

DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
RegisterDragDrop
CoTaskMemAlloc

wininet

InternetOpenW
HttpSendRequestExW
InternetCrackUrlW
FtpOpenFileW
InternetReadFile
InternetConnectW
InternetWriteFile
InternetSetOptionW
HttpQueryInfoW
HttpOpenRequestW
InternetSetFilePointer
HttpEndRequestW
InternetCloseHandle

winmm

timeBeginPeriod
timeGetTime

imm32

ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME

Exports

Exports

CreateSteamObject
addinstance

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_4_/Fonts/CL-Font1-Regular.ttf
$_4_/Fonts/CL-Font2-Regular.ttf
$_4_/Fonts/OFL.txt
$_4_/ILDownloadManager.exe
.exe windows:5 windows x86 arch:x86

ab42ec410cb0c02dc3caec550f53b4f5

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:00:ad:da:90:ea:46:c7:5f:55:11:25:eb:65:2a:71:6e:47:5b:1d
Signer

Actual PE Digest

21:00:ad:da:90:ea:46:c7:5f:55:11:25:eb:65:2a:71:6e:47:5b:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
SetThreadPriority
FlushFileBuffers
GetTempPathW
GetLastError
GetCurrentDirectoryW
GetProcAddress
MoveFileW
EnterCriticalSection
FindClose
CreateEventW
RemoveDirectoryW
GetModuleHandleA
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
CloseHandle
DeleteFileW
GetVolumeInformationW
GetCommandLineW
GlobalSize
GlobalLock
GlobalAlloc
GlobalUnlock
LoadLibraryA
GetUserDefaultLangID
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetFileAttributesW
Sleep
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
SetLastError
GetStringTypeW
GetCPInfo
GetOEMCP
IsValidCodePage
GetProcessHeap
HeapSize
AreFileApisANSI
GetModuleHandleExW
RaiseException
GetStartupInfoW
GetFileType
GetStdHandle
SetFilePointerEx
ReadConsoleW
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetSystemTimeAsFileTime
WideCharToMultiByte
GetTimeZoneInformation
LoadLibraryExW
ExitThread
CreateThread
GetACP
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapReAlloc
HeapAlloc
HeapFree
DecodePointer
EncodePointer
IsProcessorFeaturePresent
LeaveCriticalSection
GetVersionExW
FormatMessageW
GetModuleFileNameA
CopyFileW
GetLocaleInfoW
TerminateThread
LoadLibraryW
InitializeCriticalSection
WriteFile
GetCurrentThread
OutputDebugStringW
SetEvent
WaitForSingleObject
CreateDirectoryW
QueryPerformanceCounter
GetLogicalDriveStringsW
GetCurrentProcess
FreeLibrary
SetEndOfFile
GetDriveTypeW
WriteConsoleW
SetFilePointer
FindFirstFileW
CreateMutexW
ExitProcess
GetConsoleCP
SetStdHandle
SetEnvironmentVariableA

user32

LoadCursorW
TrackMouseEvent
GetParent
SetForegroundWindow
SetCapture
GetMessageExtraInfo
IsChild
GetWindowRect
GetSystemMenu
MapVirtualKeyW
GetAsyncKeyState
GetWindowPlacement
GetForegroundWindow
GetCapture
GetWindowThreadProcessId
AttachThreadInput
DispatchMessageW
DefWindowProcW
CreateWindowExW
SendMessageTimeoutW
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
SetCursor
EndPaint
PeekMessageW
GetWindowTextW
GetWindowLongW
RegisterClassExW
TranslateMessage
EnumWindows
SetFocus
GetFocus
PostMessageW
UnregisterClassW
GetMessageW
DestroyWindow
GetMessagePos
GetMessageTime
DestroyIcon
SetWindowTextW
SetClipboardData
SendMessageW
SetCaretPos
GetSystemMetrics
ReleaseCapture
MessageBoxW
OpenClipboard
CreateCaret
GetActiveWindow
ShowWindow
SetLayeredWindowAttributes
GetCursorPos
SetWindowPos
GetDesktopWindow
GetDC
DestroyCaret
DestroyCursor
RedrawWindow
SetWindowLongW
EmptyClipboard
EnableMenuItem
ReleaseDC
SystemParametersInfoW
GetClipboardData
GetAncestor
SetCursorPos
GetWindowInfo
MessageBeep
WindowFromPoint
ShowCaret
BeginPaint
CreateIconIndirect
GetIconInfo
InvalidateRect

gdi32

SetMapperFlags
GetKerningPairsW
GetGlyphIndicesW
CombineRgn
GetOutlineTextMetricsW
GetRegionData
CreateBitmap
ExcludeClipRect
CreateDIBSection
SetMapMode
SelectObject
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
DeleteDC
GetTextMetricsW
RestoreDC
GetPixel
CreateRectRgn
GetObjectW
StretchDIBits
CreateRectRgnIndirect
GetGlyphOutlineW
SaveDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegQueryValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExA

shell32

SHGetSpecialFolderPathW
ShellExecuteW
ExtractAssociatedIconW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW

ole32

RegisterDragDrop
CoTaskMemAlloc
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize

shlwapi

PathStripToRootW

winmm

timeBeginPeriod
timeGetTime

imm32

ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmReleaseContext

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 397KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_4_/Stub/FLDownload.dll
.dll windows:4 windows x86 arch:x86

9696f656d9dd7905533227242d722c02

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4a:09:13:a6:5b:7d:37:f6:6f:88:19:c0:e2:46:55:2f:04:5f:52:a0
Signer

Actual PE Digest

4a:09:13:a6:5b:7d:37:f6:6f:88:19:c0:e2:46:55:2f:04:5f:52:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OffsetRect
OemToCharA
MessageBoxA
MapWindowPoints
MapVirtualKeyA
LockWindowUpdate
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualAlloc
SizeofResource
SetThreadLocale
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
ReadFile
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
InterlockedExchange
FreeLibrary
FormatMessageA
FindResourceA
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
RectVisible
RealizePalette
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
BitBlt

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoUninitialize
CoInitialize

comctl32

_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

winmm

timeGetDevCaps
timeEndPeriod
timeBeginPeriod

Exports

Exports

addinstance

Sections

.text
Size: 345KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_4_/Update/Updater.exe
.exe windows:4 windows x86 arch:x86

8b1c863312f6977ce0e438376ff3a4d7

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:e1:6b:e9:dd:fc:f3:5e:2f:3b:ef:1d:30:ac:97:1e:b8:8c:4a:5c
Signer

Actual PE Digest

2d:e1:6b:e9:dd:fc:f3:5e:2f:3b:ef:1d:30:ac:97:1e:b8:8c:4a:5c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
SetFilePointer
SetEvent
GetFileAttributesW
GetFileAttributesExW
ReadFile
GetModuleFileNameW
CreateFileW
WriteFile
CloseHandle
CreateEventW
FlushFileBuffers
GetTempPathW
IsDebuggerPresent
GetProcAddress
ExitProcess
DeleteCriticalSection
GetCurrentProcess
TerminateThread
GetCurrentThreadId
EnterCriticalSection
SetThreadAffinityMask
ReleaseMutex
WaitForSingleObject
CreateMutexW
LeaveCriticalSection
Sleep
SetThreadPriority
InitializeCriticalSection
GetModuleHandleW
GlobalLock
GetCurrentProcessId
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
IsProcessorFeaturePresent
OutputDebugStringW
GetTickCount
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapReAlloc
MultiByteToWideChar
WideCharToMultiByte
ExitThread
CreateThread
GetTimeZoneInformation
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
LoadLibraryA
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetLastError
CreateDirectoryW
GetCurrentThread
GetModuleHandleA

user32

ReleaseDC
CreateIconIndirect
DestroyIcon
DestroyCursor
SetParent
GetKeyState
EndPaint
LoadCursorW
GetUpdateRgn
ShowWindow
SetCursorPos
SetWindowTextW
CreateCursor
SetWindowLongW
InvalidateRect
SystemParametersInfoW
CallWindowProcW
WindowFromPoint
TrackMouseEvent
GetParent
EnumDisplayMonitors
GetForegroundWindow
SetCapture
GetSystemMetrics
GetCursorPos
MoveWindow
GetMessageTime
PostMessageW
SetCursor
GetActiveWindow
SetWindowPos
GetCapture
IsChild
GetDC
GetWindowInfo
GetDesktopWindow
SetForegroundWindow
GetMessagePos
EnableMenuItem
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
MessageBeep
DispatchMessageW
DestroyWindow
GetFocus
SendMessageTimeoutW
GetWindowLongW
AttachThreadInput
GetWindowThreadProcessId
MapVirtualKeyW
GetSystemMenu
GetWindowPlacement
GetWindowTextW
GetMessageW
SetFocus
CreateWindowExW
PeekMessageW
EnumWindows
DefWindowProcW
UnregisterClassW
BeginPaint
TranslateMessage
GetWindowRect
SendMessageW
ReleaseCapture
RegisterClassExW

msvfw32

DrawDibDraw
DrawDibOpen

winmm

timeBeginPeriod

opengl32

wglGetProcAddress
wglDeleteContext
wglMakeCurrent
wglShareLists
wglGetCurrentContext
glViewport
wglCreateContext

gdi32

DeleteObject
ExcludeClipRect
GetTextMetricsW
GetGlyphIndicesW
CreateFontIndirectW
GetOutlineTextMetricsW
EnumFontFamiliesExW
GetGlyphOutlineW
SetMapperFlags
GetKerningPairsW
CreateHalftonePalette
SaveDC
SetMapMode
SwapBuffers
SelectObject
CreateCompatibleBitmap
RealizePalette
GetPixelFormat
CreateRectRgnIndirect
SetPixel
RestoreDC
SetStretchBltMode
SetPixelFormat
SelectPalette
StretchDIBits
CreateRectRgn
DeleteDC
CreateBitmap
DescribePixelFormat
CreateDIBSection
GetRegionData
ChoosePixelFormat
GetDeviceCaps
CombineRgn
CreateCompatibleDC

advapi32

RegCloseKey
RegOpenKeyExW

shell32

ExtractAssociatedIconW
Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW

ole32

OleInitialize
OleUninitialize
RevokeDragDrop
RegisterDragDrop

Sections

.text
Size: 584KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Artwork/Fonts/Cuprum/Cuprum.ttf
Artwork/Fonts/Cuprum/OFL.txt
Artwork/Fonts/Francois One/FrancoisOne.ttf
Artwork/Fonts/Francois One/OFL.txt

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

67:73:cf:22:62:9c:c1:df:86:f7:98:c9:5e:0a:01:ea:ef:63:9f:98Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 80KB

.rsrc Size: 31KB - Virtual size: 30KB

380f2d17bd37c3067396a1e157a8ffc0

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

ed:f7:38:64:83:af:aa:aa:8a:31:51:37:47:76:33:3f:a0:92:98:f0Signer

Headers

File Characteristics

Imports

kernel32

shell32

user32

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 224KB

.data Size: 69KB - Virtual size: 96KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 9KB - Virtual size: 12KB

7dc0facef4ce538c1938af8c3e81ac0b

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

d5:32:c1:7b:df:cf:7a:c8:46:79:b4:2b:e0:bc:31:23:01:f0:3c:e4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: 256KB - Virtual size: 255KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 10KB - Virtual size: 19KB

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

67:73:cf:22:62:9c:c1:df:86:f7:98:c9:5e:0a:01:ea:ef:63:9f:98
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 80KB

.rsrc
Size: 31KB - Virtual size: 30KB

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

ed:f7:38:64:83:af:aa:aa:8a:31:51:37:47:76:33:3f:a0:92:98:f0
Signer

.text
Size: 220KB - Virtual size: 224KB

.data
Size: 69KB - Virtual size: 96KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 9KB - Virtual size: 12KB

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

d5:32:c1:7b:df:cf:7a:c8:46:79:b4:2b:e0:bc:31:23:01:f0:3c:e4
Signer

.text
Size: 256KB - Virtual size: 255KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 10KB - Virtual size: 19KB

.pdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 2KB

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

3a:bc:b1:9e:fd:35:ae:7a:c7:bc:ff:1c:61:9c:60:46:70:71:8e:11
Signer

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 382KB - Virtual size: 382KB

.data
Size: 68KB - Virtual size: 190.9MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 625KB - Virtual size: 625KB

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

3a:77:6c:5d:f8:e0:57:55:e9:95:c0:eb:84:1b:ee:3a:f2:31:af:ee
Signer

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 720KB - Virtual size: 720KB

.data
Size: 99KB - Virtual size: 191.0MB

.pdata
Size: 201KB - Virtual size: 201KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 122KB - Virtual size: 122KB

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate