LangDialog
Overview
overview
7Static
static
327a33eb7dc...b7.exe
windows7-x64
727a33eb7dc...b7.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3bin/DemoApp.bat
windows7-x64
3bin/DemoApp.bat
windows10-2004-x64
3bin/GetHostId.bat
windows7-x64
3bin/GetHostId.bat
windows10-2004-x64
3bin/Instal...NT.bat
windows7-x64
3bin/Instal...NT.bat
windows10-2004-x64
3bin/PauseT...NT.bat
windows7-x64
3bin/PauseT...NT.bat
windows10-2004-x64
3bin/QueryT...NT.bat
windows7-x64
3bin/QueryT...NT.bat
windows10-2004-x64
3bin/Resume...NT.bat
windows7-x64
3bin/Resume...NT.bat
windows10-2004-x64
3bin/SetupT...er.bat
windows7-x64
3bin/SetupT...er.bat
windows10-2004-x64
3bin/StartT...NT.bat
windows7-x64
3bin/StartT...NT.bat
windows10-2004-x64
3bin/StopTe...NT.bat
windows7-x64
3bin/StopTe...NT.bat
windows10-2004-x64
3bin/Teardo...er.bat
windows7-x64
3bin/Teardo...er.bat
windows10-2004-x64
3bin/TestWrapper.bat
windows7-x64
3bin/TestWrapper.bat
windows10-2004-x64
3bin/TestWr...nd.bat
windows7-x64
1bin/TestWr...nd.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
27a33eb7dc6ba91aa6a021880abffa37aff257eb3163a2671774b59f49f781b7.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
27a33eb7dc6ba91aa6a021880abffa37aff257eb3163a2671774b59f49f781b7.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
bin/DemoApp.bat
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
bin/DemoApp.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
bin/GetHostId.bat
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
bin/GetHostId.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
bin/InstallTestWrapper-NT.bat
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
bin/InstallTestWrapper-NT.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
bin/PauseTestWrapper-NT.bat
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
bin/PauseTestWrapper-NT.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
bin/QueryTestWrapper-NT.bat
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
bin/QueryTestWrapper-NT.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
bin/ResumeTestWrapper-NT.bat
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
bin/ResumeTestWrapper-NT.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
bin/SetupTestWrapper.bat
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
bin/SetupTestWrapper.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
bin/StartTestWrapper-NT.bat
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
bin/StartTestWrapper-NT.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
bin/StopTestWrapper-NT.bat
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
bin/StopTestWrapper-NT.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
bin/TeardownTestWrapper.bat
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
bin/TeardownTestWrapper.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
bin/TestWrapper.bat
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
bin/TestWrapper.bat
Resource
win10v2004-20240704-en
Behavioral task
behavioral31
Sample
bin/TestWrapperCommand.bat
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
bin/TestWrapperCommand.bat
Resource
win10v2004-20240709-en
General
-
Target
27a33eb7dc6ba91aa6a021880abffa37aff257eb3163a2671774b59f49f781b7
-
Size
1.8MB
-
MD5
5bd63a08bdd1325e071333f73ac3409a
-
SHA1
6ad6aa5bc45412fd2c2d249b4bd180ad58b5630c
-
SHA256
27a33eb7dc6ba91aa6a021880abffa37aff257eb3163a2671774b59f49f781b7
-
SHA512
086425750bb83b14bb85fcac64e82621338e7e2759c45ed75f735f3824e33ce159aac87746e98fc55dc76f19da0bbf2b0021079c07831da88d1524879a7c3298
-
SSDEEP
49152:nHVojKAo9JZZokKrWP8y7hpr9kn3xnauggsIj5BERQe4UXzCU:n1kGHJ1P8yZY7mIQui
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource 27a33eb7dc6ba91aa6a021880abffa37aff257eb3163a2671774b59f49f781b7 unpack001/$PLUGINSDIR/LangDLL.dll unpack001/$PLUGINSDIR/System.dll unpack001/$PLUGINSDIR/nsDialogs.dll
Files
-
27a33eb7dc6ba91aa6a021880abffa37aff257eb3163a2671774b59f49f781b7.exe windows:4 windows x86 arch:x86
f4639a0b3116c2cfc71144b88a929cfd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
lstrcmpiA
CreateFileW
GetTempFileNameW
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
WriteFile
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:4 windows x86 arch:x86
fe3375e7e4529b73ba45ab2246b9269b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW
user32
SetWindowTextW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 681B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
509a34b3a68a773e0afb4259e68f9f82
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 867B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsDialogs.dll.dll windows:4 windows x86 arch:x86
3b477381217c97b22146297f93df2a92
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpyW
GetFileAttributesW
lstrcmpiW
MulDiv
lstrlenW
HeapFree
GetProcessHeap
GetCurrentDirectoryW
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
HeapAlloc
SetCurrentDirectoryW
user32
GetPropW
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
RemovePropW
CharPrevW
GetWindowLongW
DrawTextW
GetWindowTextW
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
MapDialogRect
GetClientRect
CharNextW
SendMessageW
DrawFocusRect
gdi32
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 638B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
README_de.txt
-
README_en.txt
-
README_es.txt
-
README_ja.txt
-
bin/DemoApp.bat.bat .vbs
-
bin/GetHostId.bat.bat .vbs
-
bin/InstallTestWrapper-NT.bat.bat .vbs
-
bin/PauseTestWrapper-NT.bat.bat .vbs
-
bin/QueryTestWrapper-NT.bat.bat .vbs
-
bin/ResumeTestWrapper-NT.bat.bat .vbs
-
bin/SetupTestWrapper.bat.bat .vbs
-
bin/StartTestWrapper-NT.bat.bat .vbs
-
bin/StopTestWrapper-NT.bat.bat .vbs
-
bin/TeardownTestWrapper.bat.bat .vbs
-
bin/TestWrapper.bat.bat .vbs
-
bin/TestWrapperCommand.bat.bat .vbs
-
bin/UninstallTestWrapper-NT.bat.bat .vbs
-
bin/wrapper.exe.exe windows:5 windows x86 arch:x86
86631d4bf6e84c28b4fb71abbc6bf6b9
Code Sign
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate
IssuerCN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBNot Before25-05-2021 00:00Not After31-12-2028 23:59SubjectCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate
IssuerCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBNot Before22-03-2021 00:00Not After21-03-2036 23:59SubjectCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:a9:d0:55:d3:78:c3:cc:1e:73:07:f1:0a:c6:6d:60Certificate
IssuerCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBNot Before20-02-2024 00:00Not After19-02-2027 23:59SubjectSERIALNUMBER=0117-02-015715,CN=Tanuki Software\, Ltd.,O=Tanuki Software\, Ltd.,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate
IssuerCN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBNot Before25-05-2021 00:00Not After31-12-2028 23:59SubjectCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate
IssuerCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBNot Before22-03-2021 00:00Not After21-03-2036 23:59SubjectCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:a9:d0:55:d3:78:c3:cc:1e:73:07:f1:0a:c6:6d:60Certificate
IssuerCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBNot Before20-02-2024 00:00Not After19-02-2027 23:59SubjectSERIALNUMBER=0117-02-015715,CN=Tanuki Software\, Ltd.,O=Tanuki Software\, Ltd.,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
93:45:46:c5:b9:de:56:3a:fe:9c:a9:97:d5:38:14:dd:8e:0b:78:91:95:dd:a9:fb:dc:ed:5c:06:bf:3d:61:96Signer
Actual PE Digest93:45:46:c5:b9:de:56:3a:fe:9c:a9:97:d5:38:14:dd:8e:0b:78:91:95:dd:a9:fb:dc:ed:5c:06:bf:3d:61:96Digest Algorithmsha256PE Digest Matchestruea9:13:f9:49:ee:2b:11:6a:24:ef:b1:e2:e0:d0:94:83:bb:72:cd:47Signer
Actual PE Digesta9:13:f9:49:ee:2b:11:6a:24:ef:b1:e2:e0:d0:94:83:bb:72:cd:47Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\jenkins-agent\workspace\wrapper\wrapper-32\wrapper_prerelease_3.5.59-pro\src\c\wrapper32_VC8__Win32_Release\wrapper.pdb
Imports
mpr
WNetCancelConnection2W
WNetAddConnection2W
WNetGetConnectionW
WNetGetUniversalNameW
shell32
ShellExecuteExW
netapi32
NetWkstaGetInfo
NetApiBufferFree
wsock32
ntohs
connect
select
__WSAFDIsSet
WSASetLastError
WSAGetLastError
sendto
WSAStartup
inet_ntoa
accept
ioctlsocket
htons
gethostname
recv
bind
socket
closesocket
send
listen
ws2_32
getaddrinfo
freeaddrinfo
getnameinfo
shlwapi
PathFindOnPathW
PathIsDirectoryW
advapi32
ControlService
ConvertSidToStringSidW
RegCreateKeyW
RegisterServiceCtrlHandlerW
LsaNtStatusToWinError
RegOpenKeyExW
IsValidSid
RegEnumValueW
QueryServiceStatusEx
SetServiceStatus
ChangeServiceConfigW
LsaClose
QueryServiceStatus
StartServiceW
DuplicateTokenEx
PrivilegeCheck
LookupPrivilegeNameW
GetSecurityDescriptorDacl
BuildExplicitAccessWithNameW
SetEntriesInAclW
QueryServiceObjectSecurity
GetAce
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetAclInformation
SetServiceObjectSecurity
ReportEventW
DeregisterEventSource
LookupAccountSidW
RegisterEventSourceW
LsaFreeMemory
RegSetValueExW
EnumServicesStatusExW
RegCloseKey
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceConfig2W
EqualSid
LookupPrivilegeValueW
AdjustTokenPrivileges
CreateServiceW
LsaRemoveAccountRights
CloseServiceHandle
LsaQueryInformationPolicy
IsWellKnownSid
DeleteService
StartServiceCtrlDispatcherW
LogonUserW
LsaOpenPolicy
LsaEnumerateAccountRights
GetTokenInformation
RegCreateKeyExW
LsaAddAccountRights
RegQueryValueExW
CreateProcessAsUserW
RegQueryInfoKeyW
RegDeleteKeyW
LookupAccountNameW
ChangeServiceConfig2W
QueryServiceConfigW
user32
GetWindowThreadProcessId
GetSystemMetrics
LoadStringW
EnumWindows
DestroyWindow
SetWindowPlacement
GetWindowRect
IsIconic
GetTopWindow
GetKeyState
SetForegroundWindow
FindWindowW
TranslateMessage
GetForegroundWindow
RegisterClassExW
GetWindowPlacement
SystemParametersInfoW
PeekMessageW
ShowWindow
CreateWindowExW
IsWindowVisible
UpdateWindow
DefWindowProcW
GetWindow
DispatchMessageW
PostMessageW
crypt32
CryptMsgClose
CryptDecodeObject
CryptQueryObject
CertGetNameStringW
CertFreeCertificateChain
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CertGetCertificateChain
CryptMsgGetParam
wintrust
WinVerifyTrust
pdh
PdhCollectQueryData
PdhCloseQuery
PdhOpenQueryW
PdhGetFormattedCounterValue
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
GetPerformanceInfo
ole32
CoUninitialize
CoInitialize
CoCreateInstance
StringFromCLSID
CoTaskMemFree
oleaut32
SysFreeString
activeds
ord3
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
iphlpapi
GetAdaptersAddresses
dnsapi
DnsQuery_W
DnsFree
kernel32
RtlUnwind
GetCurrentDirectoryA
GetDriveTypeA
LCMapStringW
SetHandleCount
GetStartupInfoA
CreateFileA
WriteConsoleA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetEnvironmentVariableA
GetStringTypeW
SetFilePointer
LCMapStringA
GetCommandLineW
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
InterlockedIncrement
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileInformationByHandle
FindNextFileW
MoveFileW
GetModuleFileNameA
GetFileType
SetStdHandle
LeaveCriticalSection
EnterCriticalSection
ReadConsoleInputW
GetTickCount
GetStringTypeA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
RaiseException
CompareStringW
HeapSize
ReadConsoleInputA
GetConsoleCP
InterlockedDecrement
DeleteFileW
GetSystemTimeAsFileTime
SetCurrentDirectoryW
SetEnvironmentVariableW
FindFirstFileW
FindClose
HeapAlloc
HeapFree
ReadProcessMemory
GetProcessAffinityMask
SetProcessAffinityMask
QueryPerformanceFrequency
GetProcessTimes
QueryPerformanceCounter
GetTimeZoneInformation
WriteConsoleW
GetModuleHandleA
SetEndOfFile
ExpandEnvironmentStringsW
CreateThread
SetFileAttributesW
lstrcpyW
ExitProcess
HeapReAlloc
GetProcessHeap
CompareStringA
FreeLibrary
GetFullPathNameW
CreateMutexW
PeekNamedPipe
GetCurrentProcess
GetEnvironmentStringsW
WaitForSingleObject
ConnectNamedPipe
GetModuleHandleW
CreateNamedPipeW
GenerateConsoleCtrlEvent
WriteFile
OpenProcess
WideCharToMultiByte
LoadLibraryW
GetConsoleMode
GetLocaleInfoW
GetVersionExW
SetConsoleMode
TerminateProcess
ReadFile
GetACP
MultiByteToWideChar
SetThreadLocale
GetStdHandle
GetLastError
SetLastError
GetThreadLocale
GetProcAddress
IsValidCodePage
Process32FirstW
GetSystemInfo
GetOEMCP
Process32NextW
SetConsoleTitleW
FreeEnvironmentStringsW
CreateToolhelp32Snapshot
ReleaseMutex
CloseHandle
GetSystemDefaultLangID
GetEnvironmentVariableW
GetFileSize
lstrcmpA
SetPriorityClass
GetDriveTypeW
AllocConsole
GetCPInfo
GetSystemDefaultUILanguage
CreateProcessW
EndUpdateResourceW
SetEvent
WaitNamedPipeW
GlobalAlloc
Sleep
CopyFileW
GetConsoleWindow
FormatMessageW
GetExitCodeProcess
FileTimeToSystemTime
GetModuleFileNameW
CreateFileW
lstrlenW
GetStartupInfoW
DisconnectNamedPipe
FlushFileBuffers
GetConsoleOutputCP
GetCPInfoExW
GetCurrentDirectoryW
GetLongPathNameW
BeginUpdateResourceW
GlobalFree
GetLocalTime
ProcessIdToSessionId
LocalAlloc
SetConsoleCtrlHandler
GlobalMemoryStatusEx
CreateEventW
SetNamedPipeHandleState
CreatePipe
UpdateResourceW
GetUserDefaultUILanguage
GetCurrentThreadId
DuplicateHandle
FileTimeToLocalFileTime
GetCurrentProcessId
LocalFree
ResumeThread
Sections
.text Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/wrapperw.exe.exe windows:5 windows x86 arch:x86
3957dd2899bf5138c986e3c317bf1d4a
Code Sign
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate
IssuerCN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBNot Before25-05-2021 00:00Not After31-12-2028 23:59SubjectCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate
IssuerCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBNot Before22-03-2021 00:00Not After21-03-2036 23:59SubjectCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:a9:d0:55:d3:78:c3:cc:1e:73:07:f1:0a:c6:6d:60Certificate
IssuerCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBNot Before20-02-2024 00:00Not After19-02-2027 23:59SubjectSERIALNUMBER=0117-02-015715,CN=Tanuki Software\, Ltd.,O=Tanuki Software\, Ltd.,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate
IssuerCN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBNot Before25-05-2021 00:00Not After31-12-2028 23:59SubjectCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate
IssuerCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBNot Before22-03-2021 00:00Not After21-03-2036 23:59SubjectCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:a9:d0:55:d3:78:c3:cc:1e:73:07:f1:0a:c6:6d:60Certificate
IssuerCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBNot Before20-02-2024 00:00Not After19-02-2027 23:59SubjectSERIALNUMBER=0117-02-015715,CN=Tanuki Software\, Ltd.,O=Tanuki Software\, Ltd.,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
bd:90:58:73:65:09:32:4f:91:48:4b:d4:e6:cc:a6:50:08:a5:90:28:44:7c:06:0e:92:2e:1a:bc:f3:bf:00:c7Signer
Actual PE Digestbd:90:58:73:65:09:32:4f:91:48:4b:d4:e6:cc:a6:50:08:a5:90:28:44:7c:06:0e:92:2e:1a:bc:f3:bf:00:c7Digest Algorithmsha256PE Digest Matchestrue98:b5:d0:24:5f:24:2c:d6:ea:d8:10:34:8e:21:33:96:2a:d9:c6:06Signer
Actual PE Digest98:b5:d0:24:5f:24:2c:d6:ea:d8:10:34:8e:21:33:96:2a:d9:c6:06Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\jenkins-agent\workspace\wrapper\wrapper-32\wrapper_prerelease_3.5.59-pro\src\c\wrapperw32_VC8__Win32_Release\wrapperw.pdb
Imports
mpr
WNetCancelConnection2W
WNetAddConnection2W
WNetGetConnectionW
WNetGetUniversalNameW
shell32
ShellExecuteExW
netapi32
NetWkstaGetInfo
NetApiBufferFree
wsock32
ntohs
connect
select
__WSAFDIsSet
WSASetLastError
WSAGetLastError
sendto
WSAStartup
inet_ntoa
accept
ioctlsocket
htons
gethostname
recv
bind
socket
closesocket
send
listen
ws2_32
getaddrinfo
freeaddrinfo
getnameinfo
shlwapi
PathFindOnPathW
PathRemoveExtensionW
PathFindFileNameW
PathIsDirectoryW
advapi32
DuplicateTokenEx
PrivilegeCheck
LookupPrivilegeNameW
GetSecurityDescriptorDacl
BuildExplicitAccessWithNameW
SetEntriesInAclW
QueryServiceObjectSecurity
GetAce
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetAclInformation
SetServiceObjectSecurity
ReportEventW
DeregisterEventSource
RegCreateKeyW
RegisterEventSourceW
LsaFreeMemory
RegSetValueExW
EnumServicesStatusExW
RegCloseKey
QueryServiceConfigW
ConvertSidToStringSidW
ControlService
RegisterServiceCtrlHandlerW
LsaNtStatusToWinError
RegOpenKeyExW
IsValidSid
RegEnumValueW
QueryServiceStatusEx
SetServiceStatus
ChangeServiceConfigW
LsaClose
QueryServiceStatus
StartServiceW
LookupAccountSidW
ChangeServiceConfig2W
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceConfig2W
EqualSid
LookupPrivilegeValueW
AdjustTokenPrivileges
CreateServiceW
LsaRemoveAccountRights
CloseServiceHandle
LsaQueryInformationPolicy
IsWellKnownSid
DeleteService
StartServiceCtrlDispatcherW
LogonUserW
LsaOpenPolicy
LsaEnumerateAccountRights
GetTokenInformation
RegCreateKeyExW
LsaAddAccountRights
RegQueryValueExW
CreateProcessAsUserW
RegQueryInfoKeyW
RegDeleteKeyW
LookupAccountNameW
user32
GetWindowThreadProcessId
GetSystemMetrics
EndPaint
DestroyWindow
SetWindowPlacement
GetWindowRect
IsIconic
IsChild
GetTopWindow
LoadImageW
GetKeyState
SetForegroundWindow
DialogBoxParamW
WindowFromPoint
FindWindowW
BeginPaint
GetDC
TranslateMessage
GetForegroundWindow
RegisterClassExW
GetWindowPlacement
GetAsyncKeyState
BringWindowToTop
SystemParametersInfoW
PeekMessageW
ReleaseDC
GetDlgItem
EndDialog
SendDlgItemMessageW
SetWindowPos
GetCursorPos
ShowWindow
CreateWindowExW
IsWindowVisible
SetDlgItemTextW
SendMessageW
UpdateWindow
SetWindowTextW
DefWindowProcW
GetWindow
DispatchMessageW
PostMessageW
EnumWindows
LoadStringW
gdi32
SelectObject
BitBlt
DeleteDC
GetDeviceCaps
GetStockObject
CreateCompatibleDC
CreateFontW
GetObjectW
crypt32
CertFindCertificateInStore
CryptDecodeObject
CryptMsgGetParam
CertGetCertificateChain
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CertFreeCertificateChain
CertGetNameStringW
CryptQueryObject
wintrust
WinVerifyTrust
pdh
PdhCollectQueryData
PdhCloseQuery
PdhOpenQueryW
PdhGetFormattedCounterValue
psapi
GetModuleFileNameExW
GetPerformanceInfo
GetProcessMemoryInfo
ole32
CoCreateInstance
CoUninitialize
CoInitialize
StringFromCLSID
CoTaskMemFree
oleaut32
SysFreeString
activeds
ord3
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
iphlpapi
GetAdaptersAddresses
dnsapi
DnsFree
DnsQuery_W
kernel32
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
RaiseException
CompareStringW
HeapSize
GetModuleHandleA
SetEndOfFile
GetProcessHeap
DeleteCriticalSection
VirtualFree
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
InterlockedIncrement
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileInformationByHandle
FindNextFileW
MoveFileW
GetFileType
SetStdHandle
ExitProcess
LeaveCriticalSection
EnterCriticalSection
ReadConsoleInputW
ReadConsoleInputA
GetConsoleCP
InterlockedDecrement
GetSystemTimeAsFileTime
SetCurrentDirectoryW
SetEnvironmentVariableW
FindFirstFileW
FindClose
GetStringTypeA
HeapFree
ReadProcessMemory
GetProcessAffinityMask
SetProcessAffinityMask
QueryPerformanceFrequency
GetProcessTimes
QueryPerformanceCounter
GetTimeZoneInformation
WriteConsoleW
ExpandEnvironmentStringsW
GetTickCount
GetCommandLineW
LCMapStringA
SetFilePointer
GetStringTypeW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
WriteConsoleA
GetStartupInfoA
SetHandleCount
LCMapStringW
GetDriveTypeA
GetCurrentDirectoryA
RtlUnwind
GetModuleFileNameA
HeapReAlloc
CreateThread
SetFileAttributesW
lstrcpyW
ResumeThread
LocalFree
GetCurrentProcessId
FileTimeToLocalFileTime
DuplicateHandle
GetCurrentThreadId
GetUserDefaultUILanguage
UpdateResourceW
CreatePipe
SetNamedPipeHandleState
CreateEventW
GlobalMemoryStatusEx
SetConsoleCtrlHandler
LocalAlloc
ProcessIdToSessionId
GetLocalTime
CompareStringA
GlobalFree
BeginUpdateResourceW
GetLongPathNameW
GetCurrentDirectoryW
HeapAlloc
CreateFileA
VirtualAlloc
DeleteFileW
GetFullPathNameW
CreateMutexW
PeekNamedPipe
FreeLibrary
GetCurrentProcess
GetEnvironmentStringsW
WaitForSingleObject
ConnectNamedPipe
GetModuleHandleW
CreateNamedPipeW
GenerateConsoleCtrlEvent
WriteFile
OpenProcess
WideCharToMultiByte
LoadLibraryW
GetConsoleMode
GetLocaleInfoW
GetVersionExW
SetConsoleMode
TerminateProcess
ReadFile
GetACP
MultiByteToWideChar
SetThreadLocale
GetStdHandle
GetLastError
SetLastError
GetThreadLocale
GetProcAddress
IsValidCodePage
Process32FirstW
GetSystemInfo
GetOEMCP
Process32NextW
SetConsoleTitleW
FreeEnvironmentStringsW
CreateToolhelp32Snapshot
ReleaseMutex
CloseHandle
GetSystemDefaultLangID
GetEnvironmentVariableW
GetFileSize
lstrcmpA
SetPriorityClass
GetDriveTypeW
AllocConsole
GetCPInfo
GetSystemDefaultUILanguage
CreateProcessW
EndUpdateResourceW
SetEvent
WaitNamedPipeW
GlobalAlloc
Sleep
CopyFileW
GetConsoleWindow
FormatMessageW
GetExitCodeProcess
MulDiv
FileTimeToSystemTime
GetModuleFileNameW
CreateFileW
lstrlenW
GetStartupInfoW
DisconnectNamedPipe
FlushFileBuffers
GetConsoleOutputCP
GetCPInfoExW
Sections
.text Size: 497KB - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
conf/demoapp.conf
-
conf/wrapper-license.conf
-
conf/wrapper.conf
-
doc/index.html.html
-
doc/revisions.txt
-
doc/wrapper-development-license-1.3.txt
-
doc/wrapper-server-license-1.3.txt
-
doc/wrapper-tsims-addendum-1.3.txt
-
lang/wrapperTestApp_de.mo
-
lang/wrapperTestApp_ja.mo
-
lang/wrapper_de.mo
-
lang/wrapper_ja.mo
-
lang/wrapperjni_de.mo
-
lang/wrapperjni_ja.mo
-
lib/wrapper.dll.dll windows:5 windows x86 arch:x86
b1523ad87a68f453e0811834083b44c6
Code Sign
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate
IssuerCN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBNot Before25-05-2021 00:00Not After31-12-2028 23:59SubjectCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate
IssuerCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBNot Before22-03-2021 00:00Not After21-03-2036 23:59SubjectCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:a9:d0:55:d3:78:c3:cc:1e:73:07:f1:0a:c6:6d:60Certificate
IssuerCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBNot Before20-02-2024 00:00Not After19-02-2027 23:59SubjectSERIALNUMBER=0117-02-015715,CN=Tanuki Software\, Ltd.,O=Tanuki Software\, Ltd.,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate
IssuerCN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBNot Before25-05-2021 00:00Not After31-12-2028 23:59SubjectCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate
IssuerCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBNot Before22-03-2021 00:00Not After21-03-2036 23:59SubjectCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:a9:d0:55:d3:78:c3:cc:1e:73:07:f1:0a:c6:6d:60Certificate
IssuerCN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GBNot Before20-02-2024 00:00Not After19-02-2027 23:59SubjectSERIALNUMBER=0117-02-015715,CN=Tanuki Software\, Ltd.,O=Tanuki Software\, Ltd.,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
30:55:55:d4:d6:c6:fc:d8:af:29:8a:66:0f:da:62:1c:fd:03:42:4f:03:6f:08:c3:92:b1:85:ce:85:0d:9b:42Signer
Actual PE Digest30:55:55:d4:d6:c6:fc:d8:af:29:8a:66:0f:da:62:1c:fd:03:42:4f:03:6f:08:c3:92:b1:85:ce:85:0d:9b:42Digest Algorithmsha256PE Digest Matchestrue0d:cd:33:f6:4c:22:0d:3b:b5:3c:c2:d8:4b:35:d0:92:87:1b:2c:90Signer
Actual PE Digest0d:cd:33:f6:4c:22:0d:3b:b5:3c:c2:d8:4b:35:d0:92:87:1b:2c:90Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\jenkins-agent\workspace\wrapper\wrapper-32\wrapper_prerelease_3.5.59-pro\src\c\wrapperJNI32_VC8__Win32_Release\wrapper.pdb
Imports
wsock32
WSAGetLastError
ntohs
inet_addr
advapi32
QueryServiceStatus
OpenServiceW
DuplicateTokenEx
RegCloseKey
RegEnumKeyExW
RegOpenKeyW
LookupAccountSidW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
CloseServiceHandle
EnumServicesStatusW
OpenSCManagerW
GetServiceDisplayNameW
StartServiceW
ControlService
CreateProcessAsUserW
user32
GetThreadDesktop
EnumWindows
GetWindowThreadProcessId
PostMessageW
MonitorFromPoint
iphlpapi
GetTcpTable
wtsapi32
WTSQueryUserToken
kernel32
GetLocaleInfoW
CreateFileA
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringA
FreeEnvironmentStringsW
CompareStringW
IsValidLocale
GetLastError
MultiByteToWideChar
GetACP
WideCharToMultiByte
WaitForSingleObject
ReleaseMutex
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FileTimeToSystemTime
LocalFree
FormatMessageW
CloseHandle
OpenProcess
GetProcAddress
GetModuleHandleW
GetCurrentProcessId
SetConsoleCtrlHandler
CreateMutexW
GetVersionExW
AddVectoredExceptionHandler
SetProcessShutdownParameters
GetProcessShutdownParameters
GetModuleFileNameW
SetLastError
RaiseException
GenerateConsoleCtrlEvent
SetConsoleTitleW
LoadLibraryW
LeaveCriticalSection
CreateProcessW
SetHandleInformation
CreatePipe
CreateFileW
CreateNamedPipeW
EnterCriticalSection
InitializeCriticalSection
ReadFile
PeekNamedPipe
WriteFile
TerminateProcess
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetEnvironmentStringsW
GetExitCodeProcess
lstrlenW
HeapAlloc
HeapFree
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
InterlockedDecrement
GetSystemTimeAsFileTime
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
ExitProcess
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
GetCPInfo
InterlockedIncrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
LCMapStringW
GetStringTypeW
SetFilePointer
SetStdHandle
RtlUnwind
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
InterlockedExchange
FreeEnvironmentStringsA
GetEnvironmentStrings
GetTickCount
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryA
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
Exports
Exports
_Java_org_tanukisoftware_wrapper_WrapperManager_accessViolationInner@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeCheckDeadLocks@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeDispose@12
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeExec@24
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetControlEvent@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetDpiAwareness@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetDpiScale@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetInteractiveUser@12
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetJavaPID@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetLibraryVersion@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetPortStatus@20
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeGetUser@12
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeInit@12
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeIsProfessionalEdition@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeIsStandardEdition@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeListServices@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeLoadWrapperProperties@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeLoadWrapperResources@20
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeRaiseExceptionInner@12
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeRaiseFailFastExceptionInner@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeRedirectPipes@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeRequestThreadDump@8
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeSendServiceControlCode@16
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeSetConsoleTitle@12
_Java_org_tanukisoftware_wrapper_WrapperManager_nativeSetDpiAwareness@12
_Java_org_tanukisoftware_wrapper_WrapperProcessConfig_isSupportedNative@12
_Java_org_tanukisoftware_wrapper_WrapperProcessConfig_nativeGetEnv@8
_Java_org_tanukisoftware_wrapper_WrapperProcessInputStream_nativeClose@8
_Java_org_tanukisoftware_wrapper_WrapperProcessInputStream_nativeRead2@20
_Java_org_tanukisoftware_wrapper_WrapperProcessInputStream_nativeRead@12
_Java_org_tanukisoftware_wrapper_WrapperProcessOutputStream_nativeClose@8
_Java_org_tanukisoftware_wrapper_WrapperProcessOutputStream_nativeWrite@12
_Java_org_tanukisoftware_wrapper_WrapperProcess_nativeDestroy@8
_Java_org_tanukisoftware_wrapper_WrapperProcess_nativeExitValue@8
_Java_org_tanukisoftware_wrapper_WrapperProcess_nativeIsAlive@8
_Java_org_tanukisoftware_wrapper_WrapperProcess_nativeWaitFor@8
_Java_org_tanukisoftware_wrapper_WrapperResources_nativeDestroyResource@8
_Java_org_tanukisoftware_wrapper_WrapperResources_nativeGetLocalizedString@12
Sections
.text Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
lib/wrapper.jar.jar
-
lib/wrapperdemo.jar.jar
-
lib/wrappertest.jar.jar
-
src/bin/App.bat.in.vbs
-
src/bin/AppCommand.bat.in.vbs
-
src/bin/AppNoWrapper.bat.in
-
src/bin/AppTemplate.bat.in.vbs
-
src/bin/AppTemplatePassThrough.bat.in.vbs
-
src/bin/InstallApp-NT.bat.in.vbs
-
src/bin/PauseApp-NT.bat.in.vbs
-
src/bin/QueryApp-NT.bat.in.vbs
-
src/bin/ResumeApp-NT.bat.in.vbs
-
src/bin/SetupApp.bat.in.vbs
-
src/bin/StartApp-NT.bat.in.vbs
-
src/bin/StopApp-NT.bat.in.vbs
-
src/bin/TeardownApp.bat.in.vbs
-
src/bin/UninstallApp-NT.bat.in.vbs
-
src/conf/wrapper-license-time.conf
-
src/conf/wrapper.conf.in
-
src/conf/wrapper.conf.in_ja