CrystalDiskInfo8_17_14[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

CrystalDiskInfo8_17_14.zip
Size

5.9MB
MD5

773f79174d2d64b0d2c7463251175357
SHA1

eecf3892a4928619295443330738fdc7e35a692e
SHA256

17f046a7da3e7c0e6d7686d3890b023de8f4fac722bb61a702af0d8ab29ff18a
SHA512

58c41d8c75e32dffa251fed8f10fd00d73a767f16411296e59db1ff2d89cc48d72169b77c491b59b85b563af4c0245c4465acd17d146258409887da7a3f75fcd
SSDEEP

98304:zwAFLpriyLyVE6JV5RjDhHjgvPiQNUJZI/p+gv5Or22J8ud6/GXVxm:EA3NuuS8NUw/p+K5OFJ6/GXHm

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CdiResource/MailKit.dll
unpack001/CdiResource/MimeKit.dll
unpack001/CdiResource/opus/opusdec.exe

Files

CrystalDiskInfo8_17_14.zip
.zip
CdiResource/AlertMail.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:89:c0:89:04:5c:fa:72:dc:25:15:3c:f2:e3:cf:58:13:50:3f:f1:9b:dd:b8:89:18:ee:ca:f4:36:70:44:fe
Signer

Actual PE Digest

2e:89:c0:89:04:5c:fa:72:dc:25:15:3c:f2:e3:cf:58:13:50:3f:f1:9b:dd:b8:89:18:ee:ca:f4:36:70:44:fe

Digest Algorithm

sha256

PE Digest Matches

true

91:03:55:e2:ef:ba:a6:3d:c7:2c:70:12:b6:85:6a:06:f3:c8:fb:73
Signer

Actual PE Digest

91:03:55:e2:ef:ba:a6:3d:c7:2c:70:12:b6:85:6a:06:f3:c8:fb:73

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\hiyo\Desktop\AlertMail.v12\AlertMail\obj\Release\AlertMail.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/AlertMail4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2a:98:9d:c5:99:17:aa:be:7c:e5:1c:9d:56:3b:98:3b:13:ea:4f:cf:66:7c:70:72:c3:e5:2c:d5:eb:08:80:4b
Signer

Actual PE Digest

2a:98:9d:c5:99:17:aa:be:7c:e5:1c:9d:56:3b:98:3b:13:ea:4f:cf:66:7c:70:72:c3:e5:2c:d5:eb:08:80:4b

Digest Algorithm

sha256

PE Digest Matches

true

0c:2d:5a:d5:ec:be:a3:33:f2:43:c5:77:f9:e1:82:db:e0:b3:8b:a9
Signer

Actual PE Digest

0c:2d:5a:d5:ec:be:a3:33:f2:43:c5:77:f9:e1:82:db:e0:b3:8b:a9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\hiyo\Desktop\AlertMail.v12\AlertMail\obj\Release\AlertMail.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/AlertMail48.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ab:94:01:87:a2:f9:d0:36:46:3d:31:ac:39:ec:98:04:22:14:ac:16:18:39:5a:e8:35:af:5c:ca:ab:15:52:b1
Signer

Actual PE Digest

ab:94:01:87:a2:f9:d0:36:46:3d:31:ac:39:ec:98:04:22:14:ac:16:18:39:5a:e8:35:af:5c:ca:ab:15:52:b1

Digest Algorithm

sha256

PE Digest Matches

true

35:cf:d5:f1:0f:1b:f1:45:c9:b3:2b:4d:d8:dd:17:33:af:10:28:f6
Signer

Actual PE Digest

35:cf:d5:f1:0f:1b:f1:45:c9:b3:2b:4d:d8:dd:17:33:af:10:28:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Drive\Projects\DiskInfo9\Mail\AlertMail\obj\Release\AlertMail48.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/MailKit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\src\MailKit\MailKit\obj\Release\net48\MailKit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 835KB - Virtual size: 834KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/MimeKit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\src\MimeKit\MimeKit\obj\Release\net48\MimeKit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/System.Buffers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

Actual PE Digest

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/dialog/Graph.css
CdiResource/dialog/Graph.html
.html .js polyglot
CdiResource/dialog/Graph8.html
.html .js polyglot
CdiResource/dialog/Option.html
.js
CdiResource/dialog/flot/excanvas.min.js
.js
CdiResource/dialog/flot/jquery.flot.min.js
.js
CdiResource/dialog/flot/jquery.min.js
.js
CdiResource/dialog/image/GraphAllOff.png
.png
CdiResource/dialog/image/GraphAllOn.png
.png
CdiResource/dialog/image/GraphReset.png
.png
CdiResource/dialog/image/background.png
.png
CdiResource/dialog/image/blank.png
.png
CdiResource/dialog/image/buttonDisable.png
.png
CdiResource/dialog/image/buttonEnable.png
.png
CdiResource/dialog/image/buttonHover.png
.png
CdiResource/dialog/image/file.png
.png
CdiResource/dialog/image/graphMenuBar.png
.png
CdiResource/dialog/image/labelDisable.png
.png
CdiResource/dialog/image/labelEnable.png
.png
CdiResource/dialog/image/labelUnsupported.png
.png
CdiResource/dialog/image/nofile.png
.png
CdiResource/language/Arabic.lang
CdiResource/language/Armenian.lang
CdiResource/language/Azeri.lang
CdiResource/language/Bulgarian.lang
CdiResource/language/Czech.lang
CdiResource/language/Danish.lang
CdiResource/language/Dutch.lang
CdiResource/language/English.lang
CdiResource/language/Filipino.lang
CdiResource/language/Finnish.lang
CdiResource/language/French.lang
CdiResource/language/Galician.lang
CdiResource/language/German.lang
CdiResource/language/German2.lang
CdiResource/language/Greek.lang
CdiResource/language/Hungarian.lang
CdiResource/language/Italian.lang
CdiResource/language/Japanese.lang
CdiResource/language/Korean.lang
CdiResource/language/Lithuanian.lang
CdiResource/language/Norwegian.lang
CdiResource/language/Polish.lang
CdiResource/language/Portuguese.lang
CdiResource/language/Romanian.lang
CdiResource/language/Russian.lang
CdiResource/language/Serbian.lang
CdiResource/language/Simplified Chinese.lang
CdiResource/language/Slovak.lang
CdiResource/language/Slovenian.lang
CdiResource/language/Spanish.lang
CdiResource/language/Swedish.lang
CdiResource/language/Thai.lang
CdiResource/language/Traditional Chinese.lang
CdiResource/language/Turkish.lang
CdiResource/language/Ukrainian.lang
CdiResource/language/Vietnamese.lang
CdiResource/opus/COPYING.txt
CdiResource/opus/README.txt
CdiResource/opus/opusdec.exe
.exe windows:4 windows x86 arch:x86

16aab3ac986f73988fe32e1eb6fe141d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
SetConsoleOutputCP
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fileno
_fmode
_initterm
_iob
_lock
_onexit
_setmode
_unlock
calloc
exit
fclose
feof
fflush
fprintf
fputc
fread
free
fseek
fwrite
getenv
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
putchar
puts
rand
realloc
signal
strchr
strcmp
strlen
strncmp
_wfopen
_wunlink
abort
atan2
atof
atoi
tolower
vfprintf
_wstat

shell32

CommandLineToArgvW

user32

MessageBoxA

winmm

waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

Exports

Exports

opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_get_version_string
opus_multistream_decode
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_parse
opus_pcm_soft_clip
opus_strerror

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/themes/Dark/Background-300.png
.png
CdiResource/themes/Dark/diskBad-100.png
.png
CdiResource/themes/Dark/diskBad-125.png
.png
CdiResource/themes/Dark/diskBad-150.png
.png
CdiResource/themes/Dark/diskBad-200.png
.png
CdiResource/themes/Dark/diskBad-250.png
.png
CdiResource/themes/Dark/diskBad-300.png
.png
CdiResource/themes/Dark/diskCaution-100.png
.png
CdiResource/themes/Dark/diskCaution-125.png
.png
CdiResource/themes/Dark/diskCaution-150.png
.png
CdiResource/themes/Dark/diskCaution-200.png
.png
CdiResource/themes/Dark/diskCaution-250.png
.png
CdiResource/themes/Dark/diskCaution-300.png
.png
CdiResource/themes/Dark/diskGood-100.png
.png
CdiResource/themes/Dark/diskGood-125.png
.png
CdiResource/themes/Dark/diskGood-150.png
.png
CdiResource/themes/Dark/diskGood-200.png
.png
CdiResource/themes/Dark/diskGood-250.png
.png
CdiResource/themes/Dark/diskGood-300.png
.png
CdiResource/themes/Dark/diskGoodGreen-100.png
.png
CdiResource/themes/Dark/diskGoodGreen-125.png
.png
CdiResource/themes/Dark/diskGoodGreen-150.png
.png
CdiResource/themes/Dark/diskGoodGreen-200.png
.png
CdiResource/themes/Dark/diskGoodGreen-250.png
.png
CdiResource/themes/Dark/diskGoodGreen-300.png
.png
CdiResource/themes/Dark/diskUnknown-100.png
.png
CdiResource/themes/Dark/diskUnknown-125.png
.png
CdiResource/themes/Dark/diskUnknown-150.png
.png
CdiResource/themes/Dark/diskUnknown-200.png
.png
CdiResource/themes/Dark/diskUnknown-250.png
.png
CdiResource/themes/Dark/diskUnknown-300.png
.png
CdiResource/themes/Dark/noDisk-100.png
.png
CdiResource/themes/Dark/noDisk-125.png
.png
CdiResource/themes/Dark/noDisk-150.png
.png
CdiResource/themes/Dark/noDisk-200.png
.png
CdiResource/themes/Dark/noDisk-250.png
.png
CdiResource/themes/Dark/noDisk-300.png
.png
CdiResource/themes/Dark/theme.ini
CdiResource/themes/Default/Background-300.png
.png
CdiResource/themes/Default/diskBad-100.png
.png
CdiResource/themes/Default/diskBad-125.png
.png
CdiResource/themes/Default/diskBad-150.png
.png
CdiResource/themes/Default/diskBad-200.png
.png
CdiResource/themes/Default/diskBad-250.png
.png
CdiResource/themes/Default/diskBad-300.png
.png
CdiResource/themes/Default/diskCaution-100.png
.png
CdiResource/themes/Default/diskCaution-125.png
.png
CdiResource/themes/Default/diskCaution-150.png
.png
CdiResource/themes/Default/diskCaution-200.png
.png
CdiResource/themes/Default/diskCaution-250.png
.png
CdiResource/themes/Default/diskCaution-300.png
.png
CdiResource/themes/Default/diskGood-100.png
.png
CdiResource/themes/Default/diskGood-125.png
.png
CdiResource/themes/Default/diskGood-150.png
.png
CdiResource/themes/Default/diskGood-200.png
.png
CdiResource/themes/Default/diskGood-250.png
.png
CdiResource/themes/Default/diskGood-300.png
.png
CdiResource/themes/Default/diskGoodGreen-100.png
.png
CdiResource/themes/Default/diskGoodGreen-125.png
.png
CdiResource/themes/Default/diskGoodGreen-150.png
.png
CdiResource/themes/Default/diskGoodGreen-200.png
.png
CdiResource/themes/Default/diskGoodGreen-250.png
.png
CdiResource/themes/Default/diskGoodGreen-300.png
.png
CdiResource/themes/Default/diskStatusBad-100.png
.png
CdiResource/themes/Default/diskStatusBad-125.png
.png
CdiResource/themes/Default/diskStatusBad-150.png
.png
CdiResource/themes/Default/diskStatusBad-200.png
.png
CdiResource/themes/Default/diskStatusBad-250.png
.png
CdiResource/themes/Default/diskStatusBad-300.png
.png
CdiResource/themes/Default/diskStatusCaution-100.png
.png
CdiResource/themes/Default/diskStatusCaution-125.png
.png
CdiResource/themes/Default/diskStatusCaution-150.png
.png
CdiResource/themes/Default/diskStatusCaution-200.png
.png
CdiResource/themes/Default/diskStatusCaution-250.png
.png
CdiResource/themes/Default/diskStatusCaution-300.png
.png
CdiResource/themes/Default/diskStatusGood-100.png
.png
CdiResource/themes/Default/diskStatusGood-125.png
.png
CdiResource/themes/Default/diskStatusGood-150.png
.png
CdiResource/themes/Default/diskStatusGood-200.png
.png
CdiResource/themes/Default/diskStatusGood-250.png
.png
CdiResource/themes/Default/diskStatusGood-300.png
.png
CdiResource/themes/Default/diskStatusGoodGreen-100.png
.png
CdiResource/themes/Default/diskStatusGoodGreen-125.png
.png
CdiResource/themes/Default/diskStatusGoodGreen-150.png
.png
CdiResource/themes/Default/diskStatusGoodGreen-200.png
.png
CdiResource/themes/Default/diskStatusGoodGreen-250.png
.png
CdiResource/themes/Default/diskStatusGoodGreen-300.png
.png
CdiResource/themes/Default/diskStatusUnknown-100.png
.png
CdiResource/themes/Default/diskStatusUnknown-125.png
.png
CdiResource/themes/Default/diskStatusUnknown-150.png
.png
CdiResource/themes/Default/diskStatusUnknown-200.png
.png
CdiResource/themes/Default/diskStatusUnknown-250.png
.png
CdiResource/themes/Default/diskStatusUnknown-300.png
.png
CdiResource/themes/Default/diskUnknown-100.png
.png
CdiResource/themes/Default/diskUnknown-125.png
.png
CdiResource/themes/Default/diskUnknown-150.png
.png
CdiResource/themes/Default/diskUnknown-200.png
.png
CdiResource/themes/Default/diskUnknown-250.png
.png
CdiResource/themes/Default/diskUnknown-300.png
.png
CdiResource/themes/Default/logo-100.png
.png
CdiResource/themes/Default/logo-125.png
.png
CdiResource/themes/Default/logo-150.png
.png
CdiResource/themes/Default/logo-200.png
.png
CdiResource/themes/Default/logo-250.png
.png
CdiResource/themes/Default/logo-300.png
.png
CdiResource/themes/Default/nextDisk-100.png
.png
CdiResource/themes/Default/nextDisk-125.png
.png
CdiResource/themes/Default/nextDisk-150.png
.png
CdiResource/themes/Default/nextDisk-200.png
.png
CdiResource/themes/Default/nextDisk-250.png
.png
CdiResource/themes/Default/nextDisk-300.png
.png
CdiResource/themes/Default/noDisk-100.png
.png
CdiResource/themes/Default/noDisk-125.png
.png
CdiResource/themes/Default/noDisk-150.png
.png
CdiResource/themes/Default/noDisk-200.png
.png
CdiResource/themes/Default/noDisk-250.png
.png
CdiResource/themes/Default/noDisk-300.png
.png
CdiResource/themes/Default/playSound-100.png
.png
CdiResource/themes/Default/playSound-125.png
.png
CdiResource/themes/Default/playSound-150.png
.png
CdiResource/themes/Default/playSound-200.png
.png
CdiResource/themes/Default/playSound-250.png
.png
CdiResource/themes/Default/playSound-300.png
.png
CdiResource/themes/Default/preDisk-100.png
.png
CdiResource/themes/Default/preDisk-125.png
.png
CdiResource/themes/Default/preDisk-150.png
.png
CdiResource/themes/Default/preDisk-200.png
.png
CdiResource/themes/Default/preDisk-250.png
.png
CdiResource/themes/Default/preDisk-300.png
.png
CdiResource/themes/Default/selectSound-100.png
.png
CdiResource/themes/Default/selectSound-125.png
.png
CdiResource/themes/Default/selectSound-150.png
.png
CdiResource/themes/Default/selectSound-200.png
.png
CdiResource/themes/Default/selectSound-250.png
.png
CdiResource/themes/Default/selectSound-300.png
.png
CdiResource/themes/Default/temperatureBad-100.png
.png
CdiResource/themes/Default/temperatureBad-125.png
.png
CdiResource/themes/Default/temperatureBad-150.png
.png
CdiResource/themes/Default/temperatureBad-200.png
.png
CdiResource/themes/Default/temperatureBad-250.png
.png
CdiResource/themes/Default/temperatureBad-300.png
.png
CdiResource/themes/Default/temperatureCaution-100.png
.png
CdiResource/themes/Default/temperatureCaution-125.png
.png
CdiResource/themes/Default/temperatureCaution-150.png
.png
CdiResource/themes/Default/temperatureCaution-200.png
.png
CdiResource/themes/Default/temperatureCaution-250.png
.png
CdiResource/themes/Default/temperatureCaution-300.png
.png
CdiResource/themes/Default/temperatureGood-100.png
.png
CdiResource/themes/Default/temperatureGood-125.png
.png
CdiResource/themes/Default/temperatureGood-150.png
.png
CdiResource/themes/Default/temperatureGood-200.png
.png
CdiResource/themes/Default/temperatureGood-250.png
.png
CdiResource/themes/Default/temperatureGood-300.png
.png
CdiResource/themes/Default/temperatureGoodGreen-100.png
.png
CdiResource/themes/Default/temperatureGoodGreen-125.png
.png
CdiResource/themes/Default/temperatureGoodGreen-150.png
.png
CdiResource/themes/Default/temperatureGoodGreen-200.png
.png
CdiResource/themes/Default/temperatureGoodGreen-250.png
.png
CdiResource/themes/Default/temperatureGoodGreen-300.png
.png
CdiResource/themes/Default/temperatureUnknown-100.png
.png
CdiResource/themes/Default/temperatureUnknown-125.png
.png
CdiResource/themes/Default/temperatureUnknown-150.png
.png
CdiResource/themes/Default/temperatureUnknown-200.png
.png
CdiResource/themes/Default/temperatureUnknown-250.png
.png
CdiResource/themes/Default/temperatureUnknown-300.png
.png
CdiResource/themes/Default/theme.ini
CdiResource/themes/Default/volumeL-100.png
.png
CdiResource/themes/Default/volumeL-125.png
.png
CdiResource/themes/Default/volumeL-150.png
.png
CdiResource/themes/Default/volumeL-200.png
.png
CdiResource/themes/Default/volumeL-250.png
.png
CdiResource/themes/Default/volumeL-300.png
.png
CdiResource/themes/Default/volumeM-100.png
.png
CdiResource/themes/Default/volumeM-125.png
.png
CdiResource/themes/Default/volumeM-150.png
.png
CdiResource/themes/Default/volumeM-200.png
.png
CdiResource/themes/Default/volumeM-250.png
.png
CdiResource/themes/Default/volumeM-300.png
.png
CdiResource/themes/Default/volumeS-100.png
.png
CdiResource/themes/Default/volumeS-125.png
.png
CdiResource/themes/Default/volumeS-150.png
.png
CdiResource/themes/Default/volumeS-200.png
.png
CdiResource/themes/Default/volumeS-250.png
.png
CdiResource/themes/Default/volumeS-300.png
.png
CdiResource/themes/Default/volumeZ-100.png
.png
CdiResource/themes/Default/volumeZ-125.png
.png
CdiResource/themes/Default/volumeZ-150.png
.png
CdiResource/themes/Default/volumeZ-200.png
.png
CdiResource/themes/Default/volumeZ-250.png
.png
CdiResource/themes/Default/volumeZ-300.png
.png
CdiResource/themes/FlatSquare/Readme.txt
CdiResource/themes/FlatSquare/diskBad-100.png
.png
CdiResource/themes/FlatSquare/diskBad-125.png
.png
CdiResource/themes/FlatSquare/diskBad-150.png
.png
CdiResource/themes/FlatSquare/diskBad-200.png
.png
CdiResource/themes/FlatSquare/diskBad-250.png
.png
CdiResource/themes/FlatSquare/diskBad-300.png
.png
CdiResource/themes/FlatSquare/diskCaution-100.png
.png
CdiResource/themes/FlatSquare/diskCaution-125.png
.png
CdiResource/themes/FlatSquare/diskCaution-150.png
.png
CdiResource/themes/FlatSquare/diskCaution-200.png
.png
CdiResource/themes/FlatSquare/diskCaution-250.png
.png
CdiResource/themes/FlatSquare/diskCaution-300.png
.png
CdiResource/themes/FlatSquare/diskGood-100.png
.png
CdiResource/themes/FlatSquare/diskGood-125.png
.png
CdiResource/themes/FlatSquare/diskGood-150.png
.png
CdiResource/themes/FlatSquare/diskGood-200.png
.png
CdiResource/themes/FlatSquare/diskGood-250.png
.png
CdiResource/themes/FlatSquare/diskGood-300.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-100.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-125.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-150.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-200.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-250.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-300.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-100.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-125.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-150.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-200.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-250.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-300.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-100.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-125.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-150.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-200.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-250.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-300.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-100.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-125.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-150.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-200.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-250.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-300.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-100.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-125.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-150.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-200.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-250.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-300.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-100.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-125.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-150.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-200.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-250.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-300.png
.png
CdiResource/themes/FlatSquare/diskUnknown-100.png
.png
CdiResource/themes/FlatSquare/diskUnknown-125.png
.png
CdiResource/themes/FlatSquare/diskUnknown-150.png
.png
CdiResource/themes/FlatSquare/diskUnknown-200.png
.png
CdiResource/themes/FlatSquare/diskUnknown-250.png
.png
CdiResource/themes/FlatSquare/diskUnknown-300.png
.png
CdiResource/themes/FlatSquare/nextDisk-100.png
.png
CdiResource/themes/FlatSquare/nextDisk-125.png
.png
CdiResource/themes/FlatSquare/nextDisk-150.png
.png
CdiResource/themes/FlatSquare/nextDisk-200.png
.png
CdiResource/themes/FlatSquare/nextDisk-250.png
.png
CdiResource/themes/FlatSquare/nextDisk-300.png
.png
CdiResource/themes/FlatSquare/noDisk-100.png
.png
CdiResource/themes/FlatSquare/noDisk-125.png
.png
CdiResource/themes/FlatSquare/noDisk-150.png
.png
CdiResource/themes/FlatSquare/noDisk-200.png
.png
CdiResource/themes/FlatSquare/noDisk-250.png
.png
CdiResource/themes/FlatSquare/noDisk-300.png
.png
CdiResource/themes/FlatSquare/preDisk-100.png
.png
CdiResource/themes/FlatSquare/preDisk-125.png
.png
CdiResource/themes/FlatSquare/preDisk-150.png
.png
CdiResource/themes/FlatSquare/preDisk-200.png
.png
CdiResource/themes/FlatSquare/preDisk-250.png
.png
CdiResource/themes/FlatSquare/preDisk-300.png
.png
CdiResource/themes/FlatSquare/temperatureBad-100.png
.png
CdiResource/themes/FlatSquare/temperatureBad-125.png
.png
CdiResource/themes/FlatSquare/temperatureBad-150.png
.png
CdiResource/themes/FlatSquare/temperatureBad-200.png
.png
CdiResource/themes/FlatSquare/temperatureBad-250.png
.png
CdiResource/themes/FlatSquare/temperatureBad-300.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-100.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-125.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-150.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-200.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-250.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-300.png
.png
CdiResource/themes/FlatSquare/temperatureGood-100.png
.png
CdiResource/themes/FlatSquare/temperatureGood-125.png
.png
CdiResource/themes/FlatSquare/temperatureGood-150.png
.png
CdiResource/themes/FlatSquare/temperatureGood-200.png
.png
CdiResource/themes/FlatSquare/temperatureGood-250.png
.png
CdiResource/themes/FlatSquare/temperatureGood-300.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-100.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-125.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-150.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-200.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-250.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-300.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-100.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-125.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-150.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-200.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-250.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-300.png
.png
CdiResource/themes/FlatSquare/theme.ini
CdiResource/themes/Simplicity/Readme.txt
CdiResource/themes/Simplicity/diskBad-100.png
.png
CdiResource/themes/Simplicity/diskBad-125.png
.png
CdiResource/themes/Simplicity/diskBad-150.png
.png
CdiResource/themes/Simplicity/diskBad-200.png
.png
CdiResource/themes/Simplicity/diskBad-250.png
.png
CdiResource/themes/Simplicity/diskBad-300.png
.png
CdiResource/themes/Simplicity/diskCaution-100.png
.png
CdiResource/themes/Simplicity/diskCaution-125.png
.png
CdiResource/themes/Simplicity/diskCaution-150.png
.png
CdiResource/themes/Simplicity/diskCaution-200.png
.png
CdiResource/themes/Simplicity/diskCaution-250.png
.png
CdiResource/themes/Simplicity/diskCaution-300.png
.png
CdiResource/themes/Simplicity/diskGood-100.png
.png
CdiResource/themes/Simplicity/diskGood-125.png
.png
CdiResource/themes/Simplicity/diskGood-150.png
.png
CdiResource/themes/Simplicity/diskGood-200.png
.png
CdiResource/themes/Simplicity/diskGood-250.png
.png
CdiResource/themes/Simplicity/diskGood-300.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-100.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-125.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-150.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-200.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-250.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-300.png
.png
CdiResource/themes/Simplicity/diskStatusBad-100.png
.png
CdiResource/themes/Simplicity/diskStatusBad-125.png
.png
CdiResource/themes/Simplicity/diskStatusBad-150.png
.png
CdiResource/themes/Simplicity/diskStatusBad-200.png
.png
CdiResource/themes/Simplicity/diskStatusBad-250.png
.png
CdiResource/themes/Simplicity/diskStatusBad-300.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-100.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-125.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-150.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-200.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-250.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-300.png
.png
CdiResource/themes/Simplicity/diskStatusGood-100.png
.png
CdiResource/themes/Simplicity/diskStatusGood-125.png
.png
CdiResource/themes/Simplicity/diskStatusGood-150.png
.png
CdiResource/themes/Simplicity/diskStatusGood-200.png
.png
CdiResource/themes/Simplicity/diskStatusGood-250.png
.png
CdiResource/themes/Simplicity/diskStatusGood-300.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-100.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-125.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-150.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-200.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-250.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-300.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-100.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-125.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-150.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-200.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-250.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-300.png
.png
CdiResource/themes/Simplicity/diskUnknown-100.png
.png
CdiResource/themes/Simplicity/diskUnknown-125.png
.png
CdiResource/themes/Simplicity/diskUnknown-150.png
.png
CdiResource/themes/Simplicity/diskUnknown-200.png
.png
CdiResource/themes/Simplicity/diskUnknown-250.png
.png
CdiResource/themes/Simplicity/diskUnknown-300.png
.png
CdiResource/themes/Simplicity/temperatureBad-100.png
.png
CdiResource/themes/Simplicity/temperatureBad-125.png
.png
CdiResource/themes/Simplicity/temperatureBad-150.png
.png
CdiResource/themes/Simplicity/temperatureBad-200.png
.png
CdiResource/themes/Simplicity/temperatureBad-250.png
.png
CdiResource/themes/Simplicity/temperatureBad-300.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-100.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-125.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-150.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-200.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-300.png
.png
CdiResource/themes/Simplicity/temperatureCaution-100.png
.png
CdiResource/themes/Simplicity/temperatureCaution-125.png
.png
CdiResource/themes/Simplicity/temperatureCaution-150.png
.png
CdiResource/themes/Simplicity/temperatureCaution-200.png
.png
CdiResource/themes/Simplicity/temperatureCaution-250.png
.png
CdiResource/themes/Simplicity/temperatureCaution-300.png
.png
CdiResource/themes/Simplicity/temperatureGood-100.png
.png
CdiResource/themes/Simplicity/temperatureGood-125.png
.png
CdiResource/themes/Simplicity/temperatureGood-150.png
.png
CdiResource/themes/Simplicity/temperatureGood-200.png
.png
CdiResource/themes/Simplicity/temperatureGood-250.png
.png
CdiResource/themes/Simplicity/temperatureGood-300.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-100.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-125.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-150.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-200.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-250.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-300.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-100.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-125.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-150.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-200.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-250.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-300.png
.png
CdiResource/themes/Simplicity/theme.ini
DiskInfo32.exe
.exe windows:5 windows x86 arch:x86

65d99a49135a47c417301fd754b164f0

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28-07-2022 08:56

Not After

27-07-2033 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28-07-2022 08:56

Not After

27-07-2033 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:f2:db:51:62:1c:f1:f1:56:20:19:63:0b:9f:52:c6:fd:02:0c:8f:86:dc:0c:83:00:21:cb:5a:a8:c0:70:c6
Signer

Actual PE Digest

41:f2:db:51:62:1c:f1:f1:56:20:19:63:0b:9f:52:c6:fd:02:0c:8f:86:dc:0c:83:00:21:cb:5a:a8:c0:70:c6

Digest Algorithm

sha256

PE Digest Matches

true

2f:35:f8:80:1c:1c:5f:e7:3b:42:46:36:79:72:8a:5c:c2:06:64:70
Signer

Actual PE Digest

2f:35:f8:80:1c:1c:5f:e7:3b:42:46:36:79:72:8a:5c:c2:06:64:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
FileTimeToLocalFileTime
GetUserDefaultUILanguage
LoadLibraryExA
WriteConsoleW
GetSystemDefaultUILanguage
FreeEnvironmentStringsW
GetEnvironmentStringsW
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
LCMapStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
IsValidLocale
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCPInfo
ExitProcess
GetStdHandle
HeapQueryInformation
GetFileType
SetStdHandle
GetModuleHandleExW
GetCommandLineA
VirtualQuery
GetSystemInfo
RtlUnwind
OutputDebugStringW
GetLocaleInfoW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
CreateEventW
SetEvent
GetCurrentProcessId
lstrcmpA
GetVersionExW
GetCurrentThread
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FormatMessageW
MulDiv
LocalFree
GlobalFree
GetModuleHandleA
SetLastError
OutputDebugStringA
GetACP
DefineDosDeviceW
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetDriveTypeW
MultiByteToWideChar
DeviceIoControl
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
LoadLibraryW
GetPrivateProfileStringW
GetTickCount
GetWindowsDirectoryW
GetFileAttributesW
GetCurrentProcess
VerifyVersionInfoW
VerSetConditionMask
FindClose
FindNextFileW
FindFirstFileW
lstrlenW
lstrcmpW
VirtualProtect
LoadLibraryExW
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
WritePrivateProfileStringW
GetVolumeInformationW
GetDiskFreeSpaceExW
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetComputerNameW
GetLocalTime
DeleteFileW
GetTempPathW
CloseHandle
ReleaseMutex
CreateDirectoryW
CreateMutexW
Sleep
GetCommandLineW
GetPrivateProfileIntW
GetModuleFileNameW
SetErrorMode
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetLastError
SetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount

user32

MapDialogRect
RealChildWindowFromPoint
GetSysColorBrush
WindowFromPoint
CharUpperW
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
TranslateMessage
GetMessageW
RegisterClipboardFormatW
PostQuitMessage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
WinHelpW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowPlacement
IsChild
InvalidateRect
EnableWindow
RegisterWindowMessageW
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
SetCapture
ReleaseCapture
PostThreadMessageW
IntersectRect
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
LoadIconW
DestroyMenu
UnregisterDeviceNotification
EnumWindows
GetWindowTextW
GetWindowThreadProcessId
PostMessageW
IsIconic
SendMessageW
GetSystemMetrics
DrawIcon
GetSubMenu
CheckMenuRadioItem
IsWindowVisible
CheckMenuItem
DrawMenuBar
GetMenuState
GetWindowRect
WaitForInputIdle
FillRect
KillTimer
SetTimer
SetForegroundWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterDeviceNotificationW
MonitorFromRect
CopyRect
LoadImageW
GetCursorPos
TrackPopupMenu
CreatePopupMenu
CreateMenu
InsertMenuItemW
wsprintfW
ModifyMenuW
EnableMenuItem
RemoveMenu
AppendMenuW
GetClientRect
SetWindowContextHelpId
SetScrollRange
GetScrollPos
SetScrollPos
SetCursor
LoadCursorW
SetWindowPos
MoveWindow
ShowWindow
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetMenuItemCount
GetMenuItemID
GetParent
OffsetRect
SetRectEmpty
SendDlgItemMessageA
AdjustWindowRect
GetWindowInfo
UnregisterClassW
FrameRect
PrintWindow
GetWindowLongW
SetWindowLongW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromWindow
ReleaseDC
GetDC
SetPropW
SystemParametersInfoW

gdi32

SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
GetRgnBox
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
SetMapMode
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetClipBox
Escape
CreateRectRgnIndirect
CreateBitmap
SetBkColor
GetPixel
CreatePatternBrush
GetBkColor
GetTextColor
CreateSolidBrush
CreateFontIndirectW
GetTextExtentPoint32W
SetTextColor
LineTo
MoveToEx
CreatePen
GetDeviceCaps
CreateCompatibleBitmap
SetBitmapBits
GetBitmapBits
GetObjectW
SelectObject
SetDIBColorTable
DeleteDC
BitBlt
EnumFontFamiliesExW
SetBkMode
CreateCompatibleDC
CreateDIBSection
DeleteObject

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

DeregisterEventSource
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
OpenSCManagerW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
OpenServiceW
ReportEventW
RegisterEventSourceW
StartServiceW
QueryServiceStatus
CloseServiceHandle
RegCreateKeyExW

shell32

ShellExecuteW
ord680
SHAppBarMessage
Shell_NotifyIconW
CommandLineToArgvW

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent
InitCommonControlsEx

shlwapi

UrlCreateFromPathW
PathFindFileNameW
SHDeleteKeyW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindExtensionW

uxtheme

SetWindowTheme

ole32

CoGetClassObject
CLSIDFromString
CoRevokeClassObject
CoInitialize
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID

oleaut32

SysAllocStringLen
VariantChangeType
VariantCopy
LoadRegTypeLi
DispCallFunc
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayDestroy
VariantClear
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
SafeArrayGetElement
SysFreeString
SysAllocString
VariantInit

gdiplus

GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown

winmm

mciSendCommandW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

setupapi

SetupDiEnumDeviceInfo
CM_Get_Device_IDW
SetupDiGetClassDevsW

wintrust

WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain

crypt32

CertGetNameStringW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 760KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DiskInfo64.exe
.exe windows:5 windows x64 arch:x64

9200e1c38937babcbf30363b137b2cda

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28-07-2022 08:56

Not After

27-07-2033 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

23-02-2022 13:05

Not After

23-02-2023 13:05

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28-07-2022 08:56

Not After

27-07-2033 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bd:7d:8f:2d:e7:bb:9b:70:ab:3c:26:6f:b4:f8:52:09:fc:56:27:5d:06:30:66:e4:6e:57:46:9b:22:be:b9:11
Signer

Actual PE Digest

bd:7d:8f:2d:e7:bb:9b:70:ab:3c:26:6f:b4:f8:52:09:fc:56:27:5d:06:30:66:e4:6e:57:46:9b:22:be:b9:11

Digest Algorithm

sha256

PE Digest Matches

true

45:1f:0d:b4:65:d6:db:03:94:f3:bf:fa:18:f2:6e:fb:39:b6:e3:fe
Signer

Actual PE Digest

45:1f:0d:b4:65:d6:db:03:94:f3:bf:fa:18:f2:6e:fb:39:b6:e3:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetUserDefaultUILanguage
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LoadLibraryExA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetLocaleInfoW
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
LCMapStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
EnumSystemLocalesW
IsValidLocale
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCPInfo
ExitProcess
GetStdHandle
HeapQueryInformation
GetFileType
SetStdHandle
GetCommandLineA
VirtualQuery
GetSystemInfo
RtlPcToFileHeader
RtlUnwindEx
RaiseException
OutputDebugStringW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetSystemDefaultUILanguage
CreateEventW
SetEvent
GetTickCount64
GetCurrentProcessId
lstrcmpA
GetVersionExW
GetCurrentThread
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FormatMessageW
MulDiv
LocalFree
GlobalFree
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
SetLastError
OutputDebugStringA
GetACP
DefineDosDeviceW
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetDriveTypeW
MultiByteToWideChar
DeviceIoControl
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
LoadLibraryW
GetPrivateProfileStringW
GetTickCount
GetWindowsDirectoryW
GetCurrentProcess
VerifyVersionInfoW
VerSetConditionMask
FindClose
FindNextFileW
FindFirstFileW
lstrlenW
lstrcmpW
VirtualProtect
LoadLibraryExW
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
WritePrivateProfileStringW
GetVolumeInformationW
GetDiskFreeSpaceExW
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetComputerNameW
GetLocalTime
DeleteFileW
GetTempPathW
CloseHandle
ReleaseMutex
CreateDirectoryW
CreateMutexW
Sleep
GetCommandLineW
GetPrivateProfileIntW
GetModuleFileNameW
SetErrorMode
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount

user32

RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
SetWindowPos
MoveWindow
ShowWindow
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetMenuItemCount
GetMenuItemID
GetParent
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
InvalidateRect
OffsetRect
SetRectEmpty
SendDlgItemMessageA
AdjustWindowRect
GetWindowInfo
UnregisterClassW
FrameRect
PrintWindow
GetWindowLongW
SetWindowLongW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromWindow
ReleaseDC
GetDC
SetPropW
SystemParametersInfoW
FillRect
LoadCursorW
SetCursor
SetScrollPos
GetPropW
RemovePropW
AdjustWindowRectEx
MessageBoxW
ScreenToClient
MapWindowPoints
GetSysColor
EqualRect
PtInRect
GetWindowLongPtrW
GetScrollPos
SetScrollRange
AppendMenuW
RemoveMenu
SetWindowLongPtrW
GetClassLongPtrW
GetClassNameW
GetTopWindow
GetLastActivePopup
SetWindowsHookExW
UnhookWindowsHookEx
GrayStringW
GetClientRect
EnableWindow
RegisterWindowMessageW
LoadIconW
DestroyMenu
UnregisterDeviceNotification
EnumWindows
GetWindowTextW
GetWindowThreadProcessId
PostMessageW
IsIconic
SendMessageW
GetSystemMetrics
DrawIcon
GetSubMenu
CheckMenuRadioItem
IsWindowVisible
CheckMenuItem
DrawMenuBar
GetMenuState
GetWindowRect
WaitForInputIdle
KillTimer
SetTimer
SetForegroundWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterDeviceNotificationW
MonitorFromRect
CopyRect
LoadImageW
GetCursorPos
TrackPopupMenu
CreatePopupMenu
CreateMenu
InsertMenuItemW
wsprintfW
PostQuitMessage
RegisterClipboardFormatW
GetMessageW
TranslateMessage
ModifyMenuW
EnableMenuItem
CallNextHookEx
WinHelpW
GetMonitorInfoW
DrawTextW
MessageBeep
GetNextDlgGroupItem
SetWindowContextHelpId
DrawTextExW
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
IntersectRect
PostThreadMessageW
ReleaseCapture
SetCapture
MapDialogRect
RealChildWindowFromPoint
GetSysColorBrush
WindowFromPoint
CharUpperW
ClientToScreen
GetWindowDC
TabbedTextOutW
SetMenuItemBitmaps
IsRectEmpty

gdi32

Escape
GetClipBox
GetStockObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SetBkMode
SetMapMode
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
GetRgnBox
CreateRectRgnIndirect
CreateBitmap
SetBkColor
GetPixel
CreatePatternBrush
GetBkColor
GetTextColor
CreateSolidBrush
CreateFontIndirectW
GetTextExtentPoint32W
SetTextColor
LineTo
MoveToEx
CreatePen
GetDeviceCaps
CreateCompatibleBitmap
SetBitmapBits
GetBitmapBits
GetObjectW
SetDIBColorTable
SelectObject
DeleteObject
CreateDIBSection
CreateCompatibleDC
EnumFontFamiliesExW
DeleteDC
BitBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

DeregisterEventSource
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
ReportEventW
RegisterEventSourceW
StartServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW

shell32

ShellExecuteW
ord680
SHAppBarMessage
Shell_NotifyIconW
CommandLineToArgvW

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindExtensionW
UrlCreateFromPathW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
SHDeleteKeyW

uxtheme

SetWindowTheme

ole32

CoInitialize
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CLSIDFromString
OleIsCurrentClipboard

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreate
SystemTimeToVariantTime
SysStringLen
DispCallFunc
LoadRegTypeLi
VariantCopy
VariantChangeType
SysAllocStringLen
SafeArrayGetElement
SysFreeString
SysAllocString
VariantClear
VariantInit
OleCreateFontIndirect
VariantTimeToSystemTime

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageEncodersSize
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipSaveImageToFile
GdipGetImageWidth
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImagePalette
GdipCreateFromHDC
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdiplusShutdown
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusStartup
GdipGetImageEncoders

winmm

mciSendCommandW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
CM_Get_Device_IDW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain

crypt32

CertGetNameStringW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 871KB - Virtual size: 871KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DiskInfoA64.exe
License/COPYRIGHT-ja.txt
License/COPYRIGHT.txt
License/MailKit-LICENSE.txt
License/MimeKit-LICENSE.txt
License/NVMeInterpreter-LICENSE.txt
License/PolyHook_2_0-LICENSE.txt
License/SlotSpeedGetter-LICENSE.txt
License/win32-darkmode-LICENSE.txt
ReadMe.txt

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7dCertificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7dCertificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2e:89:c0:89:04:5c:fa:72:dc:25:15:3c:f2:e3:cf:58:13:50:3f:f1:9b:dd:b8:89:18:ee:ca:f4:36:70:44:feSigner

91:03:55:e2:ef:ba:a6:3d:c7:2c:70:12:b6:85:6a:06:f3:c8:fb:73Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 57KB - Virtual size: 57KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7dCertificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7dCertificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2a:98:9d:c5:99:17:aa:be:7c:e5:1c:9d:56:3b:98:3b:13:ea:4f:cf:66:7c:70:72:c3:e5:2c:d5:eb:08:80:4bSigner

0c:2d:5a:d5:ec:be:a3:33:f2:43:c5:77:f9:e1:82:db:e0:b3:8b:a9Signer

Headers

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2e:89:c0:89:04:5c:fa:72:dc:25:15:3c:f2:e3:cf:58:13:50:3f:f1:9b:dd:b8:89:18:ee:ca:f4:36:70:44:fe
Signer

91:03:55:e2:ef:ba:a6:3d:c7:2c:70:12:b6:85:6a:06:f3:c8:fb:73
Signer

.text
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2a:98:9d:c5:99:17:aa:be:7c:e5:1c:9d:56:3b:98:3b:13:ea:4f:cf:66:7c:70:72:c3:e5:2c:d5:eb:08:80:4b
Signer

0c:2d:5a:d5:ec:be:a3:33:f2:43:c5:77:f9:e1:82:db:e0:b3:8b:a9
Signer

.text
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

70:af:b7:26:ef:1d:b0:3a:ed:5b:b0:f2:8c:29:c4:7d
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

ab:94:01:87:a2:f9:d0:36:46:3d:31:ac:39:ec:98:04:22:14:ac:16:18:39:5a:e8:35:af:5c:ca:ab:15:52:b1
Signer

35:cf:d5:f1:0f:1b:f1:45:c9:b3:2b:4d:d8:dd:17:33:af:10:28:f6
Signer

.text
Size: 51KB - Virtual size: 50KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 835KB - Virtual size: 834KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B