CrystalDiskInfo8_1_0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

CrystalDiskInfo8_1_0.zip
Size

4.3MB
MD5

563d0ae995dc41973260681dab96ad7a
SHA1

ba60a6c8c9533efe65b3c33901e0516ce09504a8
SHA256

840f394f6aad421bc24fda4f1625a318c4f1c136d1067be0c8ab621af81743ec
SHA512

48179365aca54c3701f150cf33c55ed23abec9a5ea6e28dfb8bdcd3a00e4ff6ed4007edf7b01337bc41dd6f68b0dfa877a0eff5fc38c9f4a167c035d64944053
SSDEEP

98304:A74DdJdi5O4M/vvgKQCaPJw6fsYByuRUYSpsU7bzS4/wPbyKZxy9MmQ:FdJdi5OhIKQ4EkASpsU7ZsyQxClQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CdiResource/AlertMail.exe
unpack001/CdiResource/AlertMail4.exe
unpack001/CdiResource/opus/opusdec.exe

Files

CrystalDiskInfo8_1_0.zip
.zip
CdiResource/AlertMail.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\HotProject\AlertMail\AlertMail\obj\Release\AlertMail.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/AlertMail4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\HotProject\AlertMail\AlertMail\obj\Release\AlertMail.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/dialog/Graph.css
CdiResource/dialog/Graph.html
.html .js polyglot
CdiResource/dialog/Graph8.html
.html .js polyglot
CdiResource/dialog/Option.html
.js
CdiResource/dialog/flot/excanvas.min.js
.js
CdiResource/dialog/flot/jquery.flot.min.js
.js
CdiResource/dialog/flot/jquery.min.js
.js
CdiResource/dialog/image/GraphAllOff.png
.png
CdiResource/dialog/image/GraphAllOn.png
.png
CdiResource/dialog/image/GraphReset.png
.png
CdiResource/dialog/image/background.png
.png
CdiResource/dialog/image/blank.png
.png
CdiResource/dialog/image/buttonDisable.png
.png
CdiResource/dialog/image/buttonEnable.png
.png
CdiResource/dialog/image/buttonHover.png
.png
CdiResource/dialog/image/file.png
.png
CdiResource/dialog/image/graphMenuBar.png
.png
CdiResource/dialog/image/labelDisable.png
.png
CdiResource/dialog/image/labelEnable.png
.png
CdiResource/dialog/image/labelUnsupported.png
.png
CdiResource/dialog/image/nofile.png
.png
CdiResource/gadget/CrystalDiskInfo.Gadget
.cab
CrystalDiskInfo.html
Gadget.xml
Settings.html
css/Gadget.css
css/Settings.css
images/CrystalDiskInfo.png
.png
images/background.png
.png
images/healthBad.png
.png
images/healthCaution.png
.png
images/healthGood.png
.png
images/healthUnknown.png
.png
images/logo.png
.png
images/temperatureBad.png
.png
images/temperatureCaution.png
.png
images/temperatureGood.png
.png
images/temperatureUnknown.png
.png
js/CrystalDiskInfo.js
.js
js/Settings.js
.js
CdiResource/language/Arabic.lang
CdiResource/language/Armenian.lang
CdiResource/language/Azeri.lang
CdiResource/language/Bulgarian.lang
CdiResource/language/Czech.lang
CdiResource/language/Danish.lang
CdiResource/language/Dutch.lang
CdiResource/language/English.lang
CdiResource/language/Finnish.lang
CdiResource/language/French.lang
CdiResource/language/German.lang
CdiResource/language/German2.lang
CdiResource/language/Greek.lang
CdiResource/language/Hungarian.lang
CdiResource/language/Italian.lang
CdiResource/language/Japanese.lang
CdiResource/language/Korean.lang
CdiResource/language/Lithuanian.lang
CdiResource/language/Norwegian.lang
CdiResource/language/Polish.lang
CdiResource/language/Portuguese.lang
CdiResource/language/Romanian.lang
CdiResource/language/Russian.lang
CdiResource/language/Serbian.lang
CdiResource/language/Simplified Chinese.lang
CdiResource/language/Slovak.lang
CdiResource/language/Slovenian.lang
CdiResource/language/Spanish.lang
CdiResource/language/Swedish.lang
CdiResource/language/Thai.lang
CdiResource/language/Traditional Chinese.lang
CdiResource/language/Turkish.lang
CdiResource/language/Ukrainian.lang
CdiResource/language/Vietnamese.lang
CdiResource/opus/COPYING.txt
CdiResource/opus/README.txt
CdiResource/opus/opusdec.exe
.exe windows:4 windows x86 arch:x86

16aab3ac986f73988fe32e1eb6fe141d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
SetConsoleOutputCP
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fileno
_fmode
_initterm
_iob
_lock
_onexit
_setmode
_unlock
calloc
exit
fclose
feof
fflush
fprintf
fputc
fread
free
fseek
fwrite
getenv
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
putchar
puts
rand
realloc
signal
strchr
strcmp
strlen
strncmp
_wfopen
_wunlink
abort
atan2
atof
atoi
tolower
vfprintf
_wstat

shell32

CommandLineToArgvW

user32

MessageBoxA

winmm

waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

Exports

Exports

opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_get_version_string
opus_multistream_decode
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_parse
opus_pcm_soft_clip
opus_strerror

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CdiResource/themes/FlatSquare/Readme.txt
CdiResource/themes/FlatSquare/diskBad-100.png
.png
CdiResource/themes/FlatSquare/diskBad-125.png
.png
CdiResource/themes/FlatSquare/diskBad-150.png
.png
CdiResource/themes/FlatSquare/diskBad-200.png
.png
CdiResource/themes/FlatSquare/diskBad-250.png
.png
CdiResource/themes/FlatSquare/diskBad-300.png
.png
CdiResource/themes/FlatSquare/diskCaution-100.png
.png
CdiResource/themes/FlatSquare/diskCaution-125.png
.png
CdiResource/themes/FlatSquare/diskCaution-150.png
.png
CdiResource/themes/FlatSquare/diskCaution-200.png
.png
CdiResource/themes/FlatSquare/diskCaution-250.png
.png
CdiResource/themes/FlatSquare/diskCaution-300.png
.png
CdiResource/themes/FlatSquare/diskGood-100.png
.png
CdiResource/themes/FlatSquare/diskGood-125.png
.png
CdiResource/themes/FlatSquare/diskGood-150.png
.png
CdiResource/themes/FlatSquare/diskGood-200.png
.png
CdiResource/themes/FlatSquare/diskGood-250.png
.png
CdiResource/themes/FlatSquare/diskGood-300.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-100.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-125.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-150.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-200.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-250.png
.png
CdiResource/themes/FlatSquare/diskGoodGreen-300.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-100.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-125.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-150.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-200.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-250.png
.png
CdiResource/themes/FlatSquare/diskStatusBad-300.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-100.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-125.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-150.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-200.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-250.png
.png
CdiResource/themes/FlatSquare/diskStatusCaution-300.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-100.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-125.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-150.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-200.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-250.png
.png
CdiResource/themes/FlatSquare/diskStatusGood-300.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-100.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-125.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-150.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-200.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-250.png
.png
CdiResource/themes/FlatSquare/diskStatusGoodGreen-300.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-100.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-125.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-150.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-200.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-250.png
.png
CdiResource/themes/FlatSquare/diskStatusUnknown-300.png
.png
CdiResource/themes/FlatSquare/diskUnknown-100.png
.png
CdiResource/themes/FlatSquare/diskUnknown-125.png
.png
CdiResource/themes/FlatSquare/diskUnknown-150.png
.png
CdiResource/themes/FlatSquare/diskUnknown-200.png
.png
CdiResource/themes/FlatSquare/diskUnknown-250.png
.png
CdiResource/themes/FlatSquare/diskUnknown-300.png
.png
CdiResource/themes/FlatSquare/nextDisk-100.png
.png
CdiResource/themes/FlatSquare/nextDisk-125.png
.png
CdiResource/themes/FlatSquare/nextDisk-150.png
.png
CdiResource/themes/FlatSquare/nextDisk-200.png
.png
CdiResource/themes/FlatSquare/nextDisk-250.png
.png
CdiResource/themes/FlatSquare/nextDisk-300.png
.png
CdiResource/themes/FlatSquare/noDisk-100.png
.png
CdiResource/themes/FlatSquare/noDisk-125.png
.png
CdiResource/themes/FlatSquare/noDisk-150.png
.png
CdiResource/themes/FlatSquare/noDisk-200.png
.png
CdiResource/themes/FlatSquare/noDisk-250.png
.png
CdiResource/themes/FlatSquare/noDisk-300.png
.png
CdiResource/themes/FlatSquare/preDisk-100.png
.png
CdiResource/themes/FlatSquare/preDisk-125.png
.png
CdiResource/themes/FlatSquare/preDisk-150.png
.png
CdiResource/themes/FlatSquare/preDisk-200.png
.png
CdiResource/themes/FlatSquare/preDisk-250.png
.png
CdiResource/themes/FlatSquare/preDisk-300.png
.png
CdiResource/themes/FlatSquare/temperatureBad-100.png
.png
CdiResource/themes/FlatSquare/temperatureBad-125.png
.png
CdiResource/themes/FlatSquare/temperatureBad-150.png
.png
CdiResource/themes/FlatSquare/temperatureBad-200.png
.png
CdiResource/themes/FlatSquare/temperatureBad-250.png
.png
CdiResource/themes/FlatSquare/temperatureBad-300.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-100.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-125.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-150.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-200.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-250.png
.png
CdiResource/themes/FlatSquare/temperatureCaution-300.png
.png
CdiResource/themes/FlatSquare/temperatureGood-100.png
.png
CdiResource/themes/FlatSquare/temperatureGood-125.png
.png
CdiResource/themes/FlatSquare/temperatureGood-150.png
.png
CdiResource/themes/FlatSquare/temperatureGood-200.png
.png
CdiResource/themes/FlatSquare/temperatureGood-250.png
.png
CdiResource/themes/FlatSquare/temperatureGood-300.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-100.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-125.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-150.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-200.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-250.png
.png
CdiResource/themes/FlatSquare/temperatureGoodGreen-300.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-100.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-125.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-150.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-200.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-250.png
.png
CdiResource/themes/FlatSquare/temperatureUnknown-300.png
.png
CdiResource/themes/Simplicity/Readme.txt
CdiResource/themes/Simplicity/diskBad-100.png
.png
CdiResource/themes/Simplicity/diskBad-125.png
.png
CdiResource/themes/Simplicity/diskBad-150.png
.png
CdiResource/themes/Simplicity/diskBad-200.png
.png
CdiResource/themes/Simplicity/diskBad-250.png
.png
CdiResource/themes/Simplicity/diskBad-300.png
.png
CdiResource/themes/Simplicity/diskCaution-100.png
.png
CdiResource/themes/Simplicity/diskCaution-125.png
.png
CdiResource/themes/Simplicity/diskCaution-150.png
.png
CdiResource/themes/Simplicity/diskCaution-200.png
.png
CdiResource/themes/Simplicity/diskCaution-250.png
.png
CdiResource/themes/Simplicity/diskCaution-300.png
.png
CdiResource/themes/Simplicity/diskGood-100.png
.png
CdiResource/themes/Simplicity/diskGood-125.png
.png
CdiResource/themes/Simplicity/diskGood-150.png
.png
CdiResource/themes/Simplicity/diskGood-200.png
.png
CdiResource/themes/Simplicity/diskGood-250.png
.png
CdiResource/themes/Simplicity/diskGood-300.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-100.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-125.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-150.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-200.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-250.png
.png
CdiResource/themes/Simplicity/diskGoodGreen-300.png
.png
CdiResource/themes/Simplicity/diskStatusBad-100.png
.png
CdiResource/themes/Simplicity/diskStatusBad-125.png
.png
CdiResource/themes/Simplicity/diskStatusBad-150.png
.png
CdiResource/themes/Simplicity/diskStatusBad-200.png
.png
CdiResource/themes/Simplicity/diskStatusBad-250.png
.png
CdiResource/themes/Simplicity/diskStatusBad-300.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-100.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-125.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-150.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-200.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-250.png
.png
CdiResource/themes/Simplicity/diskStatusCaution-300.png
.png
CdiResource/themes/Simplicity/diskStatusGood-100.png
.png
CdiResource/themes/Simplicity/diskStatusGood-125.png
.png
CdiResource/themes/Simplicity/diskStatusGood-150.png
.png
CdiResource/themes/Simplicity/diskStatusGood-200.png
.png
CdiResource/themes/Simplicity/diskStatusGood-250.png
.png
CdiResource/themes/Simplicity/diskStatusGood-300.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-100.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-125.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-150.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-200.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-250.png
.png
CdiResource/themes/Simplicity/diskStatusGoodGreen-300.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-100.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-125.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-150.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-200.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-250.png
.png
CdiResource/themes/Simplicity/diskStatusUnknown-300.png
.png
CdiResource/themes/Simplicity/diskUnknown-100.png
.png
CdiResource/themes/Simplicity/diskUnknown-125.png
.png
CdiResource/themes/Simplicity/diskUnknown-150.png
.png
CdiResource/themes/Simplicity/diskUnknown-200.png
.png
CdiResource/themes/Simplicity/diskUnknown-250.png
.png
CdiResource/themes/Simplicity/diskUnknown-300.png
.png
CdiResource/themes/Simplicity/temperatureBad-100.png
.png
CdiResource/themes/Simplicity/temperatureBad-125.png
.png
CdiResource/themes/Simplicity/temperatureBad-150.png
.png
CdiResource/themes/Simplicity/temperatureBad-200.png
.png
CdiResource/themes/Simplicity/temperatureBad-250.png
.png
CdiResource/themes/Simplicity/temperatureBad-300.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-100.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-125.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-150.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-200.png
.png
CdiResource/themes/Simplicity/temperatureBadBad-300.png
.png
CdiResource/themes/Simplicity/temperatureCaution-100.png
.png
CdiResource/themes/Simplicity/temperatureCaution-125.png
.png
CdiResource/themes/Simplicity/temperatureCaution-150.png
.png
CdiResource/themes/Simplicity/temperatureCaution-200.png
.png
CdiResource/themes/Simplicity/temperatureCaution-250.png
.png
CdiResource/themes/Simplicity/temperatureCaution-300.png
.png
CdiResource/themes/Simplicity/temperatureGood-100.png
.png
CdiResource/themes/Simplicity/temperatureGood-125.png
.png
CdiResource/themes/Simplicity/temperatureGood-150.png
.png
CdiResource/themes/Simplicity/temperatureGood-200.png
.png
CdiResource/themes/Simplicity/temperatureGood-250.png
.png
CdiResource/themes/Simplicity/temperatureGood-300.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-100.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-125.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-150.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-200.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-250.png
.png
CdiResource/themes/Simplicity/temperatureGoodGreen-300.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-100.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-125.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-150.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-200.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-250.png
.png
CdiResource/themes/Simplicity/temperatureUnknown-300.png
.png
CdiResource/themes/default/diskBad-100.png
.png
CdiResource/themes/default/diskBad-125.png
.png
CdiResource/themes/default/diskBad-150.png
.png
CdiResource/themes/default/diskBad-200.png
.png
CdiResource/themes/default/diskBad-250.png
.png
CdiResource/themes/default/diskBad-300.png
.png
CdiResource/themes/default/diskCaution-100.png
.png
CdiResource/themes/default/diskCaution-125.png
.png
CdiResource/themes/default/diskCaution-150.png
.png
CdiResource/themes/default/diskCaution-200.png
.png
CdiResource/themes/default/diskCaution-250.png
.png
CdiResource/themes/default/diskCaution-300.png
.png
CdiResource/themes/default/diskGood-100.png
.png
CdiResource/themes/default/diskGood-125.png
.png
CdiResource/themes/default/diskGood-150.png
.png
CdiResource/themes/default/diskGood-200.png
.png
CdiResource/themes/default/diskGood-250.png
.png
CdiResource/themes/default/diskGood-300.png
.png
CdiResource/themes/default/diskGoodGreen-100.png
.png
CdiResource/themes/default/diskGoodGreen-125.png
.png
CdiResource/themes/default/diskGoodGreen-150.png
.png
CdiResource/themes/default/diskGoodGreen-200.png
.png
CdiResource/themes/default/diskGoodGreen-250.png
.png
CdiResource/themes/default/diskGoodGreen-300.png
.png
CdiResource/themes/default/diskStatusBad-100.png
.png
CdiResource/themes/default/diskStatusBad-125.png
.png
CdiResource/themes/default/diskStatusBad-150.png
.png
CdiResource/themes/default/diskStatusBad-200.png
.png
CdiResource/themes/default/diskStatusBad-250.png
.png
CdiResource/themes/default/diskStatusBad-300.png
.png
CdiResource/themes/default/diskStatusCaution-100.png
.png
CdiResource/themes/default/diskStatusCaution-125.png
.png
CdiResource/themes/default/diskStatusCaution-150.png
.png
CdiResource/themes/default/diskStatusCaution-200.png
.png
CdiResource/themes/default/diskStatusCaution-250.png
.png
CdiResource/themes/default/diskStatusCaution-300.png
.png
CdiResource/themes/default/diskStatusGood-100.png
.png
CdiResource/themes/default/diskStatusGood-125.png
.png
CdiResource/themes/default/diskStatusGood-150.png
.png
CdiResource/themes/default/diskStatusGood-200.png
.png
CdiResource/themes/default/diskStatusGood-250.png
.png
CdiResource/themes/default/diskStatusGood-300.png
.png
CdiResource/themes/default/diskStatusGoodGreen-100.png
.png
CdiResource/themes/default/diskStatusGoodGreen-125.png
.png
CdiResource/themes/default/diskStatusGoodGreen-150.png
.png
CdiResource/themes/default/diskStatusGoodGreen-200.png
.png
CdiResource/themes/default/diskStatusGoodGreen-250.png
.png
CdiResource/themes/default/diskStatusGoodGreen-300.png
.png
CdiResource/themes/default/diskStatusUnknown-100.png
.png
CdiResource/themes/default/diskStatusUnknown-125.png
.png
CdiResource/themes/default/diskStatusUnknown-150.png
.png
CdiResource/themes/default/diskStatusUnknown-200.png
.png
CdiResource/themes/default/diskStatusUnknown-250.png
.png
CdiResource/themes/default/diskStatusUnknown-300.png
.png
CdiResource/themes/default/diskUnknown-100.png
.png
CdiResource/themes/default/diskUnknown-125.png
.png
CdiResource/themes/default/diskUnknown-150.png
.png
CdiResource/themes/default/diskUnknown-200.png
.png
CdiResource/themes/default/diskUnknown-250.png
.png
CdiResource/themes/default/diskUnknown-300.png
.png
CdiResource/themes/default/logo-100.png
.png
CdiResource/themes/default/logo-125.png
.png
CdiResource/themes/default/logo-150.png
.png
CdiResource/themes/default/logo-200.png
.png
CdiResource/themes/default/logo-250.png
.png
CdiResource/themes/default/logo-300.png
.png
CdiResource/themes/default/nextDisk-100.png
.png
CdiResource/themes/default/nextDisk-125.png
.png
CdiResource/themes/default/nextDisk-150.png
.png
CdiResource/themes/default/nextDisk-200.png
.png
CdiResource/themes/default/nextDisk-250.png
.png
CdiResource/themes/default/nextDisk-300.png
.png
CdiResource/themes/default/noDisk-100.png
.png
CdiResource/themes/default/noDisk-125.png
.png
CdiResource/themes/default/noDisk-150.png
.png
CdiResource/themes/default/noDisk-200.png
.png
CdiResource/themes/default/noDisk-250.png
.png
CdiResource/themes/default/noDisk-300.png
.png
CdiResource/themes/default/playSound-100.png
.png
CdiResource/themes/default/playSound-125.png
.png
CdiResource/themes/default/playSound-150.png
.png
CdiResource/themes/default/playSound-200.png
.png
CdiResource/themes/default/playSound-250.png
.png
CdiResource/themes/default/playSound-300.png
.png
CdiResource/themes/default/preDisk-100.png
.png
CdiResource/themes/default/preDisk-125.png
.png
CdiResource/themes/default/preDisk-150.png
.png
CdiResource/themes/default/preDisk-200.png
.png
CdiResource/themes/default/preDisk-250.png
.png
CdiResource/themes/default/preDisk-300.png
.png
CdiResource/themes/default/selectSound-100.png
.png
CdiResource/themes/default/selectSound-125.png
.png
CdiResource/themes/default/selectSound-150.png
.png
CdiResource/themes/default/selectSound-200.png
.png
CdiResource/themes/default/selectSound-250.png
.png
CdiResource/themes/default/selectSound-300.png
.png
CdiResource/themes/default/temperatureBad-100.png
.png
CdiResource/themes/default/temperatureBad-125.png
.png
CdiResource/themes/default/temperatureBad-150.png
.png
CdiResource/themes/default/temperatureBad-200.png
.png
CdiResource/themes/default/temperatureBad-250.png
.png
CdiResource/themes/default/temperatureBad-300.png
.png
CdiResource/themes/default/temperatureCaution-100.png
.png
CdiResource/themes/default/temperatureCaution-125.png
.png
CdiResource/themes/default/temperatureCaution-150.png
.png
CdiResource/themes/default/temperatureCaution-200.png
.png
CdiResource/themes/default/temperatureCaution-250.png
.png
CdiResource/themes/default/temperatureCaution-300.png
.png
CdiResource/themes/default/temperatureGood-100.png
.png
CdiResource/themes/default/temperatureGood-125.png
.png
CdiResource/themes/default/temperatureGood-150.png
.png
CdiResource/themes/default/temperatureGood-200.png
.png
CdiResource/themes/default/temperatureGood-250.png
.png
CdiResource/themes/default/temperatureGood-300.png
.png
CdiResource/themes/default/temperatureGoodGreen-100.png
.png
CdiResource/themes/default/temperatureGoodGreen-125.png
.png
CdiResource/themes/default/temperatureGoodGreen-150.png
.png
CdiResource/themes/default/temperatureGoodGreen-200.png
.png
CdiResource/themes/default/temperatureGoodGreen-250.png
.png
CdiResource/themes/default/temperatureGoodGreen-300.png
.png
CdiResource/themes/default/temperatureUnknown-100.png
.png
CdiResource/themes/default/temperatureUnknown-125.png
.png
CdiResource/themes/default/temperatureUnknown-150.png
.png
CdiResource/themes/default/temperatureUnknown-200.png
.png
CdiResource/themes/default/temperatureUnknown-250.png
.png
CdiResource/themes/default/temperatureUnknown-300.png
.png
DiskInfo32.exe
.exe windows:5 windows x86 arch:x86

25bf2f8ebd15b1cad65bb7e825aa6341

Code Sign

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

16/03/2016, 00:00

Not After

16/03/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/12/2018, 03:04

Not After

03/03/2021, 08:40

Subject

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:db
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign TSA for Standard - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

01/09/1998, 12:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:22:cc:70:33:77:a3:42:7c:93:a9:8d
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

07/12/2018, 04:22

Not After

03/03/2021, 08:40

Subject

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8b:11:a0:f4:11:8b:af:3d:c3:f0:69:34:15:77:17:1a:78:7b:4f:2c:55:72:76:71:93:f4:3d:7a:8b:59:a4:28
Signer

Actual PE Digest

8b:11:a0:f4:11:8b:af:3d:c3:f0:69:34:15:77:17:1a:78:7b:4f:2c:55:72:76:71:93:f4:3d:7a:8b:59:a4:28

Digest Algorithm

sha256

PE Digest Matches

true

b7:03:56:52:f1:99:f9:df:af:96:98:b8:7d:ec:cd:10:4c:90:6f:69
Signer

Actual PE Digest

b7:03:56:52:f1:99:f9:df:af:96:98:b8:7d:ec:cd:10:4c:90:6f:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
RtlUnwind
OutputDebugStringW
GetSystemInfo
VirtualQuery
GetCommandLineA
CreateThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetStdHandle
GetFileType
HeapQueryInformation
QueryPerformanceFrequency
GetStdHandle
ExitProcess
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetCPInfo
GetStringTypeW
IsValidCodePage
GetOEMCP
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
LoadLibraryExA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
ExitThread
GetTempFileNameW
GetProfileIntW
SearchPathW
FindResourceExW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetCurrentDirectoryW
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetThreadLocale
FileTimeToSystemTime
GlobalGetAtomNameW
lstrcpyW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
lstrcmpA
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
WideCharToMultiByte
CopyFileW
FormatMessageW
MulDiv
GlobalSize
LoadLibraryW
GetModuleHandleA
FreeResource
SetLastError
OutputDebugStringA
LocalFree
LocalAlloc
GetCurrentThread
lstrcmpiW
GetWindowsDirectoryW
GetCurrentProcess
DefineDosDeviceW
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetDriveTypeW
MultiByteToWideChar
DeviceIoControl
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
FindClose
FindNextFileW
FindFirstFileW
GetTimeZoneInformation
CreateDirectoryW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetLocalTime
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
SizeofResource
CreateProcessW
GetComputerNameW
DeleteFileW
GetTempPathW
CloseHandle
ReleaseMutex
GetVersionExW
CreateMutexW
Sleep
GetCommandLineW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
SetErrorMode
GetTickCount
GetPrivateProfileStringW
GetProcAddress
GetModuleHandleW
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
InitializeCriticalSectionAndSpinCount
GetLastError
EnterCriticalSection
LeaveCriticalSection
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource

user32

RegisterClipboardFormatW
PostQuitMessage
WindowFromPoint
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
LoadMenuW
DrawStateW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessageW
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
WaitMessage
PostThreadMessageW
EnableWindow
SendMessageW
CheckDlgButton
GetMenuDefaultItem
SetWindowPos
MoveWindow
ShowWindow
OffsetRect
SetRectEmpty
SendDlgItemMessageA
UnhookWindowsHookEx
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetMenuStringW
GetParent
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
FillRect
UnregisterClassW
SetScrollPos
GetScrollPos
SetScrollRange
AppendMenuW
RemoveMenu
ModifyMenuW
InsertMenuItemW
CreateMenu
TranslateMessage
ShowOwnedPopups
GetKeyNameTextW
MapVirtualKeyW
GetMenuItemInfoW
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
TrackMouseEvent
DestroyIcon
LoadImageW
CopyImage
GetAsyncKeyState
MapDialogRect
EnumDisplayMonitors
CreatePopupMenu
TrackPopupMenu
GetCursorPos
RegisterDeviceNotificationW
IntersectRect
IsZoomed
CharUpperW
SetCapture
ReleaseCapture
GetSystemMenu
DeleteMenu
SetWindowRgn
MessageBeep
GetMessagePos
GetClientRect
CopyRect
DrawTextW
SetCursor
LoadCursorW
IsClipboardFormatAvailable
wsprintfW
GetDC
ReleaseDC
SystemParametersInfoW
MonitorFromWindow
LoadAcceleratorsW
TranslateAcceleratorW
GetWindowRect
GetWindowInfo
AdjustWindowRect
GetSystemMetrics
EnableMenuItem
DrawMenuBar
SetForegroundWindow
RegisterWindowMessageW
LoadIconW
DestroyMenu
UnregisterDeviceNotification
EnumWindows
GetWindowTextW
GetWindowThreadProcessId
PostMessageW
IsIconic
DrawIcon
GetSubMenu
CheckMenuRadioItem
IsWindowVisible
CheckMenuItem
GetMenuState
WaitForInputIdle
KillTimer
SetTimer
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetWindowLongW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetRect
NotifyWinEvent
SetMenuDefaultItem
GetWindowLongW
SetLayeredWindowAttributes
IsRectEmpty
SetWindowContextHelpId
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
GetIconInfo
HideCaret
InvertRect
SetClassLongW
SetParent
DrawEdge
DrawFrameControl
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
CharUpperBuffW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
IsCharLowerW
MapVirtualKeyExW
GetDoubleClickTime
GetWindowRgn
DestroyCursor
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GetUpdateRect
InvalidateRect

gdi32

RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CombineRgn
IntersectClipRect
SetRectRgn
DPtoLP
CreateRoundRectRgn
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SetPixel
StretchBlt
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
PtVisible
LPtoDP
OffsetRgn
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
Escape
CreateRectRgn
CreatePen
CreateSolidBrush
CreateBitmap
SetTextColor
SetBkColor
CreateDCW
CopyMetaFileW
EnumFontFamiliesExW
CreateHatchBrush
CreatePatternBrush
Rectangle
GetStockObject
SetDCPenColor
GetObjectA
CreateFontIndirectW
CreateDIBSection
SetDIBColorTable
DeleteDC
SetBitmapBits
GetBitmapBits
GetObjectW
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
CreateCompatibleDC
GetTextExtentPoint32W
SelectObject
Polyline
LineTo
GetMapMode
ExcludeClipRect
DeleteObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

InitializeSecurityDescriptor
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
RegCreateKeyExW
AllocateAndInitializeSid
DuplicateToken
OpenProcessToken
OpenThreadToken
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
StartServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegDeleteValueW
RegCloseKey

shell32

CommandLineToArgvW
Shell_NotifyIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
DragQueryFileW
SHBrowseForFolderW
DragFinish
ShellExecuteW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_ReplaceIcon

shlwapi

UrlCreateFromPathW
PathFindExtensionW
PathFindFileNameW
SHDeleteKeyW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor

ole32

OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
DoDragDrop
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CoDisconnectObject
CoInitialize
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal

oleaut32

VariantChangeType
VariantCopy
LoadRegTypeLi
DispCallFunc
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayDestroy
SysAllocStringLen
VariantClear
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
VarBstrFromDate
OleCreateFontIndirect
SafeArrayGetElement
SysFreeString
SysAllocString
VariantInit

gdiplus

GdipGetCellDescent
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipCreateSolidFill
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusStartup
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusShutdown
GdipFree
GdipDeleteBrush
GdipAlloc
GdipCloneBrush
GdipDeleteFont
GdipDeleteStringFormat
GdipCreateFromHDC
GdipDeleteGraphics
GdipMeasureString
GdipDeleteFontFamily
GdipGetFamily
GdipGetCellAscent
GdipGetLineSpacing
GdipSetTextRenderingHint
GdipDrawString
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat

winmm

PlaySoundW
mciSendCommandW

cfgmgr32

CM_Get_Device_IDW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DiskInfo64.exe
.exe windows:5 windows x64 arch:x64

29be4d83b6126b32e74d3ba344158837

Code Sign

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

16/03/2016, 00:00

Not After

16/03/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/12/2018, 03:04

Not After

03/03/2021, 08:40

Subject

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:db
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign TSA for Standard - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

01/09/1998, 12:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:22:cc:70:33:77:a3:42:7c:93:a9:8d
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

07/12/2018, 04:22

Not After

03/03/2021, 08:40

Subject

CN=Noriyuki Miyazaki,O=Noriyuki Miyazaki,ST=Hokkaido,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-01,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:12:d3:01:ad:72:af:bd:9e:31:2f:b6:e2:30:46:a7:8d:f2:7a:8d:a6:65:d4:20:03:2e:eb:cc:05:bc:e8:f6
Signer

Actual PE Digest

55:12:d3:01:ad:72:af:bd:9e:31:2f:b6:e2:30:46:a7:8d:f2:7a:8d:a6:65:d4:20:03:2e:eb:cc:05:bc:e8:f6

Digest Algorithm

sha256

PE Digest Matches

true

40:20:c7:b2:1c:a1:2b:f7:b3:31:e5:22:5b:bb:d3:14:cd:9e:e9:44
Signer

Actual PE Digest

40:20:c7:b2:1c:a1:2b:f7:b3:31:e5:22:5b:bb:d3:14:cd:9e:e9:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineA
GetACP
GetFileType
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
SetStdHandle
HeapQueryInformation
QueryPerformanceFrequency
VirtualQuery
ExitProcess
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetCPInfo
GetStringTypeW
IsValidCodePage
GetOEMCP
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
LoadLibraryExA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
GetTempFileNameW
GetStdHandle
GetProfileIntW
SearchPathW
FindResourceExW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetCurrentDirectoryW
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetThreadLocale
FileTimeToSystemTime
GlobalGetAtomNameW
lstrcpyW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
lstrcmpA
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
WideCharToMultiByte
CopyFileW
FormatMessageW
MulDiv
GlobalSize
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
FreeResource
SetLastError
OutputDebugStringA
LocalFree
LocalAlloc
GetCurrentThread
lstrcmpiW
GetWindowsDirectoryW
GetCurrentProcess
DefineDosDeviceW
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetDriveTypeW
MultiByteToWideChar
DeviceIoControl
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
FindClose
FindNextFileW
FindFirstFileW
GetTimeZoneInformation
CreateDirectoryW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetLocalTime
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetComputerNameW
DeleteFileW
GetTempPathW
SizeofResource
CloseHandle
ReleaseMutex
GetVersionExW
CreateMutexW
Sleep
GetCommandLineW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
SetErrorMode
GetTickCount
GetPrivateProfileStringW
GetProcAddress
GetModuleHandleW
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
InitializeCriticalSectionAndSpinCount
GetLastError
EnterCriticalSection
LeaveCriticalSection
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
GetSystemInfo

user32

PostQuitMessage
WindowFromPoint
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
LoadMenuW
DrawStateW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
RegisterClipboardFormatW
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
WaitMessage
InvalidateRect
EnableWindow
CheckDlgButton
NotifyWinEvent
SetWindowPos
MoveWindow
ShowWindow
OffsetRect
SetRectEmpty
SendDlgItemMessageA
UnhookWindowsHookEx
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetMenuStringW
GetParent
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
FillRect
UnregisterClassW
SetScrollPos
GetScrollPos
SetScrollRange
AppendMenuW
RemoveMenu
ModifyMenuW
InsertMenuItemW
CreateMenu
GetMessageW
TranslateMessage
ShowOwnedPopups
GetKeyNameTextW
MapVirtualKeyW
GetMenuItemInfoW
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
TrackMouseEvent
DestroyIcon
LoadImageW
CopyImage
GetAsyncKeyState
MapDialogRect
CreatePopupMenu
TrackPopupMenu
GetCursorPos
RegisterDeviceNotificationW
EnumDisplayMonitors
IntersectRect
IsZoomed
CharUpperW
SetCapture
ReleaseCapture
GetSystemMenu
DeleteMenu
SetWindowRgn
GetMessageTime
SendMessageW
GetClientRect
CopyRect
DrawTextW
SetCursor
MapVirtualKeyExW
LoadCursorW
wsprintfW
GetDC
ReleaseDC
SystemParametersInfoW
MonitorFromWindow
LoadAcceleratorsW
TranslateAcceleratorW
GetWindowRect
GetWindowInfo
AdjustWindowRect
GetSystemMetrics
EnableMenuItem
DrawMenuBar
SetForegroundWindow
RegisterWindowMessageW
LoadIconW
DestroyMenu
UnregisterDeviceNotification
EnumWindows
GetWindowTextW
GetWindowThreadProcessId
PostMessageW
IsIconic
DrawIcon
GetSubMenu
CheckMenuRadioItem
IsWindowVisible
CheckMenuItem
GetMenuState
WaitForInputIdle
KillTimer
SetTimer
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetWindowLongW
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
MessageBeep
GetMenuDefaultItem
GetWindowLongW
SetLayeredWindowAttributes
SetMenuDefaultItem
SetRect
SetWindowContextHelpId
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
GetIconInfo
HideCaret
InvertRect
SetClassLongPtrW
SetParent
DrawEdge
DrawFrameControl
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
CharUpperBuffW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
IsCharLowerW
GetWindowRgn
DestroyCursor
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GetUpdateRect
GetDoubleClickTime
IsClipboardFormatAvailable

gdi32

RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CombineRgn
IntersectClipRect
SetRectRgn
DPtoLP
CreateRoundRectRgn
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SetPixel
StretchBlt
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
PtVisible
LPtoDP
OffsetRgn
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePen
CreateSolidBrush
CreateBitmap
SetTextColor
SetBkColor
CreateDCW
CopyMetaFileW
EnumFontFamiliesExW
CreateHatchBrush
CreatePatternBrush
Rectangle
GetStockObject
SetDCPenColor
GetObjectA
CreateFontIndirectW
CreateDIBSection
SetDIBColorTable
DeleteDC
SetBitmapBits
GetBitmapBits
GetObjectW
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
CreateCompatibleDC
GetTextExtentPoint32W
SelectObject
Polyline
LineTo
GetMapMode
DeleteObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

InitializeSecurityDescriptor
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
RegCreateKeyExW
AllocateAndInitializeSid
DuplicateToken
OpenProcessToken
OpenThreadToken
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
StartServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegDeleteValueW
RegCloseKey

shell32

CommandLineToArgvW
Shell_NotifyIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
DragQueryFileW
SHBrowseForFolderW
DragFinish
ShellExecuteW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_ReplaceIcon

shlwapi

UrlCreateFromPathW
PathFindExtensionW
PathFindFileNameW
SHDeleteKeyW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor

ole32

CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
OleGetClipboard
IsAccelerator
DoDragDrop
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CoDisconnectObject
CoInitialize
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal

oleaut32

VariantChangeType
VariantCopy
LoadRegTypeLi
DispCallFunc
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayDestroy
SysAllocStringLen
SysAllocString
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
VarBstrFromDate
OleCreateFontIndirect
VariantInit
SysFreeString
VariantClear
SafeArrayGetElement

gdiplus

GdipGetCellDescent
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipCreateSolidFill
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipCreateBitmapFromFile
GdiplusStartup
GdiplusShutdown
GdipFree
GdipDeleteBrush
GdipAlloc
GdipCloneBrush
GdipDeleteFont
GdipDeleteStringFormat
GdipCreateFromHDC
GdipDeleteGraphics
GdipMeasureString
GdipDeleteFontFamily
GdipGetFamily
GdipGetCellAscent
GdipGetLineSpacing
GdipSetTextRenderingHint
GdipDrawString
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromStream

winmm

PlaySoundW
mciSendCommandW

cfgmgr32

CM_Get_Device_IDW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 809KB - Virtual size: 809KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
License/CAlphaButton.txt
License/COPYRIGHT-ja.txt
License/COPYRIGHT.txt

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 51KB - Virtual size: 51KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 52KB - Virtual size: 51KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

16aab3ac986f73988fe32e1eb6fe141d

Headers

File Characteristics

Imports

kernel32

msvcrt

shell32

user32

winmm

Exports

Exports

Sections

.text Size: 130KB - Virtual size: 129KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 33KB - Virtual size: 33KB

.bss Size: - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 872B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 3KB - Virtual size: 2KB

25bf2f8ebd15b1cad65bb7e825aa6341

Code Sign

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51Certificate

Extended Key Usages

Key Usages

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7Certificate

Extended Key Usages

Key Usages

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:dbCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

04:00:00:00:00:01:15:4b:5a:c3:94Certificate

Key Usages

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

11:22:cc:70:33:77:a3:42:7c:93:a9:8dCertificate

Extended Key Usages

Key Usages

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

8b:11:a0:f4:11:8b:af:3d:c3:f0:69:34:15:77:17:1a:78:7b:4f:2c:55:72:76:71:93:f4:3d:7a:8b:59:a4:28Signer

b7:03:56:52:f1:99:f9:df:af:96:98:b8:7d:ec:cd:10:4c:90:6f:69Signer

Headers

DLL Characteristics

.text
Size: 51KB - Virtual size: 51KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 52KB - Virtual size: 51KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 130KB - Virtual size: 129KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 33KB - Virtual size: 33KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 872B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 3KB - Virtual size: 2KB

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7
Certificate

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:db
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

11:22:cc:70:33:77:a3:42:7c:93:a9:8d
Certificate

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

8b:11:a0:f4:11:8b:af:3d:c3:f0:69:34:15:77:17:1a:78:7b:4f:2c:55:72:76:71:93:f4:3d:7a:8b:59:a4:28
Signer

b7:03:56:52:f1:99:f9:df:af:96:98:b8:7d:ec:cd:10:4c:90:6f:69
Signer

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 457KB - Virtual size: 457KB

.data
Size: 27KB - Virtual size: 69KB

.rsrc
Size: 405KB - Virtual size: 404KB

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51
Certificate

25:84:64:17:e5:db:2b:3d:d9:cd:1c:f7
Certificate

73:10:b0:f0:5e:fa:6c:4a:f5:53:e4:db
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:15:4b:5a:c3:94
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

11:22:cc:70:33:77:a3:42:7c:93:a9:8d
Certificate

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

55:12:d3:01:ad:72:af:bd:9e:31:2f:b6:e2:30:46:a7:8d:f2:7a:8d:a6:65:d4:20:03:2e:eb:cc:05:bc:e8:f6
Signer

40:20:c7:b2:1c:a1:2b:f7:b3:31:e5:22:5b:bb:d3:14:cd:9e:e9:44
Signer