c261abc8dfe938a71b4f213f54cf7654_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c261abc8dfe938a71b4f213f54cf7654_JaffaCakes118
Size

13.5MB
MD5

c261abc8dfe938a71b4f213f54cf7654
SHA1

e91071944e9fd35b5bcab84e8a5f9329834e2152
SHA256

49313009410afca95b49c22a00c67a9139a1aac53da221c487a60ba9d5fb7f47
SHA512

0749c66d76515bca1d3097c6bd63b6283f03746f7a36ab3e40c0d2bf62af53d0f47dd5abb42e46197a86b6f9989c80bf03292087a068525399d0391ec01f2500
SSDEEP

196608:QHSB54tnobSt7H4e+Hunvh+vk9RaiFbwFZ/XjoYssVCj6LCtZ8c1NFOH5Yl0OJLu:ySTcUSpH4eSyh+Meiq/U7aCtZ/+Wlz6

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
static1/unpack001/DTSetupHelper.exe	vmprotect

Unsigned PE 55 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/DLLWaitForKillProgram.dll
unpack001/$PLUGINSDIR/DLLWebCount_new.dll
unpack001/$PLUGINSDIR/Dialer.dll
unpack001/$PLUGINSDIR/FILEDownPlug120308.dll
unpack001/$PLUGINSDIR/IEFunctions.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/SelfDelete.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserMgr.dll
unpack001/$PLUGINSDIR/daemonen.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsisos.dll
unpack001/$PLUGINSDIR/xml.dll
unpack001/DaemonUpdate.exe
unpack001/Lang/AFK.dll
unpack001/Lang/ARA.dll
unpack001/Lang/BGR.dll
unpack001/Lang/BIH.dll
unpack001/Lang/CAT.dll
unpack001/Lang/CHS.dll
unpack001/Lang/CHT.dll
unpack001/Lang/CSY.dll
unpack001/Lang/DAN.dll
unpack001/Lang/DEU.dll
unpack001/Lang/ELL.dll
unpack001/Lang/ENU.dll
unpack001/Lang/ESN.dll
unpack001/Lang/FIN.dll
unpack001/Lang/FRA.dll
unpack001/Lang/GLC.dll
unpack001/Lang/HEB.dll
unpack001/Lang/HRV.dll
unpack001/Lang/HUN.dll
unpack001/Lang/HYE.dll
unpack001/Lang/IND.dll
unpack001/Lang/ITA.dll
unpack001/Lang/JPN.dll
unpack001/Lang/KAT.dll
unpack001/Lang/KOR.dll
unpack001/Lang/LTH.dll
unpack001/Lang/LVI.dll
unpack001/Lang/NLB.dll
unpack001/Lang/NOR.dll
unpack001/Lang/PLK.dll
unpack001/Lang/PTB.dll
unpack001/Lang/ROM.dll
unpack001/Lang/RUS.dll
unpack001/Lang/SKY.dll
unpack001/Lang/SLV.dll
unpack001/Lang/SRL.dll
unpack001/Lang/SVE.dll
unpack001/Lang/TRK.dll
unpack001/Lang/UKR.dll
unpack001/dtlitedll.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

c261abc8dfe938a71b4f213f54cf7654_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

16-07-2036 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:a1:34:a9:a7:40:5d:ab:75:8b:fa:a0:19:bf:5c:9d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-11-2011 00:00

Not After

08-11-2013 23:59

Subject

CN=EbizNetWorks,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=EbizNetWorks,L=Gangnam-gu,ST=Seoul,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/DAEMON Tool Lite_license.txt
$PLUGINSDIR/DLLWaitForKillProgram.dll
.dll windows:4 windows x86 arch:x86

2e92645153848ef99816d61ac6e2a921

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
GlobalFree
lstrcpyA
LocalFree
LocalAlloc

mfc42

ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord6375
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord1176
ord1243
ord6467
ord4274
ord2982
ord269
ord826
ord600
ord1578

msvcrt

_strupr
toupper
??1type_info@@UAE@XZ
_onexit
__dllonexit
_EH_prolog
__CxxFrameHandler

user32

wsprintfA
MessageBoxA

Exports

Exports

DLLWaitForKillProcess
myFunction

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/DLLWebCount_new.dll
.dll windows:4 windows x86 arch:x86

eef21a13a3a20993251273037c6620dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord5199
ord3738
ord561
ord825
ord815
ord1199
ord1247
ord690
ord1988
ord2393
ord800
ord5207
ord860
ord6059
ord389
ord540
ord858
ord922
ord6112
ord1176
ord1243
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4424
ord4274
ord6467
ord1578
ord600
ord826
ord269

msvcrt

__CxxFrameHandler
_EH_prolog
__dllonexit
_onexit
??1type_info@@UAE@XZ

kernel32

LocalFree
lstrcpynA
lstrcpyA
GlobalFree
GlobalAlloc
LocalAlloc

user32

MessageBoxA
wsprintfA

wsock32

WSAStartup
WSACleanup

wininet

InternetGetConnectedState

Exports

Exports

DLLInstallCheck
DLLWebCount
WebCount
myFunction

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Dialer.dll
.dll windows:4 windows x86 arch:x86

6504337db30ea93d33d7a714fefff047

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
lstrcpynA
GlobalAlloc

Exports

Exports

AttemptConnect
AutodialHangup
AutodialOnline
AutodialUnattended
GetConnectedState

Sections

.text
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FILEDownPlug120308.dll
.dll windows:4 windows x86 arch:x86

1b6303fba3c09e3c12e1f0a7f2cc93ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
RtlUnwind

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

Exports

Exports

Download

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/IEFunctions.dll
.dll windows:4 windows x86 arch:x86

d3ade25d7710cc7b0801440c6df6098c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
MultiByteToWideChar
LocalAlloc
LocalFree
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

ole32

CoInitialize
CoCreateInstance

oleaut32

SysAllocString
VariantClear

Exports

Exports

CloseBrowser
OpenBrowser
ReleaseBrowser
ShowBar
SurfTo

Sections

.text
Size: 1024B - Virtual size: 831B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 577B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

815c88741b87a0210c457b00b57bf9c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
GlobalFree
lstrcpyA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
RtlUnwind
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP

Exports

Exports

KillProc

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/SelfDelete.dll
.dll windows:4 windows x86 arch:x86

3d91458bc90a151726bcfdaeff902d08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
strrchr
_adjust_fdiv
malloc
_initterm

kernel32

LocalFree
LocalAlloc
CreateFileA
GetModuleFileNameA
lstrcpyA
lstrlenA
WriteFile
CloseHandle
CreateProcessA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
ResumeThread
SetPriorityClass

user32

wsprintfA

shell32

SHChangeNotify

mfc42

ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord1253
ord1255
ord6467
ord1578
ord600
ord269
ord826

Exports

Exports

SelfDelete

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UserMgr.dll
.dll windows:4 windows x86 arch:x86

bac2b3d4a0df9a23aee940b8ecd0d168

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
LocalFree
GetEnvironmentVariableA
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentProcess
GetLastError
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
VirtualAlloc

advapi32

LsaOpenPolicy
LsaEnumerateAccountRights
LsaNtStatusToWinError
LsaFreeMemory
GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
LsaClose
ConvertStringSidToSidA
LookupAccountSidA
GetUserNameA
RegUnLoadKeyA
ConvertSidToStringSidA
RegOpenKeyExA
LsaAddAccountRights
LsaRemoveAccountRights
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
LookupAccountNameA
LogonUserA
RegLoadKeyA
RegCloseKey
RegQueryValueExA

netapi32

NetUserAdd
NetUserDel
NetGroupDelUser
NetLocalGroupGetMembers
NetLocalGroupAddMembers
NetLocalGroupAdd
NetLocalGroupDel
NetUserChangePassword
NetUserSetInfo
NetUserGetInfo
NetWkstaUserGetInfo
NetApiBufferFree

userenv

LoadUserProfileA
UnloadUserProfile

Exports

Exports

AddPrivilege
AddToGroup
BuiltAccountEnv
ChangeUserPassword
CreateAccount
CreateAccountEx
CreateGroup
DeleteAccount
DeleteGroup
GetCurrentDomain
GetCurrentUserName
GetLocalizedStdAccountName
GetSIDFromUserName
GetUserInfo
GetUserNameFromSID
HasPrivilege
IsMemberOfGroup
RegLoadUserHive
RegUnLoadUserHive
RemoveFromGroup
RemovePrivilege
SetRegKeyAccess
SetUserInfo

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/daemonen.dll
.dll windows:5 windows x86 arch:x86

b5ec71b776e3660877e2a11c9f7df54d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
GetVolumeInformationA
CloseHandle
CreateFileA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
FlushFileBuffers

user32

MessageBoxA
wsprintfA

Exports

Exports

EncodeVal
EncodeVal2
EncodeVal3
myFunction

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsisos.dll
.dll windows:1 windows x86 arch:x86

a70233c77fd258ec47709388c2338273

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetEnvironmentStringsA
GetVersionExA
RtlUnwind
RtlZeroMemory
lstrcpyA

crtdll

_fdopen
_open_osfhandle
_ultoa
fclose
_cexit
malloc
printf
raise
setbuf
strcpy

Exports

Exports

osplatform
osversion

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 588B - Virtual size: 588B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 156B - Virtual size: 156B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 96B - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/xml.dll
.dll windows:4 windows x86 arch:x86

b5ed5b3a951d4443ce56e5453702d536

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
lstrcpynA
lstrcmpA
lstrcmpiA
lstrcpyA
RtlUnwind
GetModuleFileNameA
RaiseException
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
LoadLibraryA
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
GetLocaleInfoA
InterlockedExchange
SetEndOfFile

Exports

Exports

_CloneNode
_Coordinate
_CreateNode
_CreateText
_CurrentAttribute
_DeclarationEncoding
_DeclarationStandalone
_DeclarationVersion
_ElementPath
_FindCloseElement
_FindNextElement
_FirstAttribute
_FirstChild
_FirstChildElement
_FreeNode
_GetAttribute
_GetNodeValue
_GetText
_GotoHandle
_GotoPath
_InsertAfterNode
_InsertBeforeNode
_InsertEndChild
_IsCDATA
_LastAttribute
_LastChild
_LoadFile
_NextAttribute
_NextSibling
_NextSiblingElement
_NoChildren
_NodeHandle
_NodeType
_Parent
_PreviousAttribute
_PreviousSibling
_RemoveAllChild
_RemoveAttribute
_RemoveNode
_ReplaceNode
_RootElement
_SaveFile
_SetAttribute
_SetAttributeName
_SetAttributeValue
_SetCDATA
_SetCondenseWhiteSpace
_SetEncoding
_SetNodeValue
_SetText
_Unload
_XPathAttribute
_XPathNode
_XPathString

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/test.xml
.xml
DT.gadget
.cab
add_drive.html
.html .js polyglot
css/make_img.css
css/popup_window.css
css/settings.css
css/style.css
gadget.html
.html .js polyglot
gadget.xml
gadget_lite.xml
gadget_pro.xml
img/01_attached_mounted.png
.png
img/01_attached_unmounted.png
.png
img/1.gif
.gif
img/1.png
.png
img/DTGadget_icon.png
.png
img/Gadjet_bottom.png
.png
img/Gadjet_bottom_links_news.png
.png
img/Gadjet_middle.png
.png
img/Grabbing.ico
img/MNDManager.ico
img/add_image.png
.png
img/add_slot.png
.png
img/chenge_view.png
.png
img/close.png
.png
img/content_bottom.gif
.gif
img/dell_slot.gif
.gif
img/display_bottom.gif
.gif
img/display_middle.gif
.gif
img/display_top.gif
.gif
img/down_drive.png
.png
img/down_drive_hover.png
.png
img/drag.png
.png
img/drive_controls.png
.png
img/drive_select.png
.png
img/drives0.png
.png
img/drives1.png
.png
img/drives2.png
.png
img/drives3.png
.png
img/drives4.png
.png
img/dt_dadget_loader.png
.png
img/dt_icon.png
.png
img/dt_icon_pro.png
.png
img/dt_out.png
.png
img/dt_over.png
.png
img/dt_selected.png
.png
img/error.png
.png
img/feedback.png
.png
img/help.png
.png
img/inf.png
.png
img/left_right_butts.gif
.gif
img/lines.png
.png
img/links_news_display_top.gif
.gif
img/links_out.png
.png
img/links_over.png
.png
img/links_selected.png
.png
img/main_controls_icons.png
.png
img/message_bottom.png
.png
img/message_butt.png
.png
img/message_middle.png
.png
img/message_top.png
.png
img/mounted.png
.png
img/news_out.png
.png
img/news_over.png
.png
img/news_selected.png
.png
img/no_drive_select.png
.png
img/no_slot.png
.png
img/photoshop.png
.png
img/prop_.png
.png
img/read.png
.png
img/rss.gif
.gif
img/rss_controls_icons.png
.png
img/rss_refresh.png
.png
img/rss_unread.png
.png
img/settings_box_bottom.png
.png
img/settings_box_divider_left.png
.png
img/settings_box_divider_right.png
.png
img/settings_box_left.png
.png
img/settings_box_right.png
.png
img/settings_box_top.png
.png
img/settings_corner_bottom_left.png
.png
img/settings_corner_bottom_right.png
.png
img/settings_corner_top_left.png
.png
img/settings_corner_top_right.png
.png
img/settings_divider.png
.png
img/settings_divider_left.png
.png
img/settings_divider_right.png
.png
img/settings_tab.gif
.gif
img/shortcut_hover.png
.png
img/slot_button.gif
.gif
img/slot_button1.gif
.gif
img/slots_hint.png
.png
img/slots_hint_right.png
.png
img/slots_window.png
.png
img/slots_window_1.png
.png
img/slots_window_2.png
.png
img/slots_window_3.png
.png
img/slots_window_6.png
.png
img/slots_window_7.png
.png
img/slots_window_8.png
.png
img/slots_window_9.png
.png
img/slots_window_left.png
.png
img/slots_window_right.png
.png
img/tab1.ico
img/tab1.png
.png
img/tab2.png
.png
img/tab3.png
.png
img/tabblue.png
.png
img/tabgrey.png
.png
img/unmounted.png
.png
img/unread.png
.png
img/up_down_butts.gif
.gif
img/up_down_drive.png
.png
img/up_down_drive_disable.png
.png
img/up_drive_hover.png
.png
img/warning.png
.png
img/warning_48.png
.png
js/drive_slotes.js
.js
js/dtcom.js
.js
js/gadget.js
.js
js/gadjet_scripts.js
.js
js/global_settings.js
.js
js/jquery-1.3.1.min.js
.js
js/json_parse.js
.js
js/rss.js
.js
js/skin_gallery.js
.js
js/virtual_drive.js
.js
make_img.html
.html .js polyglot
message.html
.html .js polyglot
mount.html
.html .js polyglot
mount_n_drive.html
.html .js polyglot
rss.html
.html .js polyglot
settings.html
skins/skin1/01_attached_mounted.png
.png
skins/skin1/01_attached_unmounted.png
.png
skins/skin1/1.gif
skins/skin1/1.png
.png
skins/skin1/DTGadget_icon.png
.png
skins/skin1/Gadjet_bottom.png
.png
skins/skin1/Gadjet_bottom_links_news.png
.png
skins/skin1/Gadjet_middle.png
.png
skins/skin1/Grabbing.ico
skins/skin1/MNDManager.ico
skins/skin1/add_image.png
.png
skins/skin1/chenge_view.png
.png
skins/skin1/content_bottom.gif
.gif
skins/skin1/display_bottom.gif
.gif
skins/skin1/display_middle.gif
.gif
skins/skin1/display_top.gif
.gif
skins/skin1/down_drive.png
.png
skins/skin1/down_drive_hover.png
.png
skins/skin1/drive_controls.png
.png
skins/skin1/drive_select.png
.png
skins/skin1/drives0.png
.png
skins/skin1/drives1.png
.png
skins/skin1/drives2.png
.png
skins/skin1/drives3.png
.png
skins/skin1/drives4.png
.png
skins/skin1/dt_dadget_loader.png
.png
skins/skin1/dt_icon.png
.png
skins/skin1/dt_out.png
.png
skins/skin1/dt_over.png
.png
skins/skin1/dt_pro_out.png
.png
skins/skin1/dt_pro_over.png
.png
skins/skin1/dt_pro_selected.png
.png
skins/skin1/dt_selected.png
.png
skins/skin1/feedback.png
.png
skins/skin1/help.png
.png
skins/skin1/lines.png
.png
skins/skin1/links_news_display_top.gif
.gif
skins/skin1/links_out.png
.png
skins/skin1/links_over.png
.png
skins/skin1/links_selected.png
.png
skins/skin1/main_controls_icons.png
.png
skins/skin1/message.css
skins/skin1/message_bottom.png
.png
skins/skin1/message_butt.png
.png
skins/skin1/message_middle.png
.png
skins/skin1/message_top.png
.png
skins/skin1/message_window.png
.png
skins/skin1/message_window_small.png
.png
skins/skin1/mounted.png
.png
skins/skin1/news_out.png
.png
skins/skin1/news_over.png
.png
skins/skin1/news_read_out.png
.png
skins/skin1/news_read_over.png
.png
skins/skin1/news_read_selected.png
.png
skins/skin1/news_selected.png
.png
skins/skin1/no_drive_select.png
.png
skins/skin1/photoshop.png
.png
skins/skin1/previews.jpg
.jpg
skins/skin1/previews_pro.jpg
.jpg
skins/skin1/prop_.png
.png
skins/skin1/rss.css
skins/skin1/rss_controls_icons.png
.png
skins/skin1/rss_refresh.png
.png
skins/skin1/rss_unread.png
.png
skins/skin1/rss_window.png
.png
skins/skin1/settings_but.gif
.gif
skins/skin1/settings_out.png
.png
skins/skin1/settings_over.png
.png
skins/skin1/settings_selected.png
.png
skins/skin1/shortcut_hover.png
.png
skins/skin1/skin_select.gif
.gif
skins/skin1/skins_gallery_but.gif
.gif
skins/skin1/style.css
skins/skin1/tab1.ico
skins/skin1/tab1.png
.png
skins/skin1/tab2.png
.png
skins/skin1/tab3.png
.png
skins/skin1/unmounted.png
.png
skins/skin1/up_down_butts.gif
.gif
skins/skin1/up_down_drive.png
.png
skins/skin1/up_down_drive_disable.png
.png
skins/skin1/up_drive_hover.png
.png
skins/skin2/01_attached_mounted.png
.png
skins/skin2/01_attached_unmounted.png
.png
skins/skin2/1.gif
skins/skin2/1.png
.png
skins/skin2/DTGadget_icon.png
.png
skins/skin2/Gadjet_bottom.png
.png
skins/skin2/Gadjet_bottom_links_news.png
.png
skins/skin2/Gadjet_middle.png
.png
skins/skin2/Grabbing.ico
skins/skin2/MNDManager.ico
skins/skin2/add_image.png
.png
skins/skin2/chenge_view.png
.png
skins/skin2/content_bottom.gif
.gif
skins/skin2/display_bottom.gif
.gif
skins/skin2/display_middle.gif
.gif
skins/skin2/display_top.gif
.gif
skins/skin2/down_drive.png
.png
skins/skin2/down_drive_hover.png
.png
skins/skin2/drive_controls.png
.png
skins/skin2/drive_select.png
.png
skins/skin2/drives0.png
.png
skins/skin2/drives1.png
.png
skins/skin2/drives2.png
.png
skins/skin2/drives3.png
.png
skins/skin2/drives4.png
.png
skins/skin2/dt_dadget_loader.png
.png
skins/skin2/dt_icon.png
.png
skins/skin2/dt_out.png
.png
skins/skin2/dt_over.png
.png
skins/skin2/dt_pro_out.png
.png
skins/skin2/dt_pro_over.png
.png
skins/skin2/dt_pro_selected.png
.png
skins/skin2/dt_selected.png
.png
skins/skin2/feedback.png
.png
skins/skin2/help.png
.png
skins/skin2/lines.png
.png
skins/skin2/links_news_display_middle.gif
.gif
skins/skin2/links_news_display_top.gif
.gif
skins/skin2/links_out.png
.png
skins/skin2/links_over.png
.png
skins/skin2/links_selected.png
.png
skins/skin2/main_controls_icons.png
.png
skins/skin2/message.css
skins/skin2/message_bottom.png
.png
skins/skin2/message_butt.png
.png
skins/skin2/message_middle.png
.png
skins/skin2/message_top.png
.png
skins/skin2/message_window.png
.png
skins/skin2/message_window_small.png
.png
skins/skin2/mounted.png
.png
skins/skin2/news_out.png
.png
skins/skin2/news_over.png
.png
skins/skin2/news_read_out.png
.png
skins/skin2/news_read_over.png
.png
skins/skin2/news_read_selected.png
.png
skins/skin2/news_selected.png
.png
skins/skin2/no_drive_select.png
.png
skins/skin2/photoshop.png
.png
skins/skin2/previews.jpg
.jpg
skins/skin2/previews_pro.jpg
.jpg
skins/skin2/prop_.png
.png
skins/skin2/rss.css
skins/skin2/rss_controls_icons.png
.png
skins/skin2/rss_refresh.png
.png
skins/skin2/rss_unread.png
.png
skins/skin2/rss_window.png
.png
skins/skin2/settings_but.gif
.gif
skins/skin2/settings_out.png
.png
skins/skin2/settings_over.png
.png
skins/skin2/settings_selected.png
.png
skins/skin2/shortcut_hover.png
.png
skins/skin2/skin_select.gif
.gif
skins/skin2/skins_gallery_but.gif
.gif
skins/skin2/style.css
skins/skin2/tab1.ico
skins/skin2/tab1.png
.png
skins/skin2/tab2.png
.png
skins/skin2/tab3.png
.png
skins/skin2/unmounted.png
.png
skins/skin2/up_down_butts.gif
.gif
skins/skin2/up_down_drive.png
.png
skins/skin2/up_down_drive_disable.png
.png
skins/skin2/up_drive_hover.png
.png
skins/skin3/01_attached_mounted.png
.png
skins/skin3/01_attached_unmounted.png
.png
skins/skin3/1.gif
.gif
skins/skin3/1.png
.png
skins/skin3/DTGadget_icon.png
.png
skins/skin3/Gadjet_bottom.png
.png
skins/skin3/Gadjet_bottom_links_news.png
.png
skins/skin3/Gadjet_middle.png
.png
skins/skin3/Grabbing.ico
skins/skin3/MNDManager.ico
skins/skin3/Thumbs.db
skins/skin3/add_image.png
.png
skins/skin3/change_skin_wnd.png
.png
skins/skin3/chenge_view.png
.png
skins/skin3/content_bottom.gif
.gif
skins/skin3/display_bottom.gif
.gif
skins/skin3/display_middle.gif
.gif
skins/skin3/display_top.gif
.gif
skins/skin3/down_drive.png
.png
skins/skin3/down_drive_hover.png
.png
skins/skin3/drive_controls.png
.png
skins/skin3/drive_select.png
.png
skins/skin3/drives0.png
.png
skins/skin3/drives1.png
.png
skins/skin3/drives2.png
.png
skins/skin3/drives3.png
.png
skins/skin3/drives4.png
.png
skins/skin3/dt_dadget_loader.png
.png
skins/skin3/dt_icon.png
.png
skins/skin3/dt_out.png
.png
skins/skin3/dt_over.png
.png
skins/skin3/dt_pro_out.png
.png
skins/skin3/dt_pro_over.png
.png
skins/skin3/dt_pro_selected.png
.png
skins/skin3/dt_selected.png
.png
skins/skin3/feedback.png
.png
skins/skin3/help.png
.png
skins/skin3/lines.png
.png
skins/skin3/links_news_display_middle.gif
.gif
skins/skin3/links_news_display_top.gif
.gif
skins/skin3/links_out.png
.png
skins/skin3/links_over.png
.png
skins/skin3/links_selected.png
.png
skins/skin3/main_controls_icons.png
.png
skins/skin3/message.css
skins/skin3/message_bottom.png
.png
skins/skin3/message_butt.png
.png
skins/skin3/message_middle.png
.png
skins/skin3/message_top.png
.png
skins/skin3/message_window.png
.png
skins/skin3/message_window_small.png
.png
skins/skin3/mounted.png
.png
skins/skin3/news_out.png
.png
skins/skin3/news_over.png
.png
skins/skin3/news_read_out.png
.png
skins/skin3/news_read_over.png
.png
skins/skin3/news_read_selected.png
.png
skins/skin3/news_selected.png
.png
skins/skin3/no_drive_select.png
.png
skins/skin3/photoshop.png
.png
skins/skin3/previews.jpg
.jpg
skins/skin3/previews_pro.jpg
.jpg
skins/skin3/prop_.png
.png
skins/skin3/rss.css
skins/skin3/rss_controls_icons.png
.png
skins/skin3/rss_refresh.png
.png
skins/skin3/rss_unread.png
.png
skins/skin3/rss_window.png
.png
skins/skin3/settings_but.gif
.gif
skins/skin3/settings_out.png
.png
skins/skin3/settings_over.png
.png
skins/skin3/settings_selected.png
.png
skins/skin3/shortcut_hover.png
.png
skins/skin3/skin_select.gif
.gif
skins/skin3/skins_gallery_but.gif
.gif
skins/skin3/style.css
skins/skin3/tab1.ico
skins/skin3/tab1.png
.png
skins/skin3/tab2.png
.png
skins/skin3/tab3.png
.png
skins/skin3/unmounted.png
.png
skins/skin3/up_down_butts.gif
.gif
skins/skin3/up_down_drive.png
.png
skins/skin3/up_down_drive_disable.png
.png
skins/skin3/up_drive_hover.png
.png
skins/skin4/01_attached_mounted.png
.png
skins/skin4/01_attached_unmounted.png
.png
skins/skin4/1.gif
.gif
skins/skin4/1.png
.png
skins/skin4/DTGadget_icon.png
.png
skins/skin4/Gadjet_bottom.png
.png
skins/skin4/Gadjet_bottom_links_news.png
.png
skins/skin4/Gadjet_middle.png
.png
skins/skin4/Grabbing.ico
skins/skin4/MNDManager.ico
skins/skin4/Thumbs.db
skins/skin4/add_image.png
.png
skins/skin4/change_skin_wnd.png
.png
skins/skin4/chenge_view.png
.png
skins/skin4/content_bottom.gif
.gif
skins/skin4/display_bottom.gif
.gif
skins/skin4/display_middle.gif
.gif
skins/skin4/display_top.gif
.gif
skins/skin4/down_drive.png
.png
skins/skin4/down_drive_hover.png
.png
skins/skin4/drive_controls.png
.png
skins/skin4/drive_select.png
.png
skins/skin4/drives0.png
.png
skins/skin4/drives1.png
.png
skins/skin4/drives2.png
.png
skins/skin4/drives3.png
.png
skins/skin4/drives4.png
.png
skins/skin4/dt_dadget_loader.png
.png
skins/skin4/dt_icon.png
.png
skins/skin4/dt_out.png
.png
skins/skin4/dt_over.png
.png
skins/skin4/dt_pro_out.png
.png
skins/skin4/dt_pro_over.png
.png
skins/skin4/dt_pro_selected.png
.png
skins/skin4/dt_selected.png
.png
skins/skin4/feedback.png
.png
skins/skin4/help.png
.png
skins/skin4/lines.png
.png
skins/skin4/links_news_display_middle.gif
.gif
skins/skin4/links_news_display_top.gif
.gif
skins/skin4/links_out.png
.png
skins/skin4/links_over.png
.png
skins/skin4/links_selected.png
.png
skins/skin4/main_controls_icons.png
.png
skins/skin4/message.css
skins/skin4/message_bottom.png
.png
skins/skin4/message_butt.png
.png
skins/skin4/message_middle.png
.png
skins/skin4/message_top.png
.png
skins/skin4/message_window.png
.png
skins/skin4/message_window_small.png
.png
skins/skin4/mounted.png
.png
skins/skin4/news_out.png
.png
skins/skin4/news_over.png
.png
skins/skin4/news_read_out.png
.png
skins/skin4/news_read_over.png
.png
skins/skin4/news_read_selected.png
.png
skins/skin4/news_selected.png
.png
skins/skin4/no_drive_select.png
.png
skins/skin4/photoshop.png
.png
skins/skin4/previews.jpg
.jpg
skins/skin4/previews_pro.jpg
.jpg
skins/skin4/prop_.png
.png
skins/skin4/rss.css
skins/skin4/rss_controls_icons.png
.png
skins/skin4/rss_refresh.png
.png
skins/skin4/rss_unread.png
.png
skins/skin4/rss_window.png
.png
skins/skin4/settings_but.gif
.gif
skins/skin4/settings_out.png
.png
skins/skin4/settings_over.png
.png
skins/skin4/settings_selected.png
.png
skins/skin4/shortcut_hover.png
.png
skins/skin4/skin_select.gif
.gif
skins/skin4/skins_gallery_but.gif
.gif
skins/skin4/style.css
skins/skin4/tab1.ico
skins/skin4/tab1.png
.png
skins/skin4/tab2.png
.png
skins/skin4/tab3.png
.png
skins/skin4/unmounted.png
.png
skins/skin4/up_down_butts.gif
.gif
skins/skin4/up_down_drive.png
.png
skins/skin4/up_down_drive_disable.png
.png
skins/skin4/up_drive_hover.png
.png
skins/skin5/01_attached_mounted.png
.png
skins/skin5/01_attached_unmounted.png
.png
skins/skin5/1.gif
.gif
skins/skin5/1.png
.png
skins/skin5/DTGadget_icon.png
.png
skins/skin5/Gadjet_bottom.png
.png
skins/skin5/Gadjet_bottom_links_news.png
.png
skins/skin5/Gadjet_middle.png
.png
skins/skin5/Grabbing.ico
skins/skin5/MNDManager.ico
skins/skin5/add_image.png
.png
skins/skin5/change_skin_wnd.png
.png
skins/skin5/chenge_view.png
.png
skins/skin5/disc.png
.png
skins/skin5/disc_deact.png
.png
skins/skin5/down_drive.png
.png
skins/skin5/down_drive_hover.png
.png
skins/skin5/drive_controls.png
.png
skins/skin5/drive_select.png
.png
skins/skin5/drives0.png
.png
skins/skin5/drives1.png
.png
skins/skin5/drives2.png
.png
skins/skin5/drives3.png
.png
skins/skin5/drives4.png
.png
skins/skin5/dt_dadget_loader.png
.png
skins/skin5/dt_icon.png
.png
skins/skin5/dt_out.png
.png
skins/skin5/dt_over.png
.png
skins/skin5/dt_pro_out.png
.png
skins/skin5/dt_pro_over.png
.png
skins/skin5/dt_pro_selected.png
.png
skins/skin5/dt_selected.png
.png
skins/skin5/feedback.png
.png
skins/skin5/help.png
.png
skins/skin5/lines.png
.png
skins/skin5/links_news_display_middle.gif
.gif
skins/skin5/links_news_display_top.gif
.gif
skins/skin5/links_out.png
.png
skins/skin5/links_over.png
.png
skins/skin5/links_selected.png
.png
skins/skin5/main_controls_icons.png
.png
skins/skin5/message.css
skins/skin5/message_bottom.png
.png
skins/skin5/message_butt.png
.png
skins/skin5/message_middle.png
.png
skins/skin5/message_top.png
.png
skins/skin5/message_window.png
.png
skins/skin5/message_window_small.png
.png
skins/skin5/mounted.png
.png
skins/skin5/news_out.png
.png
skins/skin5/news_over.png
.png
skins/skin5/news_read_out.png
.png
skins/skin5/news_read_over.png
.png
skins/skin5/news_read_selected.png
.png
skins/skin5/news_selected.png
.png
skins/skin5/photoshop.png
.png
skins/skin5/previews.jpg
.jpg
skins/skin5/previews_pro.jpg
.jpg
skins/skin5/prop_.png
.png
skins/skin5/rss.css
skins/skin5/rss_controls_icons.png
.png
skins/skin5/rss_refresh.png
.png
skins/skin5/rss_unread.png
.png
skins/skin5/rss_window.png
.png
skins/skin5/settings_but.gif
.gif
skins/skin5/settings_out.png
.png
skins/skin5/settings_over.png
.png
skins/skin5/settings_selected.png
.png
skins/skin5/shortcut_hover.png
.png
skins/skin5/skin_select.gif
.gif
skins/skin5/skins_gallery_but.gif
.gif
skins/skin5/style.css
skins/skin5/tab1.ico
skins/skin5/unmounted.png
.png
skins/skin5/up_down_butts.gif
.gif
skins/skin5/up_down_drive.png
.png
skins/skin5/up_down_drive_disable.png
.png
skins/skin5/up_drive_hover.png
.png
skins/skin6/01_attached_mounted.png
.png
skins/skin6/01_attached_unmounted.png
.png
skins/skin6/1.gif
.gif
skins/skin6/1.png
.png
skins/skin6/DTGadget_icon.png
.png
skins/skin6/Gadjet_bottom.png
.png
skins/skin6/Gadjet_bottom_links_news.png
.png
skins/skin6/Gadjet_middle.png
.png
skins/skin6/Grabbing.ico
skins/skin6/MNDManager.ico
skins/skin6/add_image.png
.png
skins/skin6/change_skin_wnd.png
.png
skins/skin6/chenge_view.png
.png
skins/skin6/down_drive.png
.png
skins/skin6/down_drive_hover.png
.png
skins/skin6/drive_controls.png
.png
skins/skin6/drive_select.png
.png
skins/skin6/drives0.png
.png
skins/skin6/drives1.png
.png
skins/skin6/drives2.png
.png
skins/skin6/drives3.png
.png
skins/skin6/drives4.png
.png
skins/skin6/dt_dadget_loader.png
.png
skins/skin6/dt_icon.png
.png
skins/skin6/dt_out.png
.png
skins/skin6/dt_over.png
.png
skins/skin6/dt_pro_out.png
.png
skins/skin6/dt_pro_over.png
.png
skins/skin6/dt_pro_selected.png
.png
skins/skin6/dt_selected.png
.png
skins/skin6/feedback.png
.png
skins/skin6/help.png
.png
skins/skin6/lines.png
.png
skins/skin6/links_news_display_middle.gif
.gif
skins/skin6/links_news_display_top.gif
.gif
skins/skin6/links_out.png
.png
skins/skin6/links_over.png
.png
skins/skin6/links_selected.png
.png
skins/skin6/main_controls_icons.png
.png
skins/skin6/message.css
skins/skin6/message_bottom.png
.png
skins/skin6/message_butt.png
.png
skins/skin6/message_middle.png
.png
skins/skin6/message_top.png
.png
skins/skin6/message_window.png
.png
skins/skin6/message_window_small.png
.png
skins/skin6/mounted.png
.png
skins/skin6/news_out.png
.png
skins/skin6/news_over.png
.png
skins/skin6/news_read_out.png
.png
skins/skin6/news_read_over.png
.png
skins/skin6/news_read_selected.png
.png
skins/skin6/news_selected.png
.png
skins/skin6/photoshop.png
.png
skins/skin6/previews.jpg
.jpg
skins/skin6/previews_pro.jpg
.jpg
skins/skin6/prop_.png
.png
skins/skin6/rss.css
skins/skin6/rss_controls_icons.png
.png
skins/skin6/rss_refresh.png
.png
skins/skin6/rss_unread.png
.png
skins/skin6/rss_window.png
.png
skins/skin6/settings_but.gif
.gif
skins/skin6/settings_out.png
.png
skins/skin6/settings_over.png
.png
skins/skin6/settings_selected.png
.png
skins/skin6/shortcut_hover.png
.png
skins/skin6/skin_select2.gif
.gif
skins/skin6/skins_gallery_but.gif
.gif
skins/skin6/style.css
skins/skin6/tab1.ico
skins/skin6/unmounted.png
.png
skins/skin6/up_down_butts.gif
.gif
skins/skin6/up_down_drive.png
.png
skins/skin6/up_down_drive_disable.png
.png
skins/skin6/up_drive_hover.png
.png
DTCommonRes.dll
.dll windows:5 windows x86 arch:x86

7095eed19b501865c35620c0b7724d1d

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21-12-2009 09:32

Not After

22-12-2020 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2009 11:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c2:54:0c:35:16:6c:e7:b1:8f:4e:64:61:85:c8:fa:4c:f1:98:a7:41
Signer

Actual PE Digest

c2:54:0c:35:16:6c:e7:b1:8f:4e:64:61:85:c8:fa:4c:f1:98:a7:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Projects\DTLiteWorking\ui\DTProRes\Release\DTCommonRes.pdb

Imports

comctl32

ImageList_GetIconSize
_TrackMouseEvent

user32

GetSysColorBrush
EndPaint
DialogBoxParamW
SetWindowTextW
GetDlgItem
ShowWindow
CreateWindowExW
GetWindowRect
ScreenToClient
MoveWindow
SetWindowPos
GetParent
IsWindowVisible
GetMonitorInfoW
MonitorFromWindow
CopyRect
PostMessageW
GetDC
ReleaseDC
MessageBoxW
EnableWindow
SetDlgItemTextW
LoadImageW
DestroyIcon
DrawIconEx
MessageBeep
GetDlgItemTextW
LoadIconW
SetCursor
FrameRect
SetFocus
ExitWindowsEx
DialogBoxIndirectParamW
IsWindowEnabled
CloseClipboard
SetClipboardData
EmptyClipboard
UnregisterClassA
LoadCursorW
GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
RegisterClipboardFormatW
IsClipboardFormatAvailable
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
WaitMessage
PostThreadMessageW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExW
IsCharLowerW
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DrawFrameControl
DrawEdge
DrawStateW
SetClassLongW
WindowFromPoint
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
GetNextDlgGroupItem
GetIconInfo
OffsetRect
NotifyWinEvent
EnableScrollBar
HideCaret
InvertRect
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
CharUpperW
DeleteMenu
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
DestroyMenu
GetMenuItemInfoW
GetWindowTextW
GetTopWindow
GetWindow
GetAsyncKeyState
GetDlgCtrlID
GetFocus
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
GetKeyState
GetClassNameW
EnumChildWindows
RegisterWindowMessageW
LoadBitmapW
GetSystemMetrics
ClientToScreen
InvalidateRect
DrawTextW
GetWindowTextLengthW
CreateDialogParamW
GetMessageW
TranslateMessage
DispatchMessageW
GetUpdateRect
DestroyWindow
PostQuitMessage
IsIconic
DrawIcon
GetSysColor
CallWindowProcW
GetPropW
ReleaseCapture
InflateRect
DrawFocusRect
GetDialogBaseUnits
SetPropW
PtInRect
SetCapture
RemovePropW
GetCursorPos
GetWindowThreadProcessId
KillTimer
SetTimer
GetSystemMenu
IntersectRect
RealChildWindowFromPoint
UnregisterClassW
LoadMenuW
MapDialogRect
MapVirtualKeyW
GetKeyNameTextW
ShowOwnedPopups
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
CheckMenuItem
SendDlgItemMessageA
EnableMenuItem
DefWindowProcW
SystemParametersInfoW
WinHelpW
IsChild
GetClassLongW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
ValidateRect
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
IsWindow
CheckDlgButton
UpdateWindow
OpenClipboard
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetMenu
BeginPaint
GetClientRect
SendMessageW
EndDialog
SetForegroundWindow
GetActiveWindow
EnumWindows
SetWindowLongW
GetWindowLongW
GetMessageTime
GetMessagePos
GetDesktopWindow
GetCapture
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
GetNextDlgTabItem
CreateDialogIndirectParamW
SetActiveWindow
SendDlgItemMessageW
IsDialogMessageW
FillRect
TabbedTextOutW
DrawTextExW
GrayStringW
GetWindowDC
GetLastActivePopup

kernel32

GetCurrentThread
GlobalSize
CreateActCtxW
ReleaseActCtx
FreeResource
lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
InterlockedExchange
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
lstrcmpA
SetThreadPriority
ResumeThread
GetPrivateProfileIntW
VirtualProtect
GetFileAttributesExW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalGetAtomNameW
GlobalFlags
GetSystemDirectoryW
lstrcpyW
lstrcmpiW
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GetWindowsDirectoryW
GetProfileIntW
SearchPathW
EncodePointer
DecodePointer
ExitThread
GetCommandLineA
RtlUnwind
HeapReAlloc
ExitProcess
HeapSize
HeapQueryInformation
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
HeapDestroy
GetStdHandle
GetStringTypeW
LCMapStringW
SetHandleCount
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GetSystemInfo
FindClose
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
lstrlenA
FindResourceExW
GetPrivateProfileStringW
WritePrivateProfileStringW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameW
FlushInstructionCache
GetCurrentProcess
EnterCriticalSection
InitializeCriticalSection
GlobalAddAtomW
DeleteAtom
GetNumberFormatW
GetLocaleInfoW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
GetCurrentThreadId
GetVersionExW
FindFirstFileW
CreateFileW
DeleteFileW
LeaveCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
CreateEventA
MultiByteToWideChar
CopyFileW
LocalFree
FormatMessageW
GetCurrentDirectoryW
MoveFileExW
CreateThread
GetTempFileNameW
GetTempPathW
lstrlenW
GetLogicalDriveStringsW
ActivateActCtx
DeactivateActCtx
SetLastError
GetModuleHandleW
GetProcAddress
LoadLibraryW
DisconnectNamedPipe
WriteFile
ReadFile
GetOverlappedResult
WaitForMultipleObjects
GetLastError
SetEvent
ConnectNamedPipe
GetCurrentProcessId
CreateNamedPipeW
Sleep
FreeLibrary
LoadLibraryExW
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
WaitForSingleObject
GetTickCount
CloseHandle
CreateEventW
ResetEvent
OpenEventA
InterlockedPopEntrySList
VirtualFree
InterlockedPushEntrySList
InterlockedCompareExchange
QueryPerformanceCounter

gdi32

GetTextFaceW
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
GetRgnBox
OffsetRgn
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
EnumFontFamiliesExW
GetTextCharsetInfo
EnumFontFamiliesW
CreateCompatibleBitmap
CreateDIBitmap
DPtoLP
CombineRgn
SetRectRgn
GetTextMetricsW
PatBlt
CreateRectRgnIndirect
CreateHatchBrush
GetObjectType
SelectPalette
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CopyMetaFileW
SetDIBitsToDevice
SetDIBits
CreateDIBSection
GetBitmapBits
CreatePen
CreateSolidBrush
DeleteDC
CreateDCW
RoundRect
SetBkColor
ExtTextOutW
CreateFontW
SetTextColor
SetBkMode
CreateFontIndirectW
GetObjectW
GetDeviceCaps
DeleteObject
GetStockObject
GetTextExtentPoint32W
SelectObject

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteValueW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
OpenProcessToken
GetTokenInformation
RegEnumValueW
RegQueryValueW
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCreateKeyExW

shell32

ShellExecuteW
SHBrowseForFolderW
SHAppBarMessage
DragFinish
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteExW
ord680
DuplicateIcon
DragQueryFileW
SHGetPathFromIDListW

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathFindExtensionW
PathStripToRootW
PathIsUNCW

ole32

RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
CoInitialize
CoCreateGuid
RegisterDragDrop

oleaut32

SystemTimeToVariantTime
VariantInit
VariantChangeType
VariantClear
VarBstrCat
SysStringLen
SysStringByteLen
VarBstrFromDate
SysAllocStringByteLen
SysAllocStringLen
VarBstrCmp
SysAllocString
SysFreeString
VariantTimeToSystemTime

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdiplusStartup
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImageGraphicsContext

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

??0?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@QAE@XZ
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@XZ@51
??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ@51
?CheckSPTDInstallation@DTProRes@@YGHPAUHWND__@@PAUIDaemonProEngine@@HHPA_N@Z
?DTProResReinitLocalization@@YGXXZ
?DevicesListDialog@@YGJPAUHWND__@@KVCComBSTR@ATL@@AAV23@PAUIDaemonProEngine@@@Z
?EditBox@@YGHPAUHWND__@@PB_W1PA_WK2H@Z
?GetComputerNameDialog@@YGHPAUHWND__@@PAUIDaemonProEngine@@PA_WJH@Z
?GetUserNameAndPassword@@YGHPAUHWND__@@PAUIDaemonProEngine@@PA_W2@Z
?IsConvertImagesDialogShowed@@YGHAAH@Z
?IsDeviceInfoShowed@@YGHXZ
?IsDeviceParametersShowed@@YGHXZ
?IsEraseDialogShowed@@YGHXZ
?MessageBoxChecked@@YGIPAUHWND__@@PB_W1PAH@Z
?MessageBoxExt@DTProRes@@YGIPAUHWND__@@PB_W1111I@Z
?ProcessingInProgress@@YGHXZ
?ReleaseDTProResObjects@@YGXXZ
?SelectImageCatalogFolder@@YGHPAUHWND__@@PAUIDaemonProEngine@@PAUITreeItems@@PAPAU3@@Z
?SetInvisibleWaitDialog@@YGX_N@Z
?ShowBurnImageDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_WHPAVIAttachedProgress@@@Z
?ShowConvertImagesDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_W@Z
?ShowDeviceInfo@@YGXPAUHWND__@@PAUIPhysicalDevice@@PAUIDeviceInfo@@@Z
?ShowDeviceParameters@@YGXPAUHWND__@@PAUIVirtDeviceParam@@@Z
?ShowEraseDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@@Z
?ShowGrabDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@PAVIAttachedProgress@@@Z
?ShowStatSetupDlg@@YGXPAUHWND__@@PAUIDaemonProEngine@@@Z
?SplashHide@@YGXXZ
?SplashSetMessageText@@YGXPA_W@Z
?SplashShow@@YGPAUHWND__@@PAUIDaemonProEngine@@@Z
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@XZ
?get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@XZ
?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ
?get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@XZ
?get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@A
?instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@A
?instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@A
?instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@A
?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@A
?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@A
?instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@A
?instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@A
?instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@A
?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@A
?instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@A
?is_destroyed@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@734@A
?t@?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@734@A
?t@?1??get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@734@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@634@A
?t@?1??get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@detail@34@A
CheckForUpdateCommand
ShowLicenseDialogCommand
_AboutDialogShow@8
_CheckLicenseAsyncCommand@12
_CheckLicenseCommand@16

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DTGadget32.dll
.dll regsvr32 windows:5 windows x86 arch:x86

0a50bfb640c19616827495f74709024d

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

63:56:1f:84:59:e5:03:38:19:55:bb:cc:85:fe:8d:b4:8f:f7:f9:4e
Signer

Actual PE Digest

63:56:1f:84:59:e5:03:38:19:55:bb:cc:85:fe:8d:b4:8f:f7:f9:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\DTLiteWorking\ui\Gadget\Release\Win32\DTGadget.pdb

Imports

gdiplus

GdipCreateBitmapFromHICON
GdipSaveImageToFile
GdipDisposeImage
GdipAlloc
GdipBitmapLockBits
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits

gdi32

DeleteObject
GetObjectW
GetBitmapBits

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenW
InternetCloseHandle

kernel32

GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
SetThreadLocale
GetThreadLocale
LockResource
FindResourceExW
InitializeCriticalSection
CreateThread
SetCurrentDirectoryW
GetCurrentDirectoryW
WideCharToMultiByte
SetEvent
CloseHandle
TerminateThread
WaitForSingleObject
OpenEventW
lstrlenA
GetCurrentProcessId
GetCurrentThreadId
DisconnectNamedPipe
Sleep
CreateProcessW
ReadFile
CreateFileW
WaitNamedPipeW
WriteFile
LocalFree
GetCurrentProcess
GetCurrentThread
LeaveCriticalSection
GetLocaleInfoA
GetProcAddress
GetSystemTimeAsFileTime
LoadLibraryW
GetVersionExW
FindClose
GetLocaleInfoW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapCreate
GetStdHandle
ExitProcess
GetCPInfo
LCMapStringW
GetCommandLineA
FindNextFileA
FindFirstFileExA
FileTimeToLocalFileTime
EnterCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetUserDefaultLCID
lstrlenW
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
WriteConsoleW
SetEndOfFile
CompareStringW
SetEnvironmentVariableA
FileTimeToSystemTime
DeleteFileA
RtlUnwind
DecodePointer
EncodePointer
GetStringTypeW
GetStartupInfoW
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
InterlockedExchange
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy

user32

AllowSetForegroundWindow
LoadImageW
GetIconInfo
DestroyIcon
CharNextW

advapi32

OpenThreadToken
OpenProcessToken
GetTokenInformation
IsValidSid
ConvertSidToStringSidW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

shell32

ShellExecuteExW
ShellExecuteW
SHGetFolderPathW

ole32

CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysFreeString
SysAllocString
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DTGadget64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

0332baf1ab5b184ce8e8ee18860d6305

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bd:bb:49:82:00:18:7a:7a:07:c6:48:81:4f:37:b5:d2:e7:e7:07:30
Signer

Actual PE Digest

bd:bb:49:82:00:18:7a:7a:07:c6:48:81:4f:37:b5:d2:e7:e7:07:30

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\DTLiteWorking\ui\Gadget\Release\x64\DTGadget.pdb

Imports

gdiplus

GdipCreateBitmapFromHICON
GdipSaveImageToFile
GdipDisposeImage
GdipAlloc
GdipBitmapLockBits
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits

gdi32

DeleteObject
GetBitmapBits
GetObjectW

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenW
InternetCloseHandle

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
FindClose
GetSystemTimeAsFileTime
GetCurrentProcess
GetModuleHandleW
GetVersionExW
WriteFile
CreateFileW
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
GetLocaleInfoA
GetUserDefaultLCID
LocalFree
WideCharToMultiByte
lstrlenA
EnterCriticalSection
LeaveCriticalSection
lstrlenW
SizeofResource
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
lstrcmpiW
LoadLibraryExW
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
CreateThread
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEvent
TerminateThread
OpenEventW
GetCurrentProcessId
GetCurrentThreadId
DisconnectNamedPipe
Sleep
ReadFile
WaitNamedPipeW
GetCurrentThread
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetVersion
HeapSetInformation
HeapCreate
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
TerminateProcess
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetCommandLineA
FlsSetValue
GetLastError
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
CloseHandle
FindResourceExW
FindResourceW
LoadResource
InitializeCriticalSection
LockResource
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
WriteConsoleW
SetEndOfFile
CompareStringW
RaiseException
SetEnvironmentVariableA
GetStartupInfoW
GetFileType
SetHandleCount
GetLocaleInfoW
GetStdHandle
ExitProcess
FindNextFileA
FindFirstFileExA
FileTimeToLocalFileTime
FileTimeToSystemTime
DeleteFileA
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
DecodePointer
EncodePointer
GetStringTypeW

user32

AllowSetForegroundWindow
GetIconInfo
CharNextW
LoadImageW
DestroyIcon

advapi32

IsValidSid
ConvertSidToStringSidW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
OpenProcessToken
GetTokenInformation
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
OpenThreadToken

ole32

CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc

shell32

SHGetFolderPathW
ShellExecuteW
ShellExecuteExW

oleaut32

RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysFreeString
SysAllocString
UnRegisterTypeLi
LoadTypeLi
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DTHelper.exe
.exe windows:5 windows x86 arch:x86

7bc13a7159ac99470e3b2723561bd3fe

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21-12-2009 09:32

Not After

22-12-2020 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2009 11:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

77:ca:df:cf:a7:fa:e7:69:3e:20:21:eb:d7:e7:c4:1a:42:a5:aa:00
Signer

Actual PE Digest

77:ca:df:cf:a7:fa:e7:69:3e:20:21:eb:d7:e7:c4:1a:42:a5:aa:00

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Projects\DTLiteWorking\ui\Helper\Release\DTHelper.pdb

Imports

kernel32

GetSystemTimeAsFileTime
WideCharToMultiByte
GetVersionExW
GetModuleFileNameW
MultiByteToWideChar
GetLastError
LocalFree
WaitForSingleObject
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetCurrentProcessId
GetCurrentProcess
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleHandleW
WriteFile
CloseHandle
DisconnectNamedPipe
ReadFile
CreateFileW
WaitNamedPipeW
LoadLibraryW
GetProcAddress
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
ExitProcess
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation

user32

DestroyWindow
AllowSetForegroundWindow
LoadIconW
SendMessageW
CreateWindowExW
MessageBoxW

advapi32

RegDeleteKeyW
GetTokenInformation
OpenProcessToken
RegCloseKey
RegSetValueExW
RegCreateKeyExW

shell32

ShellExecuteExW
ord680
SHChangeNotify

oleaut32

SysFreeString

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DTLite.exe
.exe windows:5 windows x86 arch:x86

6d74276937958ee509f3df7b5ddf5aca

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

16-07-2036 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:a1:34:a9:a7:40:5d:ab:75:8b:fa:a0:19:bf:5c:9d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-11-2011 00:00

Not After

08-11-2013 23:59

Subject

CN=EbizNetWorks,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=EbizNetWorks,L=Gangnam-gu,ST=Seoul,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\[0]정리하기\[0] Daemon\[0]Daemon Source\[0]Ebiz_daemonDTL\[0]334_Ebiz_daemonDTL\Release\DTLite.pdb

Imports

kernel32

GetConsoleMode
WriteConsoleW
SetEnvironmentVariableA
QueryPerformanceCounter
SetHandleCount
GetProcessHeap
GetConsoleCP
CompareStringW
GetConsoleOutputCP
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
IsValidCodePage
GetACP
HeapCreate
VirtualFree
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
CreateThread
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
FindResourceExA
VirtualProtect
GetProfileIntA
SearchPathA
GetSystemDirectoryW
LoadLibraryW
SetErrorMode
GetTickCount
GetFileSizeEx
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
CreateFileA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetFullPathNameA
GetTempFileNameA
GetFileTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
FileTimeToSystemTime
GetThreadLocale
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
SetThreadPriority
InterlockedDecrement
GetModuleFileNameW
RaiseException
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
InterlockedExchange
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
ResumeThread
lstrcpyA
GetFileAttributesA
Sleep
MultiByteToWideChar
lstrlenA
GetVolumeInformationA
GetProcAddress
CreateDirectoryA
GetTempPathA
CreateMutexA
Process32Next
CloseHandle
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleHandleA
GetModuleFileNameA
OpenMutexA
LocalFree
FormatMessageA
GetLastError
LoadLibraryA
FindResourceA
LoadResource
LockResource
SizeofResource
WriteConsoleA
GetStdHandle

user32

MapVirtualKeyExA
IsCharLowerA
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
SetCursorPos
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
UnionRect
UnregisterClassA
GetNextDlgGroupItem
EmptyClipboard
CloseClipboard
SetClipboardData
DestroyIcon
CopyImage
OpenClipboard
DrawStateA
RegisterClipboardFormatA
EnumChildWindows
LockWindowUpdate
IsMenu
SetClassLongA
SetParent
NotifyWinEvent
CreateAcceleratorTableA
DestroyAcceleratorTable
GetAsyncKeyState
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
PostThreadMessageA
DeleteMenu
WaitMessage
CharUpperA
CharNextA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
InvalidateRgn
SetRect
CopyAcceleratorTableA
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
WindowFromPoint
DestroyMenu
GetMenuItemInfoA
InflateRect
ShowOwnedPopups
ValidateRect
EndPaint
BeginPaint
GetWindowDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
SetWindowContextHelpId
MapDialogRect
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RedrawWindow
IsZoomed
PostQuitMessage
GetCursorPos
ReleaseCapture
SetCapture
IsClipboardFormatAvailable
SetWindowRgn
FillRect
IsRectEmpty
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
PostMessageA
CreateWindowExA
GetClassInfoExA
wsprintfA
EnableWindow
MessageBoxA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
GetClassInfoA
RegisterClassA
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
PtInRect
DefWindowProcA
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffA
CopyIcon
SubtractRect
UpdateWindow
IsChild
GetWindowTextLengthA
GetWindowTextA
GetFocus
GetParent
SetFocus
IsWindowEnabled
MoveWindow
GetDlgCtrlID
SetWindowTextA
GetIconInfo
GetDoubleClickTime
CreateMenu
GetWindowRgn
DestroyCursor
ClientToScreen
DispatchMessageA
LoadIconA
GetSystemMenu
AppendMenuA
SendMessageA
ShowWindow
GetClientRect
SetWindowLongA
GetWindowLongA
SetDlgItemTextA
SetTimer
IsIconic
GetSystemMetrics
DrawIcon
KillTimer
LoadBitmapA
ReleaseDC
LoadImageA
InvalidateRect
GetWindowRect
SetWindowPos
GetDesktopWindow
GetSysColor
IsWindowVisible
MessageBeep
LoadCursorA
SetCursor
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
GetMenuStringA
GetMenuState
AdjustWindowRectEx
IsWindow
GetWindow
CheckDlgButton
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
EnableScrollBar

gdi32

CreateHatchBrush
GetTextExtentPoint32A
CreateRectRgnIndirect
GetRgnBox
GetBkColor
GetTextColor
OffsetRgn
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
SetDIBColorTable
GetDIBits
RealizePalette
CombineRgn
StretchBlt
SetPixel
CreateDIBSection
SetRectRgn
GetMapMode
CreatePolygonRgn
Polyline
Polygon
RoundRect
CreatePalette
GetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
GetTextFaceA
SetPixelV
GetViewportExtEx
CreateRectRgn
GetObjectType
SelectPalette
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowOrgEx
CreateFontA
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CopyMetaFileA
GetDeviceCaps
CreateFontIndirectA
CreatePen
Rectangle
GetObjectA
GetStockObject
BitBlt
PatBlt
SelectObject
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
GetWindowExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueA

shell32

ShellExecuteExA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAppBarMessage
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
StrFormatByteSizeA

oledlg

ord8

ole32

CoInitializeEx
CoUninitialize
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoRevokeClassObject
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoRegisterMessageFilter
OleCreateMenuDescriptor
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
CoGetClassObject
StgOpenStorageOnILockBytes
OleDestroyMenuDescriptor

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayPutElement
SysAllocString
SysStringLen
VariantChangeType
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
OleCreateFontIndirect

urlmon

URLDownloadToFileA

gdiplus

GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDrawImageI
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage

wininet

InternetGetConnectedState

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DTSetupHelper.exe
.exe windows:4 windows x86 arch:x86

1a28552b21367ae34baaebdc22b948aa

Code Sign

10:9f:1d:aa:af:b8:33:15:a6:b6:4a:6e:ed:82:d8:16
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

04-11-2009 00:00

Not After

03-11-2012 23:59

Subject

CN=DT Soft Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=DT Soft Ltd,L=Belize City,ST=Belize,C=BZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f6:5a:80:70:8e:fd:db:84:76:1f:34:71:86:a3:e0:d1:4c:93:8f:ba
Signer

Actual PE Digest

f6:5a:80:70:8e:fd:db:84:76:1f:34:71:86:a3:e0:d1:4c:93:8f:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

Exports

Exports

A0DB34FC6FE35D429A28ADDE5467D4D7

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

SPTD
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DTShellHlp.exe
.exe windows:5 windows x86 arch:x86

3193f77a455fa629a18c56e3db0f20d1

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21-12-2009 09:32

Not After

22-12-2020 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2009 11:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:f3:60:cb:9d:41:d5:6e:5b:8e:0e:a5:be:ca:e7:f7:e6:d5:0f:2f
Signer

Actual PE Digest

09:f3:60:cb:9d:41:d5:6e:5b:8e:0e:a5:be:ca:e7:f7:e6:d5:0f:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Projects\DTLiteWorking\ui\shellext\ShellHelper\Release\DTShellHlp.pdb

Imports

dtcommonres

?ShowDeviceParameters@@YGXPAUHWND__@@PAUIVirtDeviceParam@@@Z
?SelectImageCatalogFolder@@YGHPAUHWND__@@PAUIDaemonProEngine@@PAUITreeItems@@PAPAU3@@Z
?ShowBurnImageDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_WHPAVIAttachedProgress@@@Z
?CheckSPTDInstallation@DTProRes@@YGHPAUHWND__@@PAUIDaemonProEngine@@HHPA_N@Z
?EditBox@@YGHPAUHWND__@@PB_W1PA_WK2H@Z
?ShowDeviceInfo@@YGXPAUHWND__@@PAUIPhysicalDevice@@PAUIDeviceInfo@@@Z

kernel32

LoadLibraryExW
VirtualFree
InterlockedPushEntrySList
SetEnvironmentVariableA
WriteConsoleW
InterlockedPopEntrySList
FindResourceW
IsValidLocale
WaitForSingleObject
FreeLibrary
Sleep
SizeofResource
LockResource
LoadResource
CreateFileW
WriteFile
CloseHandle
GetLastError
LoadLibraryW
GetProcAddress
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
EnumSystemLocalesA
MultiByteToWideChar
InterlockedCompareExchange
CreateMutexW
CreateThread
GetCurrentDirectoryW
SetCurrentDirectoryW
OpenEventW
SetEvent
TerminateThread
FindFirstFileW
GetVersionExW
lstrlenW
GetCurrentThreadId
CreateNamedPipeW
GetCurrentProcessId
CreateEventW
ConnectNamedPipe
WaitForMultipleObjects
GetOverlappedResult
ReadFile
DisconnectNamedPipe
GetModuleHandleW
FlushFileBuffers
GetCurrentProcess
GetCurrentThread
LocalFree
DeleteCriticalSection
GetTempPathW
GetTempFileNameW
GetTickCount
MoveFileExW
GetTimeZoneInformation
GetStringTypeW
GetConsoleMode
GetConsoleCP
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
ExitProcess
HeapSize
HeapQueryInformation
HeapReAlloc
RtlUnwind
EncodePointer
DecodePointer
ExitThread
GetStartupInfoW
HeapSetInformation
GetCommandLineW
VirtualProtect
SearchPathW
GetProfileIntW
GetNumberFormatW
GetWindowsDirectoryW
MulDiv
GetProcessHeap
HeapAlloc
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
lstrcmpiW
lstrcpyW
GetSystemDirectoryW
GetUserDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
ResumeThread
SetThreadPriority
GlobalFlags
lstrcmpA
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
FreeResource
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
lstrcmpW
CopyFileW
GlobalSize
InterlockedDecrement
SetLastError
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
GetSystemInfo
FindClose
FormatMessageW
WideCharToMultiByte
GetSystemTimeAsFileTime
GetUserDefaultLCID
FindResourceExW
GetLocaleInfoA
lstrlenA
GlobalAddAtomW
DeleteAtom
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameW
RaiseException
HeapFree
FlushInstructionCache

user32

DefMDIChildProcW
DefFrameProcW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
GetNextDlgGroupItem
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFrameControl
DrawEdge
DrawStateW
SetClassLongW
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
IsIconic
OffsetRect
IsRectEmpty
DeleteMenu
ShowOwnedPopups
IntersectRect
CharUpperW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
PostQuitMessage
GetMessageW
TranslateMessage
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoW
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
CheckMenuItem
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
DrawMenuBar
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
ValidateRect
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetWindowLongW
SetWindowLongW
UnregisterClassA
GetActiveWindow
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetMenu
GetWindow
LoadMenuW
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
SetCursor
RemovePropW
SetCapture
LoadCursorW
PtInRect
SetPropW
ReleaseCapture
GetPropW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
UpdateWindow
SetFocus
CheckDlgButton
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
WaitMessage
SetMenuDefaultItem
IsClipboardFormatAvailable
GetUpdateRect
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
SubtractRect
MapDialogRect
IsWindow
MessageBeep
LoadImageW
DialogBoxIndirectParamW
GetDialogBaseUnits
InflateRect
DrawFocusRect
GetWindowTextW
InvalidateRect
SystemParametersInfoW
GetSysColor
DrawIcon
DestroyCursor
GetWindowRgn
GetClassNameW
SetForegroundWindow
EndDialog
SendMessageW
GetClientRect
BeginPaint
FrameRect
GetSysColorBrush
EndPaint
DialogBoxParamW
SetWindowTextW
GetDlgItem
ShowWindow
CreateWindowExW
GetWindowRect
ScreenToClient
MoveWindow
SetWindowPos
GetParent
IsWindowVisible
GetMonitorInfoW
MonitorFromWindow
CopyRect
PostMessageW
GetDC
ReleaseDC
GetIconInfo
MessageBoxW
DestroyIcon
LoadIconW
EnableWindow
GetAsyncKeyState
GetDlgCtrlID
GetFocus
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
LoadBitmapW
KillTimer
SetTimer
GetSystemMenu
EnableMenuItem
SetDlgItemTextW
GetCursorPos
DrawTextW
GetWindowTextLengthW
GetWindowThreadProcessId
GetSystemMetrics
GetDlgItemTextW
IsWindowEnabled
DefWindowProcW
CallWindowProcW
DrawIconEx
PostThreadMessageW

gdi32

SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateCompatibleDC
SelectPalette
GetObjectType
CreateHatchBrush
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
SetLayout
PatBlt
DPtoLP
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreateBitmap
CopyMetaFileW
SetDIBits
CreateDIBSection
CreatePen
SelectObject
GetTextExtentPoint32W
GetObjectW
GetBitmapBits
DeleteObject
GetDeviceCaps
GetStockObject
CreateFontIndirectW
ExtTextOutW
SetBkColor
SetTextColor
SetBkMode
RoundRect
CreateDCW
DeleteDC
CombineRgn
CreateSolidBrush

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetOpenFileNameW
GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
OpenProcessToken
OpenThreadToken
GetTokenInformation
IsValidSid
ConvertSidToStringSidW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
SetSecurityDescriptorDacl

shell32

SHGetPathFromIDListW
DragQueryFileW
ShellExecuteExW
ord190
SHCreateShellItem
ord155
DuplicateIcon
SHBrowseForFolderW
SHAppBarMessage
DragFinish
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
ord680
ShellExecuteW

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW

ole32

DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RegisterDragDrop
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
CoInitializeEx
CoCreateInstance
CoTaskMemFree
CLSIDFromString
OleGetClipboard
CoInitialize

oleaut32

VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysStringLen
SysFreeString
SysAllocStringLen

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 891KB - Virtual size: 891KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DaemonUpdate.exe
.exe windows:4 windows x86 arch:x86

25bec694fb6c6424b9a29b02f8b2c81f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2575
ord3574
ord2574
ord4396
ord3402
ord3572
ord3571
ord609
ord556
ord3663
ord3626
ord2414
ord809
ord1793
ord2379
ord2122
ord5785
ord1640
ord323
ord823
ord2859
ord6197
ord1641
ord1168
ord537
ord5572
ord2915
ord535
ord4278
ord2818
ord5856
ord1200
ord5683
ord6283
ord6282
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord641
ord765
ord686
ord795
ord2514
ord2621
ord1134
ord5265
ord4998
ord6052
ord1775
ord4425
ord3597
ord3619
ord324
ord2302
ord4234
ord4299
ord4710
ord3573
ord640
ord5875
ord3089
ord4476
ord6215
ord2116
ord1146
ord4853
ord4376
ord5280
ord755
ord470
ord384
ord3721
ord3698
ord858
ord860
ord2301
ord6199
ord2764
ord2096
ord2820
ord2642
ord1105
ord941
ord668
ord1980
ord3181
ord4058
ord2781
ord2770
ord926
ord356
ord6442
ord2099
ord690
ord1988
ord2393
ord5207
ord389
ord665
ord1979
ord5186
ord4275
ord1929
ord3797
ord923
ord940
ord4129
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord692
ord501
ord773
ord5600
ord2860
ord1083
ord6805
ord5788
ord472
ord2754
ord2864
ord6597
ord6650
ord6591
ord6807
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6814
ord6839
ord6846
ord6858
ord6816
ord6815
ord6812
ord6845
ord6856
ord6808
ord6835
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5240
ord5281
ord3748
ord1725
ord5260
ord6614
ord6691
ord4432
ord6478
ord6514
ord6800
ord4284
ord2233
ord5823
ord3664
ord415
ord715
ord5641
ord1871
ord6571
ord879
ord882
ord1081
ord3993
ord996
ord939
ord5710
ord6662
ord6877
ord5605
ord656
ord825
ord567
ord3610
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord800
ord540
ord3811
ord861
ord354
ord2614
ord1576

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_setmbcp
malloc
free
_ftol
__CxxFrameHandler
_mbschr
sscanf
strncpy
sprintf
atof
atoi
_mbscmp
__dllonexit
_onexit
_controlfp

kernel32

GetStartupInfoA
GetModuleHandleA
lstrcmpiA
RemoveDirectoryA
ResumeThread
DeleteFileA
GetPrivateProfileStringA
GetTempPathA
CreateProcessA
WaitForSingleObject
Sleep
lstrlenA
GetProcAddress
LoadLibraryA
CreateDirectoryA
GetCommandLineA
GetModuleFileNameA

user32

PostMessageA
SetTimer
IsIconic
GetSystemMetrics
DrawIcon
FindWindowA
LoadIconA
SetWindowRgn
LoadBitmapA
GetWindowLongA
SetWindowLongA
MessageBeep
PtInRect
InvalidateRect
LoadImageA
GetClientRect
SendMessageA
EnableWindow
wsprintfA
SetFocus
SetCursor
LoadCursorA
GetDC
DrawEdge
GetParent
KillTimer
IsWindowVisible
GetSysColor

gdi32

Rectangle
GetCurrentObject
CreateFontIndirectA
GetStockObject
CreateRectRgn
CombineRgn
DeleteObject
CreateFontA
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
GetObjectA
PatBlt
SelectObject
CreateSolidBrush

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent

urlmon

URLDownloadToFileA

shlwapi

StrFormatByteSizeA
PathRemoveFileSpecA

wininet

InternetGetConnectedState

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Engine.dll
.dll regsvr32 windows:5 windows x86 arch:x86

37fc4d47fba053f9dd6bc70038a7c6e4

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21-12-2009 09:32

Not After

22-12-2020 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2009 11:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5e:b1:89:f3:eb:7f:f8:56:a5:0b:d3:21:47:f5:49:02:9b:45:ab:38
Signer

Actual PE Digest

5e:b1:89:f3:eb:7f:f8:56:a5:0b:d3:21:47:f5:49:02:9b:45:ab:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Projects\DTLiteWorking\service\dtprohlp\Release\Engine.pdb

Imports

advapi32

TraceEvent
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
ConvertSidToStringSidW
LookupAccountNameW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
RegQueryInfoKeyW
RegEnumKeyExW
OpenProcessToken
GetTokenInformation
SetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
CheckTokenMembership
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
CryptGenRandom
OpenSCManagerW
OpenServiceW
DeleteService
CloseServiceHandle
QueryServiceStatus
RegEnumKeyW

user32

IsCharAlphaNumericW
GetSystemMetrics
MessageBoxW
RegisterWindowMessageW
PostMessageW
DestroyIcon
LoadImageW
GetIconInfo
CreateIconFromResourceEx
GetDesktopWindow
GetWindowDC
ReleaseDC
CharNextW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
TranslateMessage
DispatchMessageW
GetMessageW
DefWindowProcW
wsprintfW
GetCursorPos
GetCaretPos
GetQueueStatus
GetProcessWindowStation
GetOpenClipboardWindow
GetMessageTime
GetMessagePos
GetInputState
GetFocus
GetClipboardViewer
GetClipboardOwner
GetCapture
GetActiveWindow
RegisterDeviceNotificationW
UnregisterDeviceNotification
CharUpperBuffW
LoadStringW
CharLowerBuffW

shell32

SHAddToRecentDocs
SHGetFolderPathW
ord165
ShellExecuteExW
ord680
ExtractIconExW
ord75
SHGetFileInfoW

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
CMP_WaitNoPendingInstallEvents
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiSetDeviceRegistryPropertyW
SetupDiCallClassInstaller
SetupDiClassGuidsFromNameExW
SetupDiGetClassDevsExW
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsW
SetupDiSetSelectedDevice
SetupDiDeleteDevRegKey
SetupDiRemoveDevice
CM_Locate_DevNodeW
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
CM_Get_Device_IDW
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
CM_Get_Child
CM_Get_Sibling
SetupDiOpenDeviceInfoW
SetupDiGetINFClassW

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueW

gdi32

GetObjectW
GetBitmapBits
DeleteObject
GetDeviceCaps

kernel32

SetStdHandle
WriteConsoleW
InterlockedExchange
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoW
SetHandleCount
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
GetLocaleInfoW
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
GetFullPathNameW
ExitThread
GetCPInfo
DecodePointer
SetEndOfFile
CompareStringW
OpenEventA
ResetEvent
ResumeThread
DeleteFileA
GetFileAttributesW
SetFileAttributesW
CopyFileW
GetExitCodeProcess
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
CloseHandle
WideCharToMultiByte
WaitForSingleObject
GetTickCount
CreateEventW
LocalFree
LocalAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateFileW
lstrlenW
GetFileTime
MultiByteToWideChar
WriteFile
CreateThread
Sleep
LeaveCriticalSection
EnterCriticalSection
ReadFile
SetFileTime
InitializeCriticalSection
GetVersionExW
GetComputerNameExW
GetVolumeInformationW
GetSystemDirectoryW
DeviceIoControl
CreateFileA
GetSystemDirectoryA
GetSystemDefaultLangID
GetUserDefaultLCID
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemTimeAsFileTime
SetEvent
OpenEventW
ReleaseMutex
CreateMutexW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
CreateDirectoryW
GetCurrentProcessId
SetFilePointer
GetModuleHandleW
GetTempFileNameW
GetTempPathW
GetFileSize
LoadLibraryExW
LoadLibraryA
GetPrivateProfileStringW
VirtualFree
VirtualAlloc
CreatePipe
SetThreadExecutionState
HeapFree
GetProcessHeap
OpenMutexW
CreateEventA
HeapAlloc
GetModuleFileNameW
FileTimeToSystemTime
SystemTimeToFileTime
GetFileAttributesExW
GetSystemTime
HeapReAlloc
SetThreadPriority
GetCurrentThread
lstrlenA
DeleteVolumeMountPointW
SetCurrentDirectoryW
GetCurrentDirectoryW
FormatMessageW
SetVolumeMountPointW
GetDriveTypeW
WaitForMultipleObjects
InterlockedCompareExchange
RaiseException
lstrcmpiW
SetThreadLocale
GetThreadLocale
WritePrivateProfileStringW
GetLocaleInfoA
GetCurrentProcess
GlobalAlloc
GlobalFree
RemoveDirectoryW
GetSystemInfo
DosDateTimeToFileTime
GetFileType
DuplicateHandle
VirtualUnlock
VirtualLock
QueryPerformanceCounter
GetStartupInfoA
GetProcessWorkingSetSize
GetProcessTimes
GetThreadTimes
GlobalMemoryStatus
GetCurrentThreadId
RtlUnwind
EncodePointer

ole32

CoTaskMemAlloc
CoFileTimeNow
IIDFromString
StringFromGUID2
StringFromCLSID
CoTaskMemFree
CoCreateGuid
CoInitialize
CoCreateInstance
CoInitializeEx
CreateClassMoniker
GetRunningObjectTable
CoUninitialize
CoTaskMemRealloc

oleaut32

LoadTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysAllocStringLen
VarBstrCmp
VarBstrCat
SysFreeString
SysStringLen

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
wnsprintfW
PathFileExistsW
StrToIntW

crypt32

CertAddEncodedCertificateToStore
CertFreeCertificateContext
CertOpenStore

Exports

Exports

??_B?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@51
??_B?1??get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ@51
?get_const_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ
?get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@A
?instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@3@A
?instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@3@A
?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@A
?instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@A
?is_destroyed@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?t@?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@734@A
?t@?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_oarchive@archive@boost@@@?A0xab0f94b0@detail@archive@boost@@@734@A
?t@?1??get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vnaked_binary_iarchive@archive@boost@@@?A0x0bea4b6d@detail@archive@boost@@@734@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@detail@34@A
?t@?1??get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@detail@34@A
A0DB34FC6FE35D429A28ADDE5467D4D7
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetDTEngine
_GetOSDisplayString@0

Sections

.text
Size: 729KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
InstallGadget.exe
.exe windows:5 windows x86 arch:x86

38a812eb4558bca1b6ef5ae9a19831a6

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21-12-2009 09:32

Not After

22-12-2020 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2009 11:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:1f:9b:bc:52:d7:9e:af:da:80:ae:e3:02:9c:b1:a1:83:dd:2c:b4
Signer

Actual PE Digest

05:1f:9b:bc:52:d7:9e:af:da:80:ae:e3:02:9c:b1:a1:83:dd:2c:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Projects\DTLiteWorking\ui\Gadget\InstallGadget\Release\InstallGadget.pdb

Imports

kernel32

GetModuleFileNameW
GetLastError
SetStdHandle
WriteConsoleW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCommandLineA
HeapSetInformation
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
CreateFileW

shell32

ShellExecuteW

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lang/AFK.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/ARA.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/BGR.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/BIH.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/CAT.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/CHS.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/CHT.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/CSY.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/DAN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/DEU.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/ELL.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/ENU.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/ESN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/FIN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/FRA.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/GLC.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/HEB.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/HRV.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/HUN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/HYE.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/IND.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/ITA.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/JPN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/KAT.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/KOR.dll
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lang/LTH.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/LVI.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/NLB.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/NOR.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/PLK.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/PTB.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/ROM.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/RUS.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/SKY.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/SLV.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/SRL.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/SVE.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/TRK.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/UKR.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lang/Uninstall.exe.nsis
SPTDinst-x64.exe
.exe windows:6 windows x64 arch:x64

c7c87f58605fd817141d6693a2fc4c61

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:11:26:c5:a4:5d:51:53:1c:0b:91:37:50:eb:a7:5c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

21-07-2010 00:00

Not After

21-08-2013 23:59

Subject

CN=Duplex Secure Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Duplex Secure Ltd,ST=Nevis,C=KN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:99:a9:99:e4:50:28:d7:b8:ff:bf:fb:32:89:cc:02:1b:90:85:fa
Signer

Actual PE Digest

db:99:a9:99:e4:50:28:d7:b8:ff:bf:fb:32:89:cc:02:1b:90:85:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\svn\sptd\setup\objfre_wnet_amd64\amd64\SPTDinst.pdb

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegOpenKeyExA
RegGetKeySecurity
RegDeleteValueA
AllocateAndInitializeSid
FreeSid
RegSetKeySecurity
RegCloseKey

kernel32

HeapReAlloc
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
GetTickCount
VirtualFree
GetProcessHeap
GetCommandLineA
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
LocalAlloc
GetModuleHandleA
CreateMutexA
ReleaseMutex
CloseHandle
LocalFree
CreateThread
Sleep
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetStartupInfoW
UnhandledExceptionFilter

user32

DialogBoxParamA
EndDialog
GetDlgItem
MessageBoxA
SendMessageA
SendDlgItemMessageA
EnableWindow

msvcrt

fclose
_fsopen
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
memset
_unlink
?terminate@@YAXXZ
memmove
_tempnam
sprintf
_mbsicmp
rename
fwrite
_mbsnbicmp
srand
rand
_errno
free

Exports

Exports

A0DB34FC6FE35D429A28ADDE5467D4D7

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 553KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sptd0
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CODEINIT
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODESIGN
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SPTDinst-x86.exe
.exe windows:6 windows x86 arch:x86

cdf2056813ada05862d0a6f4ddcdbf24

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:11:26:c5:a4:5d:51:53:1c:0b:91:37:50:eb:a7:5c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

21-07-2010 00:00

Not After

21-08-2013 23:59

Subject

CN=Duplex Secure Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Duplex Secure Ltd,ST=Nevis,C=KN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:d4:70:f2:62:26:2d:f6:ca:e5:63:b9:ce:47:65:a3:dd:d3:ea:c1
Signer

Actual PE Digest

3d:d4:70:f2:62:26:2d:f6:ca:e5:63:b9:ce:47:65:a3:dd:d3:ea:c1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\svn\sptd\setup\objfre_wxp_x86\i386\SPTDinst.pdb

Imports

advapi32

FreeSid
EqualSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegSetKeySecurity
RegGetKeySecurity
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegDeleteKeyA

kernel32

GetCurrentProcess
GetLastError
GetCurrentThread
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
LocalFree
CreateMutexA
LocalAlloc
HeapFree
HeapAlloc
HeapReAlloc
CloseHandle
CreateThread
ReleaseMutex
GetTickCount
WaitForSingleObject
GetCommandLineA
VirtualFree
VirtualAlloc
GetProcessHeap
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

MessageBoxA
EnableWindow
GetDlgItem
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
EndDialog

msvcrt

memmove
memset
srand
_except_handler3
fclose
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
rand
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
_mbsnbicmp
_mbsicmp
_fsopen
_tempnam
rename
_errno
free
_unlink
fwrite

Exports

Exports

A0DB34FC6FE35D429A28ADDE5467D4D7

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 457KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sptd0
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CODEINIT
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODESIGN
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dtlitedll.dll
.dll windows:5 windows x86 arch:x86

da76754a130a9520160513b740041af2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\DTLiteWorking\ui\tray\DTLiteExe\Release\DTLiteDLL.pdb

Imports

uxtheme

IsThemeActive

dtcommonres

?EditBox@@YGHPAUHWND__@@PB_W1PA_WK2H@Z
?CheckSPTDInstallation@DTProRes@@YGHPAUHWND__@@PAUIDaemonProEngine@@HHPA_N@Z
?MessageBoxExt@DTProRes@@YGIPAUHWND__@@PB_W1111I@Z
?ShowDeviceParameters@@YGXPAUHWND__@@PAUIVirtDeviceParam@@@Z
?DevicesListDialog@@YGJPAUHWND__@@KVCComBSTR@ATL@@AAV23@PAUIDaemonProEngine@@@Z
?ShowDeviceInfo@@YGXPAUHWND__@@PAUIPhysicalDevice@@PAUIDeviceInfo@@@Z
?IsDeviceInfoShowed@@YGHXZ
?IsDeviceParametersShowed@@YGHXZ
?ReleaseDTProResObjects@@YGXXZ
_AboutDialogShow@8
?ShowStatSetupDlg@@YGXPAUHWND__@@PAUIDaemonProEngine@@@Z
?ShowGrabDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@PAVIAttachedProgress@@@Z
?ShowBurnImageDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_WHPAVIAttachedProgress@@@Z
?ShowConvertImagesDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_W@Z
?ShowEraseDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@@Z
?SetInvisibleWaitDialog@@YGX_N@Z

mpr

WNetAddConnection3W

kernel32

GetConsoleMode
EnumSystemLocalesA
WriteConsoleW
SetEnvironmentVariableA
FindFirstFileW
SizeofResource
LockResource
LoadResource
FindResourceW
GetVersionExW
lstrlenW
GetCurrentThreadId
MultiByteToWideChar
IsValidLocale
GetProcAddress
GetModuleHandleW
FindResourceExW
CreateNamedPipeW
GetCurrentProcessId
CreateEventW
ConnectNamedPipe
GetEnvironmentStringsW
SetEvent
GetLastError
WaitForMultipleObjects
GetOverlappedResult
ReadFile
WriteFile
GetConsoleCP
DisconnectNamedPipe
LoadLibraryW
FreeLibrary
FindResourceA
LeaveCriticalSection
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateThread
CreateMutexW
GetModuleFileNameW
GetCommandLineW
OpenEventW
DeactivateActCtx
ActivateActCtx
Sleep
OpenMutexW
WaitForSingleObject
ResumeThread
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
IsProcessorFeaturePresent
PeekNamedPipe
GetFileInformationByHandle
GetTimeZoneInformation
GetStdHandle
lstrcpynW
SetLastError
CreateFileW
GlobalAddAtomW
QueryPerformanceCounter
HeapDestroy
CloseHandle
HeapCreate
InterlockedCompareExchange
InterlockedPushEntrySList
VirtualFree
InterlockedPopEntrySList
OpenEventA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
ExitProcess
HeapReAlloc
VirtualQuery
VirtualAlloc
RtlUnwind
ExitThread
GetCommandLineA
FindFirstFileExW
DecodePointer
EncodePointer
VirtualProtect
SearchPathW
GetNumberFormatW
GetWindowsDirectoryW
GetSystemDirectoryW
GlobalGetAtomNameW
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
ResetEvent
InitializeCriticalSection
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
DeleteCriticalSection
CreateDirectoryW
DeleteFileW
TlsGetValue
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
GetThreadLocale
GetProfileIntW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
SuspendThread
SetThreadPriority
ReleaseActCtx
CreateActCtxW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetFileAttributesExW
CopyFileW
GlobalSize
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
IsBadWritePtr
GetFileSize
EnterCriticalSection
GetPrivateProfileStringW
WritePrivateProfileStringW
GetSystemInfo
RemoveDirectoryW
FormatMessageW
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
GetCPInfo
lstrlenA
DeleteAtom
MulDiv
GlobalFree
FlushInstructionCache
GetCurrentProcess
MoveFileExW
GetTickCount
GetTempFileNameW
GetTempPathW
LoadLibraryExW
GetDriveTypeW
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
InterlockedIncrement
InterlockedDecrement
LocalFree
lstrcpyW
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
InitializeCriticalSectionAndSpinCount
RaiseException
CreateEventA
HeapAlloc
HeapFree
GetProcessHeap
FindClose
FindNextFileW
GetVersion

user32

GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawStateW
SetClassLongW
NotifyWinEvent
DestroyAcceleratorTable
SetWindowRgn
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
IsIconic
PostThreadMessageW
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
RealChildWindowFromPoint
UnregisterClassW
SetWindowContextHelpId
MapDialogRect
IntersectRect
CharUpperW
IsZoomed
ShowOwnedPopups
RegisterClipboardFormatW
MapVirtualKeyW
GetKeyNameTextW
DestroyMenu
GetWindowDC
CreateDialogIndirectParamW
GetNextDlgTabItem
GetMenuStringW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetMessageTime
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ValidateRect
GetClassInfoExW
GetKeyboardState
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetMenu
RegisterClassExW
ExitWindowsEx
GrayStringW
DrawTextExW
DeleteMenu
RemoveMenu
CreateMenu
GetMenuState
InsertMenuW
AppendMenuW
GetMenuItemInfoW
DrawEdge
TabbedTextOutW
SetRectEmpty
IsRectEmpty
SetRect
SetParent
RemovePropW
SetPropW
GetPropW
IsWindowEnabled
UnregisterClassA
GetDlgItemTextW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetFocus
CheckDlgButton
MessageBeep
DialogBoxIndirectParamW
GetDialogBaseUnits
DrawFocusRect
GetWindowTextLengthW
DrawTextW
SystemParametersInfoW
CallWindowProcW
DefWindowProcW
SetDlgItemTextW
EnableMenuItem
GetSystemMenu
GetWindowThreadProcessId
MonitorFromWindow
GetMonitorInfoW
MoveWindow
EndPaint
GetSysColorBrush
BeginPaint
GetDoubleClickTime
LoadMenuW
WindowFromPoint
LoadBitmapW
CreateAcceleratorTableW
SetCursorPos
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
UnionRect
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UpdateLayeredWindow
IsMenu
WaitMessage
IsClipboardFormatAvailable
GetUpdateRect
CopyIcon
CharUpperBuffW
IsCharLowerW
MapVirtualKeyExW
SubtractRect
CopyRect
FrameRect
RedrawWindow
SetMenuDefaultItem
CreatePopupMenu
RegisterWindowMessageW
FillRect
ReleaseCapture
SetCapture
PtInRect
ClientToScreen
DrawIcon
DestroyCursor
GetWindowRgn
GetClassInfoW
GetCapture
GetSysColor
ReleaseDC
DrawIconEx
GetIconInfo
GetDC
UnregisterHotKey
RegisterHotKey
ShowWindow
GetWindowPlacement
UpdateWindow
GetMessagePos
InvalidateRect
SetForegroundWindow
SetWindowPos
SetWindowLongW
GetWindowLongW
GetDesktopWindow
DestroyIcon
GetGUIThreadInfo
IsWindowVisible
PostQuitMessage
SetCursor
GetClientRect
GetCursorPos
LoadCursorW
IsWindow
AllowSetForegroundWindow
DestroyWindow
SetTimer
GetMessageW
LoadImageW
PostMessageW
KillTimer
DialogBoxParamW
TranslateMessage
LoadIconW
EndDialog
CreateWindowExW
GetSystemMetrics
SetWindowTextA
DispatchMessageW
MessageBoxW
OffsetRect
ScreenToClient
InflateRect
SetWindowTextW
GetWindowTextW
GetWindow
GetTopWindow
GetSubMenu
ModifyMenuW
GetMenuItemID
GetMenuItemCount
UnhookWindowsHookEx
SetWindowsHookExW
GetParent
GetWindowRect
GetDlgItem
GetActiveWindow
SendMessageW
CallNextHookEx
GetFocus
GetDlgCtrlID
GetAsyncKeyState
EnableWindow
GetForegroundWindow

gdi32

ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetClipBox
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
SetDIBits
Escape
TextOutW
RectVisible
PtVisible
CreateHatchBrush
CreateDIBSection
Ellipse
GetBkMode
PatBlt
DPtoLP
CreatePen
CreateSolidBrush
CreateDCW
RoundRect
SetBkMode
SetTextColor
SetBkColor
ExtTextOutW
GetObjectW
CreateCompatibleDC
SelectObject
GetBitmapBits
GetPixel
SetPixel
DeleteObject
DeleteDC
CreateCompatibleBitmap
Rectangle
BitBlt
GetStockObject
GetTextExtentPoint32W
GetDeviceCaps
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CopyMetaFileW
CreateBitmap
RealizePalette
GetTextMetricsW
GetObjectType
CreateFontIndirectW
GetTextFaceW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyExW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
OpenProcessToken
GetTokenInformation
RegDeleteKeyW
LookupPrivilegeValueW
AllocateAndInitializeSid
FreeSid
RegEnumValueW
RegQueryValueW
RegEnumKeyW
CheckTokenMembership
AdjustTokenPrivileges
RegDeleteValueW

shell32

ShellExecuteExW
ShellExecuteW
SHChangeNotify
ord190
SHCreateShellItem
ord155
SHBrowseForFolderW
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
DragFinish
DragQueryFileW
SHGetFileInfoW
ord680
DuplicateIcon
Shell_NotifyIconW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetDiskFreeSpaceExW

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoRevokeClassObject
CLSIDFromProgID
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleInitialize
OleUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CoFreeUnusedLibraries
CoGetClassObject
OleSetContainedObject
RevokeDragDrop
RegisterDragDrop
CoUninitialize
CoCreateInstance
CoTaskMemFree
CLSIDFromString
CoInitialize
CoLockObjectExternal
OleGetClipboard

oleaut32

OleCreateFontIndirect
SafeArrayDestroy
VariantChangeType
VariantCopy
VariantClear
VariantInit
VarBstrCat
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SysAllocString
VarBstrCmp
SysStringLen
SysFreeString

oledlg

OleUIBusyW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
GdipGetImageWidth

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Exports

Exports

GetDTObject

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dtsoftbus01.cat
dtsoftbus01.inf
dtsoftbus01.sys
.sys windows:6 windows x86 arch:x86

75fcd38af5b56894d2b21eb425579d2e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0b:7f:6b:00:00:00:00:00:19
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:00

Not After

23-05-2016 17:10

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:51:50:b3:c3:ae:3d:f5:8e:40:49:82:c6:36:17:7f:e8:e3:41:4c
Signer

Actual PE Digest

4f:51:50:b3:c3:ae:3d:f5:8e:40:49:82:c6:36:17:7f:e8:e3:41:4c

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\work\projects\working\service\vdrive\dtsoftbus\objfre_win7_x86\i386\dtsoftbus01.pdb

Imports

ntoskrnl.exe

IofCompleteRequest
IofCallDriver
KeClearEvent
KeSetEvent
IoCreateUnprotectedSymbolicLink
IoCreateDevice
RtlCopyUnicodeString
KeInitializeEvent
PoSetPowerState
IoSetDeviceInterfaceState
IoDeleteDevice
ObfDereferenceObject
KeWaitForSingleObject
ObReferenceObjectByPointer
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
IoInvalidateDeviceRelations
IoDetachDevice
IoGetDeviceProperty
IoAttachDeviceToDeviceStack
IoRegisterDeviceInterface
ObfReferenceObject
IoDeleteSymbolicLink
PoCallDriver
PoStartNextPowerIrp
IoBuildSynchronousFsdRequest
IoGetAttachedDeviceReference
MmMapLockedPagesSpecifyCache
KeInsertQueueDpc
IoFreeWorkItem
IoAllocateWorkItem
KeDelayExecutionThread
KeReleaseMutex
MmIsAddressValid
MmProbeAndLockPages
MmUnlockPages
IoFreeMdl
IoAllocateMdl
MmUserProbeAddress
ExInterlockedPopEntrySList
ExInterlockedPushEntrySList
KeQuerySystemTime
_alldiv
IoWMIRegistrationControl
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
KeQueryInterruptTime
_aulldiv
MmMapLockedPagesWithReservedMapping
IoBuildPartialMdl
MmUnmapReservedMapping
KeFlushQueuedDpcs
MmFreeMappingAddress
IoQueueWorkItem
KeInitializeTimer
KeInitializeDpc
MmAllocateMappingAddress
KeInitializeMutex
ZwOpenKey
IoReleaseCancelSpinLock
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeSetTimerEx
PsTerminateSystemThread
ExfInterlockedRemoveHeadList
ZwReadFile
KeSetPriorityThread
KeGetCurrentThread
ZwSetValueKey
ZwCreateKey
ZwQueryValueKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwQueryVolumeInformationFile
IoCreateFile
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
ExfInterlockedInsertTailList
KeTickCount
KeBugCheckEx
RtlUnwind
RtlCompareMemory
RtlInitUnicodeString
MmGetSystemRoutineAddress
memset
memcpy
ExAllocatePoolWithTag
IoWMIWriteEvent
KeCancelTimer
ExFreePoolWithTag
ZwSetSecurityObject
ObOpenObjectByPointer
IoDeviceObjectType
RtlGetDaclSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
SeExports
IoIsWdmVersionAvailable
_wcsnicmp
RtlAddAccessAllowedAce
RtlLengthSid
wcschr
RtlAbsoluteToSelfRelativeSD
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlFreeUnicodeString
RtlUnicodeToMultiByteN
RtlAnsiCharToUnicodeChar
_allmul
memmove
_aullrem
_allrem

hal

ExAcquireFastMutex
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
ExReleaseFastMutex

wmilib.sys

WmiSystemControl
WmiCompleteRequest

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dtsoftbusinst64.exe
.exe windows:5 windows x64 arch:x64

6370d940522f29be24f8a463b47e8215

Code Sign

10:9f:1d:aa:af:b8:33:15:a6:b6:4a:6e:ed:82:d8:16
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

04-11-2009 00:00

Not After

03-11-2012 23:59

Subject

CN=DT Soft Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=DT Soft Ltd,L=Belize City,ST=Belize,C=BZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

cf:09:38:d5:2b:f4:bf:5f:85:e3:ae:2c:2d:9e:54:99:c2:4e:af:35
Signer

Actual PE Digest

cf:09:38:d5:2b:f4:bf:5f:85:e3:ae:2c:2d:9e:54:99:c2:4e:af:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\dtpro\service\vdrive\dtsoftbus\inst64\dtsoftbusinst64\x64\Release\dtsoftbusinst64.pdb

Imports

cfgmgr32

CMP_WaitNoPendingInstallEvents

setupapi

SetupDiGetClassDevsExW
SetupDiClassGuidsFromNameExW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller

kernel32

IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
HeapFree
GetSystemTimeAsFileTime
GetCommandLineW
CreateFileA
FreeLibrary
GetModuleHandleW
HeapSize
Sleep
FormatMessageW
GetSystemDirectoryA
lstrlenW
GetLastError
GetCurrentDirectoryW
GetProcAddress
LocalAlloc
CloseHandle
LocalFree
DeleteFileA
HeapAlloc
HeapReAlloc
LCMapStringW
MultiByteToWideChar
LoadLibraryW
GetCurrentProcessId
GetTickCount
ExitProcess
DecodePointer
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetStringTypeW

advapi32

CloseServiceHandle
OpenServiceW
OpenSCManagerW
DeleteService

shell32

CommandLineToArgvW

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
imgengine.dll
.dll windows:5 windows x86 arch:x86

cecebe27c308da32acdec4b1587ded25

Code Sign

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

29-05-2012 17:52

Not After

30-05-2015 17:52

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6f:0e:a6:c1:32:73:27:8d:c6:0c:85:cc:60:27:71:b9:53:1c:e5:54
Signer

Actual PE Digest

6f:0e:a6:c1:32:73:27:8d:c6:0c:85:cc:60:27:71:b9:53:1c:e5:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
ReadFile
SetFilePointer
InterlockedCompareExchange
WriteFile
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
InitializeCriticalSection
GetTickCount
CreateEventW
GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapFree
HeapAlloc
RtlUnwind
GetFullPathNameW
RaiseException
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetCurrentThread
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
GetDiskFreeSpaceW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapReAlloc
FreeLibrary
LoadLibraryW
LCMapStringW
GetStringTypeW
GetCurrentDirectoryW
GetDriveTypeW
HeapSize
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleW
VirtualUnlock
LoadLibraryA
GetStartupInfoA
GetProcessWorkingSetSize
GetProcessTimes
GetThreadTimes
GlobalMemoryStatus
GetProcessHeap
VirtualLock
GetLastError
CreateFileW
GetFileSize
CloseHandle
WideCharToMultiByte
HeapDestroy
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetMessageTime
GetMessagePos
GetInputState
GetFocus
GetDesktopWindow
GetClipboardViewer
GetClipboardOwner
GetCapture
GetActiveWindow
SetWindowsHookExA
GetProcessWindowStation
GetQueueStatus
GetCaretPos
GetCursorPos
CallNextHookEx
UnhookWindowsHookEx
GetOpenClipboardWindow

advapi32

CryptGenRandom
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptAcquireContextA
CryptReleaseContext

Sections

.text
Size: - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.img0
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.img1
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fa974366048f9c551ef45714595665e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4aCertificate

Key Usages

16:a1:34:a9:a7:40:5d:ab:75:8b:fa:a0:19:bf:5c:9dCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 80KB

.rsrc Size: 22KB - Virtual size: 21KB

2e92645153848ef99816d61ac6e2a921

Headers

File Characteristics

Imports

kernel32

mfc42

msvcrt

user32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.CRT Size: 4KB - Virtual size: 8B

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 4KB - Virtual size: 544B

eef21a13a3a20993251273037c6620dd

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

wsock32

wininet

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.CRT Size: 4KB - Virtual size: 8B

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 568B

6504337db30ea93d33d7a714fefff047

Headers

File Characteristics

Imports

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

16:a1:34:a9:a7:40:5d:ab:75:8b:fa:a0:19:bf:5c:9d
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 80KB

.rsrc
Size: 22KB - Virtual size: 21KB

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB

.CRT
Size: 4KB - Virtual size: 8B

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 4KB - Virtual size: 544B

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB

.CRT
Size: 4KB - Virtual size: 8B

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 568B

.text
Size: 1024B - Virtual size: 570B

.rdata
Size: 512B - Virtual size: 375B

.data
Size: 512B - Virtual size: 156B

.reloc
Size: 512B - Virtual size: 166B

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 1024B - Virtual size: 831B

.rdata
Size: 1024B - Virtual size: 577B

.data
Size: - Virtual size: 24B

.reloc
Size: 512B - Virtual size: 150B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 2KB