db1c23e5d27b1fea91722f8522e1f7cc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

db1c23e5d27b1fea91722f8522e1f7cc_JaffaCakes118
Size

5.2MB
MD5

db1c23e5d27b1fea91722f8522e1f7cc
SHA1

f31d5bcdcd710a0ef96b4ae087a0e8fba137975d
SHA256

058f55e0937633184fb61af5a2b55210c84b0a073613dda7e55a2ab483f0d6a9
SHA512

d0f8b21758f75c0720764cbc1c1ea8b5d341196923a39eaab76a703765995af164a6d45473bd0e9b9a93e7f726df4d4647f39209b31420c664bb50af3ff1c92e
SSDEEP

98304:0U5IvW7x/fEOgB8Hke2Pyxg2HQW2kTQYKLp26vfwzbIpw9LqAkMgbNCyG:0nGjickjMXZ2kcZLA6vQ99uQgnG

Score

7^/10

pdf link upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/$TEMP/portchanger.exe	upx

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 19 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/Banner.dll
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/PassDialog.dll
unpack001/$PLUGINSDIR/SimpleSC.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/$TEMP/portchanger.exe
unpack001/$TEMP/twonkydelete.exe
unpack001/$_40_/twonkymediaserverconfig.exe
unpack001/$_40_/twonkymediaserverwatchdog.exe
unpack005/$PLUGINSDIR/FindProcDLL.dll
unpack005/$PLUGINSDIR/LangDLL.dll
unpack005/$PLUGINSDIR/System.dll
unpack005/$PLUGINSDIR/nsProcess.dll

Files

db1c23e5d27b1fea91722f8522e1f7cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f7:06:cb:f6:81:74:58:7f:63:37:1a:8c:db:de:2e:43:3f:73:a1:f1
Signer

Actual PE Digest

f7:06:cb:f6:81:74:58:7f:63:37:1a:8c:db:de:2e:43:3f:73:a1:f1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/AdvancedOptions.ini
$PLUGINSDIR/Banner.dll
.dll windows:5 windows x86 arch:x86

beba03bbad1f8d79d5b3c1359e913e0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpW
GetModuleHandleW
CloseHandle
Sleep
CreateThread
GetCurrentThreadId
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc

user32

DestroyWindow
SetWindowLongW
GetWindowLongW
SetWindowTextW
SetDlgItemTextW
DispatchMessageW
PeekMessageW
WaitMessage
IsWindow
CreateDialogParamW
ShowWindow
AttachThreadInput
IsWindowVisible
wsprintfW
PostMessageW

Exports

Exports

destroy
getWindow
show

Sections

.text
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/CheckITunes.ini
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

e26d7460d0c04056b9226a899477ba4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
CloseHandle
OpenProcess
LoadLibraryW
GetProcAddress
GetVersionExW
GlobalFree
lstrcpyW
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers

Exports

Exports

FindProc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:5 windows x86 arch:x86

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrcpynW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc

user32

OpenClipboard
DestroyIcon
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
GetClipboardData
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
wsprintfW
CharNextW
MessageBoxW
CloseClipboard
GetDlgCtrlID
MapWindowPoints
SetWindowPos
PtInRect
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyWindow

gdi32

SelectObject
CreateRectRgn
GetObjectW
CombineRgn
DeleteObject
CreateCompatibleDC
GetDIBits
SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:5 windows x86 arch:x86

e981c0ab92cb1f191bb5e23392e14796

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW

user32

SetWindowTextW
SetDlgItemTextW
EndDialog
SendDlgItemMessageW
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC

gdi32

CreateFontIndirectW
GetDeviceCaps
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LicenseEntry.ini
$PLUGINSDIR/PassDialog.dll
.dll windows:4 windows x86 arch:x86

222879b2e8cd7548b62c138f0a948989

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc
MultiByteToWideChar
CloseHandle
FlushFileBuffers
RtlUnwind
LCMapStringW
LCMapStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
WideCharToMultiByte
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP

user32

wsprintfW
CreateDialogParamW
SendMessageA
GetClientRect
CreateWindowExW
SetFocus
GetWindowTextW
CallWindowProcW
PostMessageW
GetWindowRect
MapWindowPoints
SetWindowPos
SetWindowLongW
ShowWindow
IsDialogMessageW
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
SendMessageW
EnableWindow
GetDlgItem
SetWindowTextW

Exports

Exports

Dialog
InitDialog
Show

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PreviousInstall.ini
$PLUGINSDIR/SimpleSC.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ContinueService
ExistsService
GetServiceBinaryPath
GetServiceDisplayName
GetServiceName
GetServiceStartType
GetServiceStatus
GrantServiceLogonPrivilege
InstallService
PauseService
RemoveService
RemoveServiceLogonPrivilege
RestartService
ServiceIsPaused
ServiceIsRunning
ServiceIsStopped
SetServiceDescription
SetServiceLogon
SetServiceStartType
StartService
StopService

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 633B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StartInstall.ini
$PLUGINSDIR/StartMenu.dll
.dll windows:5 windows x86 arch:x86

b1d9539c7cfd95718179dedb471b482f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileW
lstrcatW
lstrcpyW
MulDiv
GetModuleHandleW
lstrcmpW
GlobalFree
lstrcpynW
GlobalAlloc
FindNextFileW
lstrcmpiW
FindClose

user32

PostMessageW
CallWindowProcW
GetWindowLongW
IsDialogMessageW
CheckDlgButton
ShowWindow
LoadIconW
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextW
IsDlgButtonChecked
GetWindowTextW
GetDlgItem
wsprintfW
CreateDialogParamW
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
SetWindowLongW
SendMessageW

gdi32

GetTextMetricsW
SelectObject

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

CoTaskMemFree

Exports

Exports

Init
Select
Show

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UserInfo.dll
.dll windows:5 windows x86 arch:x86

45d25ca52c312b2254c60dbcb30342d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
GetCurrentThread
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetLastError
GlobalFree
CloseHandle
lstrcpynW
GlobalAlloc

advapi32

OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameW
OpenThreadToken

Exports

Exports

GetAccountType
GetName
GetOriginalAccountType

Sections

.text
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 753B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/installtype.ini
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsExec.dll
.dll windows:5 windows x86 arch:x86

8700d0ebbb41c81ea52718af1ab70a93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
MultiByteToWideChar
lstrlenA
lstrcmpiW
lstrlenW
ExitProcess
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
lstrcpynW
GetCommandLineW
Sleep
TerminateProcess
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
GetModuleHandleW
GetTickCount
GetStartupInfoW
CreatePipe
GetVersionExW
GlobalLock
DeleteFileW
lstrcatW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
GetProcAddress
PeekNamedPipe
GetCurrentProcess

user32

CharPrevW
CharNextW
SendMessageW
FindWindowExW
wsprintfW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsProcess.dll
.dll windows:4 windows x86 arch:x86

62ab0c3eb0582ceea15accdedbfc80db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CloseHandle
TerminateProcess
OpenProcess
lstrcmpiW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryA
GetVersionExW
GlobalFree
lstrcpynW
GlobalAlloc

Exports

Exports

_FindProcess
_KillProcess
_Unload

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/portchanger.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 390KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$TEMP/twonkydelete.exe
.exe windows:4 windows x86 arch:x86

cab64d8d6e474a993ee6ad78d88158fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\accurev\ws\pvdev_twonky_7_0_consolidation\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\Key_validator\Release\twonkydelete7.pdb

Imports

kernel32

GetStringTypeA
GetStringTypeW
SetFilePointer
LCMapStringW
CreateFileA
GetLocaleInfoA
MultiByteToWideChar
CloseHandle
GetCurrentProcessId
Sleep
GetCurrentThreadId
GetLastError
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetTickCount
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
HeapReAlloc
GetSystemTimeAsFileTime
ExitProcess
WideCharToMultiByte
GetFileType
LCMapStringA
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
VirtualAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RtlUnwind

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_40_/twonkymediaserverconfig.exe
.exe windows:4 windows x86 arch:x86

44f334ec338a47031e263dea9a76972d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\accurev\tray_patch_port_9005\dlna\twonkymedia\projects\packetvideo\win32\vs-2005\pv\release\twonkymediaserverconfig.pdb

Imports

ws2_32

gethostname
inet_ntoa
gethostbyname
WSACleanup
send
connect
WSAStartup
htons
recv
socket
closesocket

kernel32

GetLastError
CloseHandle
CreateProcessW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
Sleep
GetExitCodeProcess
TerminateProcess
GetCommandLineW
GetVersionExW
GetModuleFileNameW
CreateThread
CompareStringA
GetCurrentDirectoryA
GetStringTypeW
GetStringTypeA
LCMapStringW
CompareStringW
GetLocaleInfoA
CreateFileA
HeapSize
VirtualAlloc
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
SetEnvironmentVariableA
GetConsoleMode
FlushFileBuffers
HeapReAlloc
DeleteFileW
LCMapStringA
GetConsoleCP
WideCharToMultiByte
WriteFile
GetModuleFileNameA
GetStdHandle
RtlUnwind
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetLocalTime
GetTimeZoneInformation
GetFullPathNameW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
SwitchToThread
GetDriveTypeA
GetCurrentProcessId
CreateFileW
SystemTimeToFileTime
GetFileAttributesExW
CreateDirectoryW
ReadFile
MoveFileW
FindClose
FindNextFileW
FindFirstFileW
MultiByteToWideChar
SetThreadPriority
GetProcAddress
GetModuleHandleA
OutputDebugStringW
GetTickCount
ExitThread
ResumeThread
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetFileType
SetFilePointer
GetCurrentThreadId

user32

EnumWindows
FindWindowW
GetSubMenu
SendMessageTimeoutW
GetWindowTextW
SendMessageW
GetMenu
RegisterClassW
TranslateMessage
BeginDeferWindowPos
MessageBoxW
DeferWindowPos
CreateWindowExW
ModifyMenuW
RemoveMenu
GetClientRect
IsDialogMessageW
UpdateWindow
LoadIconW
DestroyWindow
DestroyMenu
LoadMenuW
EndDeferWindowPos
GetWindowRect
DefWindowProcW
CheckMenuItem
GetMessageW
PostQuitMessage
SystemParametersInfoW
TrackPopupMenu
GetClassNameW
DispatchMessageW
EnableMenuItem
PostMessageW
GetMenuState
LoadBitmapW
SetForegroundWindow
GetDesktopWindow
SetWindowPos
GetCursorPos
LoadCursorW
EnumChildWindows
ShowWindow
EndTask

advapi32

RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

Shell_NotifyIconW
ShellExecuteW
SHBindToParent
SHGetSpecialFolderLocation
SHGetMalloc

shlwapi

StrRetToBufW

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_40_/twonkymediaserverwatchdog.exe
.exe windows:4 windows x86 arch:x86

e551dce64f509e840ccd0bed81956ed5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\accurev\tray_patch_port_9005\dlna\twonkymedia\projects\packetvideo\win32\vs-2005\pv\release\twonkymediaserverwatchdog.pdb

Imports

ws2_32

WSAGetLastError
inet_addr
gethostname
bind
listen
accept
inet_ntoa
WSAStartup
WSACleanup
htons
recv
socket
closesocket
gethostbyname
getpeername
send
connect

kernel32

TerminateProcess
LocalFree
CreateThread
GetModuleFileNameW
GetCommandLineW
OpenProcess
GetExitCodeProcess
LCMapStringW
LCMapStringA
GetLocaleInfoA
CreateFileA
HeapSize
VirtualAlloc
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeA
Sleep
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CreateProcessW
CloseHandle
GetLastError
GetCurrentDirectoryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeW
SetEndOfFile
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetDriveTypeA
SwitchToThread
WaitForSingleObject
GetCurrentProcessId
CreateFileW
SystemTimeToFileTime
GetFileAttributesExW
CreateDirectoryW
DeleteFileW
MoveFileW
FindClose
FindNextFileW
FindFirstFileW
MultiByteToWideChar
SetThreadPriority
GetProcAddress
GetModuleHandleA
OutputDebugStringW
GetTickCount
ExitThread
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetFileType
SetFilePointer
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
GetCurrentThreadId
GetTimeZoneInformation
GetFullPathNameW
GetLocalTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RtlUnwind
GetStdHandle
GetModuleFileNameA

user32

EndTask
LoadIconW
DispatchMessageW
RegisterClassExW
TranslateMessage
wsprintfW
DefWindowProcW
LoadCursorW
LoadImageW
FindWindowW
CreateWindowExW
GetMessageW
GetSystemMetrics

gdi32

GetStockObject

advapi32

OpenServiceW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenSCManagerW
DeleteService
SetServiceStatus
CloseServiceHandle
StartServiceW
CreateServiceW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ControlService

shell32

SHBindToParent
SHGetSpecialFolderLocation
SHGetMalloc
CommandLineToArgvW

shlwapi

StrRetToBufW

iphlpapi

SendARP

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 577KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NOTICES.txt
TwonkyServer-Readme.html
.html
TwonkyServer-ReleaseNotes.pdf
.pdf
- http://pv.com
TwonkyServer-RevisionHistory.pdf
.pdf
- http://api.twonky.com
- http://db.info
- http://mediaserver.pid
- http://pv.com
UninstallTwonkyServer.exe
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e1:79:fd:df:e6:81:a2:c6:26:9f:1c:cc:6a:b8:9e:65:2e:4a:9e:93
Signer

Actual PE Digest

e1:79:fd:df:e6:81:a2:c6:26:9f:1c:cc:6a:b8:9e:65:2e:4a:9e:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

e26d7460d0c04056b9226a899477ba4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
CloseHandle
OpenProcess
LoadLibraryW
GetProcAddress
GetVersionExW
GlobalFree
lstrcpyW
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers

Exports

Exports

FindProc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:5 windows x86 arch:x86

e981c0ab92cb1f191bb5e23392e14796

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW

user32

SetWindowTextW
SetDlgItemTextW
EndDialog
SendDlgItemMessageW
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC

gdi32

CreateFontIndirectW
GetDeviceCaps
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/nsProcess.dll
.dll windows:4 windows x86 arch:x86

62ab0c3eb0582ceea15accdedbfc80db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CloseHandle
TerminateProcess
OpenProcess
lstrcmpiW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryA
GetVersionExW
GlobalFree
lstrcpynW
GlobalAlloc

Exports

Exports

_FindProcess
_KillProcess
_Unload

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cgi-bin/cgi-jpegscale.exe
.exe windows:4 windows x86 arch:x86

707d57df389323ddb939fead380f123a

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:23:5e:6e:2d:06:be:b9:3a:80:20:a5:7a:68:49:ac:c2:ba:f9:3b
Signer

Actual PE Digest

3d:23:5e:6e:2d:06:be:b9:3a:80:20:a5:7a:68:49:ac:c2:ba:f9:3b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\workspace\ondemand\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\release\cgi-bin\cgi-jpegscale.pdb

Imports

kernel32

LocalFree
GetCommandLineW
CreateFileA
SetEndOfFile
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
RtlUnwind
GetCommandLineA
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
Sleep
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

shell32

CommandLineToArgvW

Sections

.text
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cgi-bin/convert-jpeg.desc
cgi-bin/convert-readme.txt
cgi-bin/convert.exe
.exe windows:4 windows x86 arch:x86

41aba468f5cc4a67a93c9b315b5b3c78

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

dd:4e:53:f7:c6:8b:90:f5:d2:1e:ae:3e:a7:eb:c5:94:99:c3:ae:41
Signer

Actual PE Digest

dd:4e:53:f7:c6:8b:90:f5:d2:1e:ae:3e:a7:eb:c5:94:99:c3:ae:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\kerppila\My Documents\ImageMagick\ImageMagick-6.6.0\VisualMagick\bin\convert.pdb

Imports

kernel32

CloseHandle
MapViewOfFile
CreateFileMappingA
FindFirstFileA
LoadLibraryExA
SetErrorMode
FindNextFileA
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceA
FlushViewOfFile
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
SetFilePointer
UnmapViewOfFile
GetProcessTimes
GetCurrentProcess
TerminateProcess
ReadFile
GetFileSize
CreateFileA
HeapAlloc
HeapFree
GetCommandLineA
GetProcessHeap
ExitProcess
GetCurrentProcessId
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
MultiByteToWideChar
HeapReAlloc
DeleteFileA
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MoveFileA
GetDriveTypeW
FindFirstFileW
GetFileAttributesA
GetDriveTypeA
GetFullPathNameA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
SetStdHandle
DuplicateHandle
FlushFileBuffers
GetModuleHandleA
GetTimeFormatA
GetDateFormatA
FatalAppExitA
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
LCMapStringA
LCMapStringW
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreatePipe
RaiseException
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileW
GetLogicalDrives
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OutputDebugStringA
GetCurrentThreadId
CreateMutexA
ReleaseMutex
GetProcAddress
GetLastError
FormatMessageA
LocalFree
GetModuleFileNameA
GetSystemTime
SystemTimeToFileTime
SetConsoleCtrlHandler
FreeLibrary
FindClose
GetVersionExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DeleteCriticalSection
LeaveCriticalSection
InterlockedExchange
EnterCriticalSection
InterlockedCompareExchange
RtlUnwind
Sleep
GetTimeZoneInformation
GetCommandLineW

shell32

CommandLineToArgvW

user32

EmptyClipboard
OpenClipboard
GetClipboardData
CloseClipboard
GetDC
ReleaseDC
MessageBoxA
SetClipboardData

gdi32

SelectPalette
RealizePalette
BitBlt
DeleteEnhMetaFile
CreateDIBSection
CreateCompatibleDC
DeleteObject
SelectObject
DeleteDC
PlayEnhMetaFile
GetEnhMetaFileA
GetEnhMetaFileW
GetEnhMetaFileHeader
GetMetaFileA
GetMetaFileBitsEx
DeleteMetaFile
SetWinMetaFileBits
CreateBitmapIndirect
GetObjectA

oleaut32

SafeArrayGetLBound
SafeArrayRedim
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SafeArrayGetUBound

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegEnumKeyA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegEnumValueA

wsock32

WSAGetLastError
WSACleanup
closesocket
select
send
recv
getsockopt
__WSAFDIsSet
connect
inet_ntoa
socket
htons
gethostbyname
WSAStartup
ntohs
listen
bind
getsockname

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 445B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cgi-bin/ffmpeg-3gp-mp4.desc
cgi-bin/ffmpeg-3gp-mpeg.desc
cgi-bin/ffmpeg-asf-mp4.desc
cgi-bin/ffmpeg-asf-mpeg.desc
cgi-bin/ffmpeg-avi-mp4.desc
cgi-bin/ffmpeg-avi-mpeg.desc
cgi-bin/ffmpeg-flv-mp4.desc
cgi-bin/ffmpeg-flv-mpeg.desc
cgi-bin/ffmpeg-m4v-mp4.desc
cgi-bin/ffmpeg-m4v-mpeg.desc
cgi-bin/ffmpeg-mkv-mp4.desc
cgi-bin/ffmpeg-mkv-mpeg.desc
cgi-bin/ffmpeg-mov-mp4.desc
cgi-bin/ffmpeg-mov-mpeg.desc
cgi-bin/ffmpeg-mp4-mp4.desc
cgi-bin/ffmpeg-mp4-mpeg.desc
cgi-bin/ffmpeg-mpg-mp4.desc
cgi-bin/ffmpeg-mpg-mpeg.desc
cgi-bin/ffmpeg-msdvr-mp4.desc
cgi-bin/ffmpeg-msdvr-mpeg.desc
cgi-bin/ffmpeg-mts-mp4.desc
cgi-bin/ffmpeg-video-thumb.desc
cgi-bin/ffmpeg-webm-mp4.desc
cgi-bin/ffmpeg-webm-mpeg.desc
cgi-bin/ffmpeg-wtv-mp4.desc
cgi-bin/ffmpeg-wtv-mpeg.desc
cgi-bin/jpeg-scale.desc
cgi-bin/ttu-video-thumb.desc
cgi-bin/ttu.exe
.exe windows:4 windows x86 arch:x86

d984fd30b8178d83de6711edca422810

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:5a:de:47:c8:16:13:a5:d7:63:58:f7:86:76:a8:c8:78:50:48:72
Signer

Actual PE Digest

27:5a:de:47:c8:16:13:a5:d7:63:58:f7:86:76:a8:c8:78:50:48:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\workspace\ondemand\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\release\cgi-bin\ttu.pdb

Imports

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
CreateFileA
RaiseException
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LocalFree
FormatMessageW
GetLastError
CloseHandle
MultiByteToWideChar
OutputDebugStringW
Process32NextW
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
GetProcAddress
SystemTimeToFileTime
GetFileAttributesExW
DeleteFileW
MoveFileW
FindClose
CreateFileW
FindNextFileW
FindFirstFileW
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
TerminateThread
TerminateProcess
WaitForSingleObject
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
SetThreadPriority
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
HeapReAlloc
WideCharToMultiByte
GetTimeZoneInformation
GetCurrentProcess
GetFileType
SetFilePointer
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ExitThread
CreateThread
GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
VirtualAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
SetEndOfFile
GetCommandLineW

shell32

CommandLineToArgvW
SHBindToParent
SHGetMalloc
SHGetSpecialFolderLocation

ws2_32

WSAGetLastError
shutdown
closesocket

shlwapi

StrRetToBufW

advapi32

RegQueryValueExW
OpenSCManagerW
EnumServicesStatusExW
CloseServiceHandle
RegOpenKeyExW
RegCloseKey

ole32

CoInitialize
CoUninitialize

oleaut32

VariantClear

Sections

.text
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
doc/licence-de.rtf
.rtf
doc/licence-en.rtf
.rtf
doc/licence-es.rtf
.rtf
doc/licence-fi.rtf
.rtf
doc/licence-fr.rtf
.rtf
doc/licence-it.rtf
.rtf
doc/licence-jp.rtf
.rtf
doc/licence-nl.rtf
.rtf
doc/licence-pl.rtf
.rtf
doc/licence-ru.rtf
.rtf
license/twonky.dat
license/twonky.license
platform-player-directshow.dll
.dll windows:4 windows x86 arch:x86

5dc690e49a7d1eece1a31d6eb780f393

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

71:22:d5:89:80:37:14:b9:7c:68:2a:3a:eb:9a:e3:e5:73:6b:c7:58
Signer

Actual PE Digest

71:22:d5:89:80:37:14:b9:7c:68:2a:3a:eb:9a:e3:e5:73:6b:c7:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
CreateThread
GetSystemTimeAsFileTime
HeapSize
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
InitializeCriticalSection
RtlUnwind
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetLastError
GetCurrentThreadId
ExitThread
GetProcAddress
FreeLibrary
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
ReleaseSemaphore
CloseHandle
CreateSemaphoreW
LoadLibraryW
WaitForSingleObject
GetCurrentProcessId
WaitForMultipleObjects

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

player_create
player_destroy
player_get_current_position
player_get_duration
player_get_state
player_init_check
player_is_playing
player_pause
player_prepare
player_register_observer
player_reset
player_seek_to
player_set_data_source
player_set_looping
player_set_sink
player_start
player_stop

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
platform-player-mediafoundation.dll
.dll windows:4 windows x86 arch:x86

44a53bc4f4178ead57d66742aa4e960e

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:04:ca:b7:c3:4b:20:1b:9c:a5:54:20:c8:4f:45:95:7b:c0:fe:f3
Signer

Actual PE Digest

44:04:ca:b7:c3:4b:20:1b:9c:a5:54:20:c8:4f:45:95:7b:c0:fe:f3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfplat

MFStartup
MFCreateMediaType
MFCreateWaveFormatExFromMFMediaType
MFShutdown

mfreadwrite

MFCreateSourceReaderFromURL

propsys

PropVariantToUInt32
PropVariantToInt64

kernel32

WaitForSingleObject
DeleteCriticalSection
ResetEvent
CreateEventW
ReleaseSemaphore
SetEvent
CreateSemaphoreW
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
Sleep
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetLastError
ExitThread
GetCurrentThreadId
CreateThread
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
LoadLibraryA
HeapSize
GetLocaleInfoA
SetStdHandle
GetConsoleCP
FlushFileBuffers
CreateFileA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
IsDebuggerPresent
GetConsoleMode

ole32

CoUninitialize
CoTaskMemFree
PropVariantClear
CoInitializeEx

Exports

Exports

player_create
player_destroy
player_get_current_position
player_get_duration
player_get_state
player_init_check
player_is_playing
player_pause
player_prepare
player_register_observer
player_reset
player_seek_to
player_set_data_source
player_set_looping
player_set_sink
player_start
player_stop

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/iTunes-import.exe
.exe windows:4 windows x86 arch:x86

53b54e621431d2c4081e15f32a17c647

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6c:4f:72:03:dc:1a:c4:17:ad:51:e1:30:68:bf:96:10:7b:4e:5f:4a
Signer

Actual PE Digest

6c:4f:72:03:dc:1a:c4:17:ad:51:e1:30:68:bf:96:10:7b:4e:5f:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\workspace\ondemand\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\release\plugins\iTunes-import.pdb

Imports

shell32

SHBindToParent
SHGetMalloc
SHGetSpecialFolderLocation
SHGetFolderPathW

ws2_32

closesocket
shutdown
WSAGetLastError

shlwapi

StrRetToBufW

kernel32

RaiseException
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SystemTimeToFileTime
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
MoveFileW
FindClose
CreateFileW
GetLastError
CloseHandle
FindNextFileW
FindFirstFileW
OutputDebugStringW
LocalFree
FormatMessageW
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
TerminateThread
TerminateProcess
WaitForSingleObject
GetProcAddress
GetModuleHandleA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
SetThreadPriority
OpenProcess
GetCurrentProcessId
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
ExitProcess
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetFileType
SetFilePointer
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
ExitThread
CreateThread
GetCurrentProcess
GetLocalTime
GetTimeZoneInformation
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetStdHandle
GetModuleFileNameA
LoadLibraryA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize

advapi32

RegQueryValueExW
RegOpenKeyExW
CloseServiceHandle
EnumServicesStatusExW
OpenSCManagerW
RegCloseKey

ole32

CoUninitialize
CoInitialize

oleaut32

VariantClear

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
plugins/itunes-import.plugin
pvdshowrenderer.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c8a988d794bddad4d458d80bc0767d01

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8e:8c:e8:c5:82:c1:c7:fe:dd:42:b7:cc:a6:cc:dc:03:69:3d:00:1b
Signer

Actual PE Digest

8e:8c:e8:c5:82:c1:c7:fe:dd:42:b7:cc:a6:cc:dc:03:69:3d:00:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\ws\dusan_w7_twcore_cons\dlna\twonky\src\platformplayerwrappers\dshowplayer\test\build\PlayerConsoleUnitTest\Release\pvdshowrenderer.pdb

Imports

kernel32

GetCommandLineA
GetVersionExA
GetProcessHeap
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
FreeLibrary
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
HeapSize
CreateThread
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
lstrcmpW
GetVersionExW
DisableThreadLibraryCalls
lstrlenW
lstrlenA
LoadLibraryW
GetCurrentThreadId
ExitThread
HeapFree
GetLastError
HeapAlloc
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
CreateEventW
DeleteCriticalSection
ResetEvent
SetEvent
CloseHandle
LeaveCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
WaitForSingleObject
EnterCriticalSection

advapi32

RegOpenKeyExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

ole32

CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/cds-hdrl.xml
.vbs .xml polyglot
resources/cds-noupdate-samsung.xml
.xml
resources/cds-noupdate.xml
.xml
resources/cds-samsung.xml
.vbs .xml polyglot
resources/cds-update.xml
.xml
resources/cds.xml
.vbs .xml polyglot
resources/devicedb/00Readme.txt
.vbs
resources/devicedb/00Template.txt
resources/devicedb/8player.xml
resources/devicedb/ACTIVY_Media_Player.xml
resources/devicedb/Acer_Media_Player.xml
resources/devicedb/Airplay.xml
resources/devicedb/Apple/Apple_TV.xml
resources/devicedb/Apple/Apple_iPhone.xml
resources/devicedb/Archos_605_wifi.xml
resources/devicedb/AssetControl_DS_Control_Point.xml
resources/devicedb/Audi_Multimedia.xml
resources/devicedb/Bang_and_Olufsen/Bang_and_Olufsen.xml
resources/devicedb/Bang_and_Olufsen/Bang_and_Olufsen_EZ2.xml
resources/devicedb/Boxee.xml
resources/devicedb/BridgeCo_Firmware_based.xml
resources/devicedb/BridgeCo_Generic.xml
resources/devicedb/Buffalo/Buffalo_LT-H90LAN.xml
resources/devicedb/Buffalo/Buffalo_Link_Theater_(PC-P4LWAG).xml
resources/devicedb/Buffalo/Buffalo_PC-P1LAN.xml
resources/devicedb/Buffalo/Buffalo_PC-P4LAN.xml
resources/devicedb/CTT_DLNA_1.5.xml
resources/devicedb/Cellcom.xml
resources/devicedb/Chorus_DS_Control_Point.xml
resources/devicedb/CyberLink_SoftDMA.xml
resources/devicedb/Cyberlink_Media_Server.xml
resources/devicedb/Cyclone.xml
resources/devicedb/D-Link/D-Link_DSM120.xml
resources/devicedb/D-Link/D-Link_DSM320.xml
resources/devicedb/D-Link/D-Link_DSM510.xml
resources/devicedb/D-Link/D-Link_DSM520.xml
resources/devicedb/DSPG/DSPG_XpndR_DPF_Demo_1.01.xml
resources/devicedb/DSPG/DSPG_XpndR_Phone_Demo_1.01.xml
resources/devicedb/Denon/DENON.xml
resources/devicedb/Denon/DENON_AVR-3808.xml
resources/devicedb/Denon/DENON_AVR-4308.xml
resources/devicedb/Denon/DENON_DNP-720.xml
resources/devicedb/Denon/DENON_S-302.xml
resources/devicedb/Denon/DENON_S-3252.xml
resources/devicedb/DiXiM.xml
resources/devicedb/DirectTV_HD_DVR.xml
resources/devicedb/Freecom_MusicPal.xml
resources/devicedb/Frontier_Jupiter_6.2.xml
resources/devicedb/Generic_DLNA_1.0.xml
resources/devicedb/Generic_Media_Receiver.xml
resources/devicedb/Generic_Music_Only_Receiver.xml
resources/devicedb/Go.Video_D2730.xml
resources/devicedb/Golden_DMC.xml
resources/devicedb/Google_ChromeCast.xml
resources/devicedb/HP_Dream_Screen.xml
resources/devicedb/HP_MediaSmart_TV.xml
resources/devicedb/Homepod.xml
resources/devicedb/IOMegaNAS.xml
resources/devicedb/Intervideo_WinDVD.xml
resources/devicedb/JVC.xml
resources/devicedb/Kenwood_Media_Player.xml
resources/devicedb/KiSS_Player.xml
resources/devicedb/Kodak/Kodak_EX-1011.xml
resources/devicedb/Kodak/Kodak_EX-811.xml
resources/devicedb/LG/LG_Device.xml
resources/devicedb/LPTT_DLNA.xml
resources/devicedb/Lacie/Lacie_GAIABA.xml
resources/devicedb/Lacie/Lacie_LaCinema_HD.xml
resources/devicedb/LinkSys_Media_Link_for_Music.xml
resources/devicedb/Linn/Linn_Bubble_DS_Control_Point.xml
resources/devicedb/Linn/Linn_DS_Music_Player.xml
resources/devicedb/Linn/Linn_Kinsky_Desktop_Control_Point.xml
resources/devicedb/Linn/Linn_Kinsky_PDA_Control_Point.xml
resources/devicedb/Live_Radio_DMR.xml
resources/devicedb/Loewe/Loewe_Multiroom_Receiver.xml
resources/devicedb/Loewe/Loewe_Network_Mediaplayer.xml
resources/devicedb/Marantz/Marantz.xml
resources/devicedb/Marantz/Marantz_DMP.xml
resources/devicedb/Marantz/Marantz_NA_11S1.xml
resources/devicedb/Marantz/Marantz_NA_7004.xml
resources/devicedb/Medion/Medion_IPTV_Box.xml
resources/devicedb/Medion/Medion_WLAN_Internet_Radio.xml
resources/devicedb/Microsoft/WinCE_based_Client.xml
resources/devicedb/Microsoft/Windows_Media_Connect_12.xml
resources/devicedb/Microsoft/Windows_Media_Player.xml
resources/devicedb/Microsoft/Windows_Media_Player_12.xml
resources/devicedb/Microsoft/Windows_System.xml
resources/devicedb/Microsoft/XBOX_360.xml
resources/devicedb/Microsoft/XBOX_One.xml
resources/devicedb/Mitsubishi.xml
resources/devicedb/Momento.xml
resources/devicedb/NOXON_Audio.xml
resources/devicedb/NOXON_iRadio_2.xml
resources/devicedb/Naim_Audio_Streamer.xml
resources/devicedb/Nero_Home.xml
resources/devicedb/Netgear/Netgear_Digital_Entertainer.xml
resources/devicedb/Netgear/Netgear_Digital_Entertainer_9000_Series.xml
resources/devicedb/Netgear/Netgear_EVA_2000.xml
resources/devicedb/Netgear/Netgear_MP101.xml
resources/devicedb/Netgear/Netgear_MP101_RTP.xml
resources/devicedb/Netgear/Netgear_MP115.xml
resources/devicedb/Niles_Audio.xml
resources/devicedb/Nokia/Nokia_Home_Music.xml
resources/devicedb/Nokia/Nokia_N95_Phone.xml
resources/devicedb/Nokia/Nokia_Phone.xml
resources/devicedb/OXX_Alto.xml
resources/devicedb/Onkyo/ONKYO.xml
resources/devicedb/Onkyo/ONKYO_T-4070.xml
resources/devicedb/Orange/Orange_Music_Player.xml
resources/devicedb/Orange/Orange_ODMS_WebUI.xml
resources/devicedb/Oregan_Media_Browser.xml
resources/devicedb/PacketVideo/Core_Player.xml
resources/devicedb/PacketVideo/PV_Player.xml
resources/devicedb/PacketVideo/TwonkyManager.xml
resources/devicedb/PacketVideo/TwonkyPlayer.xml
resources/devicedb/PacketVideo/TwonkyRenderer.xml
resources/devicedb/PacketVideo/Twonky_Aggregation_Server.xml
resources/devicedb/PacketVideo/Twonky_Beam.xml
resources/devicedb/PacketVideo/Twonky_NMC.xml
resources/devicedb/PacketVideo/Twonky_NMC_No_Receiver.xml
resources/devicedb/PacketVideo/Twonky_Portal.xml
resources/devicedb/PacketVideo/Twonky_Server.xml
resources/devicedb/Panasonic/Panasonic_DIGA_Blueray_player.xml
resources/devicedb/Panasonic/Panasonic_DIGA_Blueray_recorder.xml
resources/devicedb/Panasonic/Panasonic_VIERA.xml
resources/devicedb/Panasonic/Panasonic_recorder.xml
resources/devicedb/Philips/Philips_MCW770.xml
resources/devicedb/Philips/Philips_Music_Player_NP1100.xml
resources/devicedb/Philips/Philips_Music_Player_NP2x00.xml
resources/devicedb/Philips/Philips_Renderer_2012TV.xml
resources/devicedb/Philips/Philips_Renderer_TV.xml
resources/devicedb/Philips/Philips_SL300i.xml
resources/devicedb/Philips/Philips_SL400i.xml
resources/devicedb/Philips/Philips_SL50i.xml
resources/devicedb/Philips/Philips_SLA5500.xml
resources/devicedb/Philips/Philips_SLA5520.xml
resources/devicedb/Philips/Philips_Streamium_AV.xml
resources/devicedb/Philips/Philips_Streamium_Audio.xml
resources/devicedb/Philips/Philips_Streamium_MCi730.xml
resources/devicedb/Philips/Philips_Streamium_NP2500.xml
resources/devicedb/Philips/Philips_Streamium_NP2900.xml
resources/devicedb/Philips/Philips_Streamium_NP3700.xml
resources/devicedb/Philips/Philips_Streamium_WAC7500.xml
resources/devicedb/Philips/Philips_Streamium_WAS6050.xml
resources/devicedb/Philips/Philips_Streamium_WAS7500.xml
resources/devicedb/Philips/Philips_TV.xml
resources/devicedb/Philips/Philips_Wireless_HiFi_Speaker.xml
resources/devicedb/Pioneer/Pioneer.xml
resources/devicedb/Pioneer/Pioneer_DMP.xml
resources/devicedb/PlugPlayer.xml
resources/devicedb/Pure/PURE_Avanti_Flow.xml
resources/devicedb/Pure/PURE_Contour.xml
resources/devicedb/Pure/PURE_EVOKE_Flow.xml
resources/devicedb/Pure/PURE_ONE_Flow.xml
resources/devicedb/Pure/PURE_Oasis_Flow.xml
resources/devicedb/Pure/PURE_Sensia.xml
resources/devicedb/Pure/PURE_Siesta_Flow.xml
resources/devicedb/Pure/PURE_Sirocco_550.xml
resources/devicedb/Roku_DVP.xml
resources/devicedb/Roku_Soundbridge.xml
resources/devicedb/Rudeo_Play_&_Control.xml
resources/devicedb/SMC_EZ-Stream.xml
resources/devicedb/Sagem/SAGEM_My_Dual_Radio_700.xml
resources/devicedb/Sagem/SAGEM_My_Web_Tuner_500.xml
resources/devicedb/Samsung/Samsung_BD_DMR.xml
resources/devicedb/Samsung/Samsung_Generic_DMR.xml
resources/devicedb/Samsung/Samsung_Phone.xml
resources/devicedb/Samsung/Samsung_Photo_Player.xml
resources/devicedb/Samsung/Samsung_Smart_TV.xml
resources/devicedb/Samsung/Samsung_Smart_TV_F.xml
resources/devicedb/Samsung/Samsung_Smart_TV_H.xml
resources/devicedb/Samsung/Samsung_Smart_TV_J.xml
resources/devicedb/Samsung/Samsung_TV.xml
resources/devicedb/Sharp/Sharp_BD_Recorder.xml
resources/devicedb/Sharp_AQUOS_TV.xml
resources/devicedb/Siemens_M740_AV.xml
resources/devicedb/Sky_Perfect_GenericSTB.xml
resources/devicedb/Sky_Perfect_SP-HR200H.xml
resources/devicedb/Songbook_DS_Control_Point.xml
resources/devicedb/Sonos.xml
resources/devicedb/Sony/PS3.xml
resources/devicedb/Sony/PSP.xml
resources/devicedb/Sony/SonyMarketing_MoviePlayer_for_CATV.xml
resources/devicedb/Sony/Sony_AV_Receiver.xml
resources/devicedb/Sony/Sony_BDZ-ETxxxx.xml
resources/devicedb/Sony/Sony_Blu-Ray_Home_Theater.xml
resources/devicedb/Sony/Sony_Blu-Ray_Player.xml
resources/devicedb/Sony/Sony_Bravia.xml
resources/devicedb/Sony/Sony_CPF-IX001.xml
resources/devicedb/Sony/Sony_KDL-26J3000.xml
resources/devicedb/Sony/Sony_MR100.xml
resources/devicedb/Sony/Sony_NAS-CZ1.xml
resources/devicedb/Sony/Sony_NAS-Z200.xml
resources/devicedb/Sony/Sony_Nasne.xml
resources/devicedb/Sony/Sony_NetJuke.xml
resources/devicedb/Sony/Sony_Network_Media_Receiver.xml
resources/devicedb/Sony/Sony_STB.xml
resources/devicedb/Sony/Sony_VGF-CP1_frame.xml
resources/devicedb/Sony/Sony_VGF-WA1.xml
resources/devicedb/Syabas_Firmware_based.xml
resources/devicedb/TA_music_player.xml
resources/devicedb/TEAC/TEAC_WAP-4500.xml
resources/devicedb/TEAC/TEAC_WAP-8500.xml
resources/devicedb/TG100.xml
resources/devicedb/TechniSat_InternetRadio.xml
resources/devicedb/Thomson_DLNA_DMR.xml
resources/devicedb/Toshiba_Regza_TV.xml
resources/devicedb/Twonky_NDS_STB.xml
resources/devicedb/U-Verse.xml
resources/devicedb/UPC_Horizon.xml
resources/devicedb/UPnP_Inspector.xml
resources/devicedb/UPnP_Testtool.xml
resources/devicedb/Ubicom Digital Photo Frame.xml
resources/devicedb/WAP-5000.xml
resources/devicedb/WAS7000.xml
resources/devicedb/WD/WD_Guru.xml
resources/devicedb/WD/WD_TV_C3H.xml
resources/devicedb/WD/WD_TV_HD_Live_Media_Player.xml
resources/devicedb/WD/WD_TV_Live.xml
resources/devicedb/WD/WD_TV_Live_Hub.xml
resources/devicedb/WD/WD_TV_Live_Plus.xml
resources/devicedb/WD/WD_TV_Play.xml
resources/devicedb/XBMC.xml
resources/devicedb/Xstream_Player.xml
resources/devicedb/Yamaha/YAMAHA_DMC.xml
resources/devicedb/Yamaha/YAMAHA_Network_Receiver.xml
resources/devicedb/Yamaha/YAMAHA_RXV473.xml
resources/devicedb/Ziova_CS505_510.xml
resources/devicedb/Zyxel_DMA___Dixim_DMA.xml
resources/devicedb/default.xml
resources/devicedb/o2_Joggler.xml
resources/devicedb/omnifi_DMS1.xml
resources/devicedb/sMedio.xml
resources/devicedescription-custom-settings.txt
resources/devicedescription-dlna-1-0.xml
.xml
resources/devicedescription-dlna-1-5.xml
.xml
resources/devicedescription-no-wmdrm.xml
.xml
resources/devicedescription-playon.xml
.xml
resources/devicedescription-redsonic.xml
.xml
resources/devicedescription-tmm.xml
.xml
resources/devicedescription-wd-live.xml
.xml
resources/devicedescription-win7.xml
.xml
resources/devicedescription-xbox.xml
.xml
resources/devicedescription-yamaha.xml
.xml
resources/devprot.xml
.xml
resources/dtcpupload.htm
.html
resources/filescanner-extended-formats.txt
resources/nmc.html
.js
resources/nocover_audio.jpg
.jpg
resources/nocover_container.jpg
.jpg
resources/nocover_photo.jpg
.jpg
resources/nocover_video.jpg
.jpg
resources/protocolinfo.xml
resources/roku/activation/Med/icon_rokudevice.png
.png
resources/roku/activation/cancel.html
.html .js polyglot
resources/roku/activation/enter.html
.html .js polyglot
resources/roku/activation/failure.html
.html .js polyglot
resources/roku/activation/iOS/3G/icon_rokudevice.png
.png
resources/roku/activation/iOS/4G/icon_rokudevice.png
.png
resources/roku/activation/page2.html
.html .js polyglot
resources/roku/activation/roku.css
resources/roku/activation/success.html
.html .js polyglot
resources/strings-chs.txt
resources/strings-cht.txt
resources/strings-de.txt
resources/strings-en.txt
resources/strings-es.txt
resources/strings-fi.txt
resources/strings-fr.txt
resources/strings-he.txt
resources/strings-it.txt
resources/strings-jp.txt
resources/strings-ko.txt
resources/strings-nl.txt
resources/strings-ru.txt
resources/transcoding.db
resources/twonky.ico
resources/twonkyicon-120x120.jpg
.jpg
resources/twonkyicon-120x120.png
.png
resources/twonkyicon-48x48.jpg
.jpg
resources/twonkyicon-48x48.png
.png
resources/views/advanced.view.xml
resources/views/classified.view.xml
resources/views/flat.view.xml
resources/views/folder.view.xml
resources/views/ipodlike.view.xml
resources/views/mobile.view.xml
resources/views/simple.view.xml
resources/views/storage.view.xml
resources/views/view-definitions.xml
resources/webbrowse/ani_spinner_40black.gif
.gif
resources/webbrowse/base64.js
.js
resources/webbrowse/bg_color_grey.gif
.gif
resources/webbrowse/bg_diag_blue_10.gif
.gif
resources/webbrowse/bg_diag_grey_10.gif
.gif
resources/webbrowse/bg_diag_grey_5.gif
.gif
resources/webbrowse/bg_diagline.gif
.gif
resources/webbrowse/bg_diagpattern.gif
.gif
resources/webbrowse/browse.js
.js
resources/webbrowse/btn_sprite.png
.png
resources/webbrowse/btn_sprite_lg.png
.png
resources/webbrowse/btn_sprite_md.png
.png
resources/webbrowse/common.css
resources/webbrowse/convert-readme.txt
resources/webbrowse/favicon.ico
resources/webbrowse/fonts/mavenpro-bold-webfont.eot
resources/webbrowse/fonts/mavenpro-bold-webfont.svg
.xml
resources/webbrowse/fonts/mavenpro-bold-webfont.ttf
resources/webbrowse/fonts/mavenpro-bold-webfont.woff
resources/webbrowse/fonts/mavenpro-regular-webfont.eot
resources/webbrowse/fonts/mavenpro-regular-webfont.svg
.xml
resources/webbrowse/fonts/mavenpro-regular-webfont.ttf
resources/webbrowse/fonts/mavenpro-regular-webfont.woff
resources/webbrowse/footer_logo.png
.png
resources/webbrowse/gen_folder_music_110.png
.png
resources/webbrowse/gen_folder_photo.png
.png
resources/webbrowse/gen_folder_video.png
.png
resources/webbrowse/gen_music_40.png
.png
resources/webbrowse/gen_photo_100.png
.png
resources/webbrowse/gen_video_100.png
.png
resources/webbrowse/ico_arrow_topnav.gif
.gif
resources/webbrowse/ico_beam_button.png
.png
resources/webbrowse/ico_folder.png
.png
resources/webbrowse/ico_social.png
.png
resources/webbrowse/ico_sprite_footer.png
.png
resources/webbrowse/ico_upFolder.png
.png
resources/webbrowse/ie8_onload.js
resources/webbrowse/index.htm
.html
resources/webbrowse/indexFooter.htm
resources/webbrowse/jPlayer/Jplayer.swf
resources/webbrowse/jPlayer/jplayer.playlist.min.js
.js
resources/webbrowse/jPlayer/jquery.jplayer.min.js
.js
resources/webbrowse/jPlayer/skin/jplayer.blue.monday.css
resources/webbrowse/jPlayer/skin/jplayer.blue.monday.jpg
.jpg
resources/webbrowse/jPlayer/skin/jplayer.blue.monday.seeking.gif
.gif
resources/webbrowse/jPlayer/skin/jplayer.blue.monday.video.play.png
.png
resources/webbrowse/jPlayer/skin/ts_jplayer_close.png
.png
resources/webbrowse/jPlayer/skin/ts_jplayer_sprite.png
.png
resources/webbrowse/jPlayerPlayList.htm
resources/webbrowse/jPlayerVideo.htm
resources/webbrowse/jquery-1.10.2.min.js
.js
resources/webbrowse/loading_icon.gif
.gif
resources/webbrowse/localDevice.js
.js
resources/webbrowse/logo_TwonkyServer.png
.png
resources/webbrowse/logo_twonky.png
.png
resources/webbrowse/new.css
resources/webbrowse/newCustomized.css
resources/webbrowse/nocover_audio.jpg
.jpg
resources/webbrowse/nocover_photo.jpg
.jpg
resources/webbrowse/nocover_video.jpg
.jpg
resources/webbrowse/photoBox.htm
resources/webbrowse/r_loading.gif
.gif
resources/webbrowse/renderer-nav.htm
resources/webbrowse/renderer.js
.js
resources/webbrowse/reset.css
resources/webbrowse/server-login.htm
resources/webbrowse/servers-nav.htm
resources/webbrowse/spacer.gif
.gif
resources/webbrowse/sprite-icon-list-play.png
.png
resources/webbrowse/ts_jplayer_close.png
.png
resources/webbrowse/ts_jplayer_sprite.png
.png
resources/webbrowse/ts_jplayer_sprite2.png
.png
resources/webbrowse/webbeam/beam.js
.js
resources/webbrowse/webbeam/main.js
.js
resources/webbrowse/webbeam/ui/application.html
.html
resources/webbrowse/webbeam/ui/css/button.css
resources/webbrowse/webbeam/ui/css/jquery.mobile-1.1.0.min.css
resources/webbrowse/webbeam/ui/css/pc_controlbar.css
resources/webbrowse/webbeam/ui/css/phone_button.css
resources/webbrowse/webbeam/ui/css/phone_controlbar.css
resources/webbrowse/webbeam/ui/res/TBBSprite_big.png
.png
resources/webbrowse/webbeam/ui/res/TBBSprite_normal.png
.png
resources/webbrowse/webbeam/ui/res/TBBSprite_small.png
.png
resources/webbrowse/webbeam/ui/res/ani_spinner_40black.gif
.gif
resources/webbrowse/webbeam/ui/res/appleTV.png
.png
resources/webbrowse/webbeam/ui/res/background_dialogue_panel.png
.png
resources/webbrowse/webbeam/ui/res/background_player_bar.png
.png
resources/webbrowse/webbeam/ui/res/beampromo_graphic.png
.png
resources/webbrowse/webbeam/ui/res/btn_large.png
.png
resources/webbrowse/webbeam/ui/res/btn_medium.png
.png
resources/webbrowse/webbeam/ui/res/btn_sprite_lg.png
.png
resources/webbrowse/webbeam/ui/res/btn_sprite_md.png
.png
resources/webbrowse/webbeam/ui/res/btn_sprite_md_confirm.png
.png
resources/webbrowse/webbeam/ui/res/checkmark_icon.png
.png
resources/webbrowse/webbeam/ui/res/close_icon_active.png
.png
resources/webbrowse/webbeam/ui/res/close_icon_pressed.png
.png
resources/webbrowse/webbeam/ui/res/collapse_button_active.png
.png
resources/webbrowse/webbeam/ui/res/collapse_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/collapse_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/collapse_icon_sprite.png
.png
resources/webbrowse/webbeam/ui/res/connectedplayer_graphic.png
.png
resources/webbrowse/webbeam/ui/res/defaultImage.png
.png
resources/webbrowse/webbeam/ui/res/device_button_active.png
.png
resources/webbrowse/webbeam/ui/res/device_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/device_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/device_generic_tv.png
.png
resources/webbrowse/webbeam/ui/res/error_icon.png
.png
resources/webbrowse/webbeam/ui/res/expand_button_active.png
.png
resources/webbrowse/webbeam/ui/res/expand_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/expand_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/expand_icon_sprite.png
.png
resources/webbrowse/webbeam/ui/res/ff_button_active.png
.png
resources/webbrowse/webbeam/ui/res/ff_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/ff_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/ff_icon.png
.png
resources/webbrowse/webbeam/ui/res/hide_active.png
.png
resources/webbrowse/webbeam/ui/res/hide_icon.png
.png
resources/webbrowse/webbeam/ui/res/hide_pressed.png
.png
resources/webbrowse/webbeam/ui/res/ico_caution.gif
.gif
resources/webbrowse/webbeam/ui/res/ico_checkmark.gif
.gif
resources/webbrowse/webbeam/ui/res/loading_icon.gif
.gif
resources/webbrowse/webbeam/ui/res/logo_bar.png
.png
resources/webbrowse/webbeam/ui/res/logo_bar_min.png
.png
resources/webbrowse/webbeam/ui/res/logo_bar_small.png
.png
resources/webbrowse/webbeam/ui/res/loremipsum.png
.png
resources/webbrowse/webbeam/ui/res/loremipsum_m.png
.png
resources/webbrowse/webbeam/ui/res/loremipsum_xl.png
.png
resources/webbrowse/webbeam/ui/res/mediaType_default_video.png
.png
resources/webbrowse/webbeam/ui/res/missingX_icon.png
.png
resources/webbrowse/webbeam/ui/res/mute_button_sprite.png
.png
resources/webbrowse/webbeam/ui/res/mute_icon_active.png
.png
resources/webbrowse/webbeam/ui/res/mute_icon_pressed.png
.png
resources/webbrowse/webbeam/ui/res/networkconnection_graphic.png
.png
resources/webbrowse/webbeam/ui/res/next_button_active.png
.png
resources/webbrowse/webbeam/ui/res/next_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/next_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/next_button_sprite.png
.png
resources/webbrowse/webbeam/ui/res/pause_button_active.png
.png
resources/webbrowse/webbeam/ui/res/pause_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/pause_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/pause_button_sprite.png
.png
resources/webbrowse/webbeam/ui/res/pause_icon.png
.png
resources/webbrowse/webbeam/ui/res/phone/checkmark_icon.png
.png
resources/webbrowse/webbeam/ui/res/phone/error_icon.png
.png
resources/webbrowse/webbeam/ui/res/phone/logo_bar.png
.png
resources/webbrowse/webbeam/ui/res/phone/missingX_icon.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_close.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_max.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_max_new.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_min.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_min_new.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_next.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_pause.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_play.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_playerlist.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_previous.png
.png
resources/webbrowse/webbeam/ui/res/phone/sprite_stop.png
.png
resources/webbrowse/webbeam/ui/res/phone/watermark_twonky_icon.png
.png
resources/webbrowse/webbeam/ui/res/play_button_active.png
.png
resources/webbrowse/webbeam/ui/res/play_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/play_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/play_button_sprite.png
.png
resources/webbrowse/webbeam/ui/res/play_icon.png
.png
resources/webbrowse/webbeam/ui/res/popout_button_active.png
.png
resources/webbrowse/webbeam/ui/res/popout_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/popout_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/previous_button_active.png
.png
resources/webbrowse/webbeam/ui/res/previous_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/previous_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/previous_button_sprite.png
.png
resources/webbrowse/webbeam/ui/res/progressbar_background.png
.png
resources/webbrowse/webbeam/ui/res/progressbar_elapsed.png
.png
resources/webbrowse/webbeam/ui/res/rb_icon.png
.png
resources/webbrowse/webbeam/ui/res/rendererSmallLoading.gif
.gif
resources/webbrowse/webbeam/ui/res/renderer_loading.gif
.gif
resources/webbrowse/webbeam/ui/res/renderers_choice_icon.png
.png
resources/webbrowse/webbeam/ui/res/rw_button_active.png
.png
resources/webbrowse/webbeam/ui/res/rw_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/rw_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/samsung.png
.png
resources/webbrowse/webbeam/ui/res/scrubber_icon_active.png
.png
resources/webbrowse/webbeam/ui/res/scrubber_icon_inactive.png
.png
resources/webbrowse/webbeam/ui/res/scrubber_icon_pressed.png
.png
resources/webbrowse/webbeam/ui/res/show_active.png
.png
resources/webbrowse/webbeam/ui/res/show_pressed.png
.png
resources/webbrowse/webbeam/ui/res/spinnerTransparentBGBlack.gif
.gif
resources/webbrowse/webbeam/ui/res/sprite_hide-zh.png
.png
resources/webbrowse/webbeam/ui/res/sprite_hide.png
.png
resources/webbrowse/webbeam/ui/res/sprite_show-zh.png
.png
resources/webbrowse/webbeam/ui/res/sprite_show.png
.png
resources/webbrowse/webbeam/ui/res/stop_button_active.png
.png
resources/webbrowse/webbeam/ui/res/stop_button_inactive.png
.png
resources/webbrowse/webbeam/ui/res/stop_button_pressed.png
.png
resources/webbrowse/webbeam/ui/res/stop_button_sprite.png
.png
resources/webbrowse/webbeam/ui/res/stop_icon.png
.png
resources/webbrowse/webbeam/ui/res/twonky7_graphic.png
.png
resources/webbrowse/webbeam/ui/res/volume-thumb.png
.png
resources/webbrowse/webbeam/ui/res/volume_bg.png
.png
resources/webbrowse/webbeam/ui/res/volume_button_sprite.png
.png
resources/webbrowse/webbeam/ui/res/volume_icon.png
.png
resources/webbrowse/webbeam/ui/res/volume_icon_active.png
.png
resources/webbrowse/webbeam/ui/res/volume_icon_pressed.png
.png
resources/webbrowse/webbeam/ui/res/volume_track.png
.png
resources/webbrowse/webbeam/ui/res/watermark_twonky_icon.png
.png
resources/webbrowse/webbeam/ui/res/wdtvlive.png
.png
resources/webbrowse/webbeam/ui/tpl/advertisementTemplate.html
resources/webbrowse/webbeam/ui/tpl/beamingWarningTemplate.html
resources/webbrowse/webbeam/ui/tpl/firstTimeTemplate.html
resources/webbrowse/webbeam/ui/tpl/mediaInfoTemplate.html
resources/webbrowse/webbeam/ui/tpl/minimizedControlTemplate.html
resources/webbrowse/webbeam/ui/tpl/notificationTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/advertisementTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/beamingWarningTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/firstTimeTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/mediaInfoTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/minimizedControlTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/notificationTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/playerControlTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/playerSelectionTemplate.html
resources/webbrowse/webbeam/ui/tpl/phone/requirementsCheckTemplate.html
resources/webbrowse/webbeam/ui/tpl/playerControlTemplate.html
resources/webbrowse/webbeam/ui/tpl/playerSelectionTemplate.html
resources/webbrowse/webbeam/ui/tpl/requirementsCheckTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/advertisementTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/beamingWarningTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/firstTimeTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/mediaInfoTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/minimizedControlTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/notificationTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/playerControlTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/playerSelectionTemplate.html
resources/webbrowse/webbeam/ui/tpl/tablet/requirementsCheckTemplate.html
resources/webbrowse/webfont.css
resources/webconfig/advanced.htm
resources/webconfig/aggregation.htm
resources/webconfig/ani_spinner_40black.gif
.gif
resources/webconfig/arrow_hide.png
.png
resources/webconfig/arrow_show.png
.png
resources/webconfig/base64.js
.js
resources/webconfig/bg_color_grey.gif
.gif
resources/webconfig/bg_diag_blue_10.gif
.gif
resources/webconfig/bg_diag_grey_10.gif
.gif
resources/webconfig/bg_diag_grey_5.gif
.gif
resources/webconfig/bg_diagline.gif
.gif
resources/webconfig/bg_diagpattern.gif
.gif
resources/webconfig/browse-nav.htm
resources/webconfig/btn_sprite.png
.png
resources/webconfig/btn_sprite_blue_lg.png
.png
resources/webconfig/btn_sprite_blue_md.png
.png
resources/webconfig/btn_sprite_blue_sm.png
.png
resources/webconfig/btn_sprite_lg.png
.png
resources/webconfig/btn_sprite_md.png
.png
resources/webconfig/common.css
resources/webconfig/config.js
.js
resources/webconfig/convert-readme.txt
resources/webconfig/ellipsis.xml
.xml
resources/webconfig/favicon.ico
resources/webconfig/fonts/mavenpro-bold-webfont.eot
resources/webconfig/fonts/mavenpro-bold-webfont.svg
.xml
resources/webconfig/fonts/mavenpro-bold-webfont.ttf
resources/webconfig/fonts/mavenpro-bold-webfont.woff
resources/webconfig/fonts/mavenpro-regular-webfont.eot
resources/webconfig/fonts/mavenpro-regular-webfont.svg
.xml
resources/webconfig/fonts/mavenpro-regular-webfont.ttf
resources/webconfig/fonts/mavenpro-regular-webfont.woff
resources/webconfig/footer_logo.png
.png
resources/webconfig/gen_folder_music_110.png
.png
resources/webconfig/gen_folder_photo.png
.png
resources/webconfig/gen_folder_video.png
.png
resources/webconfig/gen_music_40.png
.png
resources/webconfig/gen_photo_100.png
.png
resources/webconfig/gen_video_100.png
.png
resources/webconfig/ico_arrow_topnav.gif
.gif
resources/webconfig/ico_beam_button.png
.png
resources/webconfig/ico_folder.png
.png
resources/webconfig/ico_social.png
.png
resources/webconfig/ico_sprite_footer.png
.png
resources/webconfig/ico_upFolder.png
.png
resources/webconfig/index.htm
.html .js polyglot
resources/webconfig/indexFooter.htm
resources/webconfig/jquery-1.5.1.min.js
.js
resources/webconfig/jquery.ba-bbq.min.js
.js
resources/webconfig/loading_icon.gif
.gif
resources/webconfig/logo_TwonkyServer.png
.png
resources/webconfig/logo_twonky.png
.png
resources/webconfig/multi_user_support.htm
resources/webconfig/new.css
resources/webconfig/newCustomized.css
resources/webconfig/reset.css
resources/webconfig/settings-nav.htm
resources/webconfig/setup.htm
resources/webconfig/setupLanguage.htm
resources/webconfig/sharing.htm
resources/webconfig/spacer.gif
.gif
resources/webconfig/status.htm
resources/webconfig/styles.css
resources/webconfig/webfont.css
resources/wmdrm-trouble.htm
.html
rmm.exe
.exe windows:4 windows x86 arch:x86

80a01af0d320ae7cb88009426585798b

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b0:70:7d:bf:5f:33:9c:b8:00:4c:3c:a7:92:ad:87:62:18:ae:68:22
Signer

Actual PE Digest

b0:70:7d:bf:5f:33:9c:b8:00:4c:3c:a7:92:ad:87:62:18:ae:68:22

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\workspace\ondemand\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\release\rmm.pdb

Imports

ws2_32

setsockopt
getsockopt
ntohs
WSAGetLastError
htonl
shutdown
getsockname
socket
closesocket
inet_addr
connect
htons
select
ioctlsocket
gethostname
bind
sendto
listen
accept
inet_ntoa
gethostbyname
send
recv
recvfrom
getpeername
WSAStartup
ntohl
WSACleanup

kernel32

GetCPInfo
GetEnvironmentStringsW
Process32FirstW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetLastError
Process32NextW
GetDriveTypeA
GetLogicalDrives
CreateFileA
CloseHandle
CreateToolhelp32Snapshot
OutputDebugStringW
GetACP
GetOEMCP
GetVersionExW
DeviceIoControl
FreeEnvironmentStringsW
GetProcessHeap
lstrlenA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCurrentDirectoryA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LCMapStringW
LCMapStringA
RaiseException
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
SetStdHandle
LocalFileTimeToFileTime
SetFileTime
CreatePipe
GetFileAttributesA
HeapSize
LocalFree
FormatMessageW
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
TerminateThread
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreW
ReleaseSemaphore
SetThreadPriority
OpenProcess
GetCurrentProcessId
GetSystemInfo
GetModuleHandleW
MultiByteToWideChar
SystemTimeToFileTime
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
MoveFileW
FindClose
GetDiskFreeSpaceExA
CreateFileW
FindNextFileW
FindFirstFileW
InterlockedDecrement
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetConsoleCtrlHandler
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
SetHandleCount
WideCharToMultiByte
GetTimeZoneInformation
HeapReAlloc
ExitThread
CreateThread
CreateProcessA
DuplicateHandle
GetCurrentProcess
GetFileType
SetFilePointer
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetFullPathNameW
RtlUnwind
GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetStdHandle
GetModuleFileNameA
LoadLibraryA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsValidCodePage

user32

TranslateMessage
LoadImageW
GetSystemMetrics
DefWindowProcW
LoadCursorW
DispatchMessageW
RegisterClassExW
PostQuitMessage
CreateWindowExW
GetMessageW
UnregisterDeviceNotification
BroadcastSystemMessageW
RegisterDeviceNotificationW
RegisterWindowMessageW
LoadIconW

gdi32

GetStockObject

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo
SendARP

shlwapi

StrRetToBufW

advapi32

RegCloseKey
RegOpenKeyExW
CloseServiceHandle
EnumServicesStatusExW
OpenSCManagerW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
RegQueryValueExW

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHBindToParent

ole32

CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitialize
CoSetProxyBlanket
CoInitializeEx

oleaut32

SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 706KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
twonky-readme-ref-files/pv_logo_png_126x64.png
.png
twonky-readme-ref-files/twonky_logo_186x64.png
.png
twonkyserver-default.ini
twonkyserver.exe
.exe windows:4 windows x86 arch:x86

eb4cce0e17bf787727f6b790da8a5070

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

86:6e:db:db:67:d5:47:0a:98:e9:8f:65:f9:76:b6:5d:f3:d5:cc:4a
Signer

Actual PE Digest

86:6e:db:db:67:d5:47:0a:98:e9:8f:65:f9:76:b6:5d:f3:d5:cc:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\workspace\ondemand\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\release\twonkyserver.pdb

Imports

ws2_32

gethostbyname
inet_ntoa
accept
send
sendto
bind
recv
getpeername
listen
gethostname
ioctlsocket
select
htons
connect
socket
getsockname
ntohs
setsockopt
getsockopt
ntohl
WSAGetLastError
WSAStartup
recvfrom
closesocket
shutdown
inet_addr
htonl
WSACleanup

kernel32

HeapSize
GetFileAttributesA
CreatePipe
RaiseException
LCMapStringA
WideCharToMultiByte
GetCommandLineW
LocalFree
LCMapStringW
GetStringTypeA
WriteConsoleW
GetConsoleCP
lstrlenA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCurrentDirectoryA
CreateFileA
GetLocaleInfoA
OutputDebugStringW
GetDriveTypeA
GetLogicalDriveStringsA
Sleep
SwitchToThread
GetCurrentThreadId
CloseHandle
GetExitCodeThread
GetLastError
TerminateThread
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetProcAddress
GetModuleHandleA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreW
ReleaseSemaphore
SetThreadPriority
FormatMessageW
MultiByteToWideChar
SystemTimeToFileTime
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
MoveFileW
FindClose
GetDiskFreeSpaceExA
CreateFileW
ReadDirectoryChangesW
FindNextFileW
FindFirstFileW
OpenProcess
GetCurrentProcessId
GetVersionExW
GetSystemInfo
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
SetConsoleCtrlHandler
ExitThread
CreateThread
ExitProcess
GetFileType
SetFilePointer
ReadFile
WriteFile
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
GetFullPathNameW
HeapReAlloc
GetTimeZoneInformation
CreateProcessA
DuplicateHandle
GetCurrentProcess
GetLocalTime
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetFileTime
LocalFileTimeToFileTime
SetStdHandle
SetEndOfFile
WriteConsoleA
GetStringTypeW

shell32

SHGetSpecialFolderLocation
SHBindToParent
CommandLineToArgvW
SHGetMalloc

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo
SendARP

shlwapi

StrRetToBufW

user32

FindWindowW
EndTask

advapi32

RegCloseKey
RegOpenKeyExW
CloseServiceHandle
EnumServicesStatusExW
OpenSCManagerW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
RegQueryValueExW

ole32

CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitialize
CoSetProxyBlanket
CoInitializeEx

oleaut32

SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 454KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 855KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
twonkystarter.exe
.exe windows:4 windows x86 arch:x86

aa7de1e5a2d7ccf5604bdfe4251fd89d

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

82:2b:64:ef:84:e3:1d:90:42:a1:97:2a:ed:ea:dd:46:5d:55:fc:e2
Signer

Actual PE Digest

82:2b:64:ef:84:e3:1d:90:42:a1:97:2a:ed:ea:dd:46:5d:55:fc:e2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\workspace\ondemand\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\release\twonkyserverwatchdog.pdb

Imports

ws2_32

htonl
ntohl
WSAGetLastError
closesocket
getsockopt
setsockopt
ntohs
getsockname
WSACleanup
WSAStartup
gethostbyname
send
connect
select
ioctlsocket
htons
shutdown
gethostname
bind
sendto
listen
accept
inet_ntoa
recvfrom
getpeername
recv
socket
inet_addr

kernel32

CreateThread
GetCurrentDirectoryA
GetModuleFileNameW
LocalFree
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
CreateFileA
RaiseException
GetCommandLineW
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
TerminateProcess
GetExitCodeProcess
OpenProcess
CloseHandle
GetLastError
CreateProcessW
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrlenA
CreatePipe
GetFileAttributesA
HeapSize
VirtualAlloc
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
SetStdHandle
LocalFileTimeToFileTime
SetFileTime
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
GetDriveTypeA
SystemTimeToFileTime
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
MoveFileW
FindClose
GetDiskFreeSpaceExA
CreateFileW
FindNextFileW
FindFirstFileW
MultiByteToWideChar
GetCurrentProcessId
GetVersionExW
GetSystemInfo
GetProcAddress
GetModuleHandleW
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
TerminateThread
WaitForSingleObject
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreW
ReleaseSemaphore
SetThreadPriority
FormatMessageW
OutputDebugStringW
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
ExitThread
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetFileType
SetFilePointer
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
CreateProcessA
DuplicateHandle
GetCurrentProcess
GetTimeZoneInformation
GetFullPathNameW
GetLocalTime
RtlUnwind
SetConsoleCtrlHandler
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetStdHandle
GetModuleFileNameA

user32

EndTask
RegisterClassExW
TranslateMessage
wsprintfW
DefWindowProcW
FindWindowW
DispatchMessageW
CreateWindowExW
GetMessageW
LoadImageW
GetSystemMetrics
LoadCursorW
LoadIconW

gdi32

GetStockObject

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
EnumServicesStatusExW
RegisterServiceCtrlHandlerExW
ControlService
OpenServiceW
StartServiceCtrlDispatcherW
OpenSCManagerW
SetServiceStatus
DeleteService
StartServiceW
CloseServiceHandle
CreateServiceW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHBindToParent
SHGetMalloc
SHGetSpecialFolderLocation
CommandLineToArgvW

shlwapi

StrRetToBufW

iphlpapi

GetAdaptersInfo
SendARP
GetAdaptersAddresses

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoInitialize
CoSetProxyBlanket

oleaut32

SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 717KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
twonkytray.exe
.exe windows:4 windows x86 arch:x86

3fd56aab03171e805cab5b6d9ba54bdf

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

21/11/2014, 21:38

Not After

08/01/2018, 18:52

Subject

CN=PacketVideo Corporation,O=PacketVideo Corporation,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f2:41:8a:c0:65:87:28:7a:23:aa:b4:e6:e8:a0:1f:56:6c:f3:13:ea
Signer

Actual PE Digest

f2:41:8a:c0:65:87:28:7a:23:aa:b4:e6:e8:a0:1f:56:6c:f3:13:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\workspace\ondemand\dlna\twonky\projects\packetvideo\win32\vs-2005\pv\release\twonkyserverconfig.pdb

Imports

ws2_32

htonl
inet_addr
ntohl
WSAGetLastError
getsockopt
setsockopt
ntohs
getsockname
select
ioctlsocket
gethostname
bind
sendto
listen
accept
inet_ntoa
recvfrom
getpeername
shutdown
WSACleanup
recv
socket
closesocket
htons
connect
send
gethostbyname
WSAStartup

kernel32

OpenProcess
GetExitCodeProcess
TerminateProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetCommandLineW
GetVersionExW
GetModuleFileNameW
CreateThread
CloseHandle
GetLastError
CreateProcessW
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
lstrlenA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetCurrentDirectoryA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
CreateFileA
LCMapStringW
LCMapStringA
RaiseException
CreatePipe
GetFileAttributesA
HeapSize
VirtualAlloc
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
SetStdHandle
LocalFileTimeToFileTime
SetFileTime
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualFree
HeapReAlloc
CreateProcessA
DuplicateHandle
GetCurrentProcess
DeleteCriticalSection
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
SetConsoleCtrlHandler
GetModuleFileNameA
GetStdHandle
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetLocalTime
GetTimeZoneInformation
GetDriveTypeA
SystemTimeToFileTime
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
MoveFileW
FindClose
GetDiskFreeSpaceExA
CreateFileW
FindNextFileW
FindFirstFileW
MultiByteToWideChar
GetCurrentProcessId
GetSystemInfo
GetProcAddress
GetModuleHandleW
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
TerminateThread
WaitForSingleObject
GetModuleHandleA
InitializeCriticalSection
WriteFile
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreW
ReleaseSemaphore
SetThreadPriority
OutputDebugStringW
LocalFree
FormatMessageW
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
ExitThread
ResumeThread
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetFileType
SetFilePointer
ReadFile
GetFullPathNameW

user32

EnumChildWindows
GetCursorPos
EndTask
FindWindowW
ShowWindow
GetWindowTextW
SetWindowPos
GetDesktopWindow
SetForegroundWindow
GetSubMenu
GetMenuState
PostMessageW
EnableMenuItem
DispatchMessageW
GetClassNameW
SystemParametersInfoW
SendMessageTimeoutW
EnumWindows
LoadCursorW
GetClientRect
LoadBitmapW
RemoveMenu
ModifyMenuW
CreateWindowExW
DeferWindowPos
MessageBoxW
TranslateMessage
BeginDeferWindowPos
GetMenu
RegisterClassW
IsDialogMessageW
SendMessageW
DestroyWindow
LoadIconW
UpdateWindow
DestroyMenu
LoadMenuW
TrackPopupMenu
GetWindowRect
DefWindowProcW
GetMessageW
CheckMenuItem
PostQuitMessage
EndDeferWindowPos

advapi32

RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CloseServiceHandle
EnumServicesStatusExW
OpenSCManagerW

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHBindToParent
Shell_NotifyIconW
ShellExecuteW

shlwapi

StrRetToBufW

iphlpapi

GetAdaptersInfo
SendARP
GetAdaptersAddresses

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
CoSetProxyBlanket
CoInitializeSecurity

oleaut32

SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 715KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8Certificate

Extended Key Usages

Key Usages

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2cCertificate

Extended Key Usages

Key Usages

f7:06:cb:f6:81:74:58:7f:63:37:1a:8c:db:de:2e:43:3f:73:a1:f1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 409KB

.ndata Size: - Virtual size: 2.2MB

.rsrc Size: 139KB - Virtual size: 138KB

beba03bbad1f8d79d5b3c1359e913e0d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 872B

.rdata Size: 1024B - Virtual size: 824B

.data Size: - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 272B

e26d7460d0c04056b9226a899477ba4d

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 1KB

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 17KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

e981c0ab92cb1f191bb5e23392e14796

Headers

DLL Characteristics

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

11:21:9a:57:4e:df:9c:32:7a:50:2a:3d:15:b5:a3:31:dd:2c
Certificate

f7:06:cb:f6:81:74:58:7f:63:37:1a:8c:db:de:2e:43:3f:73:a1:f1
Signer

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 409KB

.ndata
Size: - Virtual size: 2.2MB

.rsrc
Size: 139KB - Virtual size: 138KB

.text
Size: 1024B - Virtual size: 872B

.rdata
Size: 1024B - Virtual size: 824B

.data
Size: - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 272B

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 729B

.data
Size: - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 352B

.reloc
Size: 512B - Virtual size: 350B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

CODE
Size: 36KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 1020B

BSS
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 1024B - Virtual size: 633B

.reloc
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 3KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 1024B - Virtual size: 572B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 963B