20aa873904ac1d1a696b7566b5374c1803a94879d7e06fa5708ff65537b91adf

Sharing

Copy URL

Twitter E-mail

General

Target

20aa873904ac1d1a696b7566b5374c1803a94879d7e06fa5708ff65537b91adf
Size

14.3MB
MD5

5a37b238f4882474c7f616600d20a3d9
SHA1

655e68c352d10b107f73bf6f6b9989bc69154241
SHA256

20aa873904ac1d1a696b7566b5374c1803a94879d7e06fa5708ff65537b91adf
SHA512

c59e15d125bab02adb087ec345c8a78390116873dd82283b8efc94dec9392a2986b962f63e846c021dbb59e4d3439a01153cfd4b5260e0f9e932966bc3b1884a
SSDEEP

393216:eGMhwzhuuEOxk802xUfSOSyVO8ZLsjEMSSoad2aI5:Rn4uEOK802ifSOZVdAtSSoad6

Score

3^/10

Malware Config

Signatures

Unsigned PE 20 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GoldWave Portable/App/GoldWave/Effect/GWVST.pig
unpack001/GoldWave Portable/App/GoldWave/Effect/GWVSTBridge32.exe
unpack001/GoldWave Portable/App/GoldWave/Effect/GWVSTBridge64.exe
unpack001/GoldWave Portable/App/GoldWave/Effect/directx.pig
unpack001/GoldWave Portable/App/GoldWave/File/FLACFile.pig
unpack001/GoldWave Portable/App/GoldWave/File/LAME_ENC.DLL
unpack001/GoldWave Portable/App/GoldWave/File/OggFile.pig
unpack001/GoldWave Portable/App/GoldWave/File/OpusFile.pig
unpack001/GoldWave Portable/App/GoldWave/File/WMAFile.pig
unpack001/GoldWave Portable/App/GoldWave/GWSpeed64.dll
unpack001/GoldWave Portable/App/GoldWave/Visual/gwbpmcounter.pig
unpack001/GoldWave Portable/App/GoldWave/Visual/gwmpvisual.pig
unpack001/GoldWave Portable/GoldWave Digital Audio Editor.exe
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/UAC.dll
unpack002/$PLUGINSDIR/execDos.dll
unpack002/$PLUGINSDIR/newadvsplash.dll
unpack002/$PLUGINSDIR/newtextreplace.dll
unpack002/$PLUGINSDIR/nsExec.dll
unpack002/$PLUGINSDIR/registry.dll

Files

20aa873904ac1d1a696b7566b5374c1803a94879d7e06fa5708ff65537b91adf
.zip
GoldWave Portable/App/AppInfo/AppIcon.ico
GoldWave Portable/App/AppInfo/AppInfo.ini
GoldWave Portable/App/AppInfo/Launcher/GoldWave Digital Audio Editor.ini
GoldWave Portable/App/DefaultData/GoldWave/GoldWave.xml
GoldWave Portable/App/GoldWave/Effect/GWVST.html
.html
GoldWave Portable/App/GoldWave/Effect/GWVST.pig
.dll windows:6 windows x64 arch:x64

66dad99d3a6b2353946758595a183a37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegConnectRegistryW
RegCreateKeyExW
RegDeleteKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
RegUnLoadKeyW

kernel32

AddVectoredExceptionHandler
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateProcessW
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
EnumCalendarInfoW
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceA
FindResourceW
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCPInfoExW
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetThreadLocale
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MapViewOfFile
MulDiv
MultiByteToWideChar
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SwitchToThread
SystemTimeToFileTime
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
lstrcmpW
lstrlenW
RtlRestoreContext
RtlUnwindEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrintersW
GetDefaultPrinterW
OpenPrinterW

comctl32

FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitializeFlatSB
_TrackMouseEvent

comdlg32

FindTextW

gdi32

AbortDoc
AngleArc
Arc
ArcTo
BitBlt
Chord
CombineRgn
CopyEnhMetaFileW
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateFontIndirectW
CreateHalftonePalette
CreateICW
CreatePalette
CreatePen
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EnumFontFamiliesExW
EnumFontsW
ExcludeClipRect
ExtFloodFill
ExtTextOutW
FrameRgn
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestColor
GetNearestPaletteIndex
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
Pie
PlayEnhMetaFile
PolyBezier
PolyBezierTo
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetRectRgn
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
UnrealizeObject

shell32

SHAppBarMessage
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW

shfolder

SHGetFolderPathW

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextW
CharUpperBuffA
CharUpperBuffW
CharUpperW
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CopyIcon
CopyImage
CreateAcceleratorTableW
CreateIcon
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextExW
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndMenu
EndPaint
EnumChildWindows
EnumDisplayMonitors
EnumThreadWindows
EnumWindows
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassInfoW
GetClassNameW
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgCtrlID
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMonitorInfoW
GetParent
GetPropW
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuItemW
InsertMenuW
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadKeyboardLayoutW
LoadStringW
LockWindowUpdate
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UnregisterDeviceNotification
UpdateWindow
ValidateRect
WaitMessage
WindowFromPoint
GetClassLongPtrW
GetWindowLongPtrW
SetClassLongPtrW
SetWindowLongPtrW
wsprintfA

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
IsEqualGUID
OleInitialize
OleUninitialize

oleaut32

CreateErrorInfo
GetActiveObject
GetErrorInfo
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData
SetErrorInfo
SysAllocString
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
VariantChangeType
VariantClear
VariantCopy
VariantCopyInd
VariantInit

ws2_32

WSACleanup
WSAGetLastError
WSALookupServiceBeginW
WSALookupServiceEnd
WSALookupServiceNextW
WSASetServiceW
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
getsockname
listen
recv
select
send
setsockopt
socket

Exports

Exports

GetEffectInterface
_ZTIN6System5Types5TRectE
_ZTIN6System5Types6TPointE
_ZTR12TimeTextType
_ZTR14TAddFolderForm
_ZTR14TConfigureForm
_ZTR14TSearchingForm
_ZTR14TVSTSearchForm
_ZTR17TVistaFolderFrame
_ZTR18TFormPigEffectPage
_ZTR18TGWButtonStyleHook
_ZTR4TVST
_ZTR9TAutoHint
_ZTR9TNumFrame
_ZTR9TVolFrame
_ZTRN6System3SetIN3Vcl8Controls16Vcl_Controls__52ELS3_0ELS3_2EEE
_ZTRN6System3SetINS_7Classes17System_Classes__1ELS2_0ELS2_10EEE
_ZTRN6System3SetINS_7Uitypes11TAnchorKindELS2_0ELS2_3EEE
_ZTRN6System3SetINS_7Uitypes11TBorderIconELS2_0ELS2_3EEE
_ZTRRKN6System5Types5TRectE
_ZTRRKN6System5Types6TPointE
_ZTRRN6System13UnicodeStringE
_ZTRRN6System5Types5TRectE
_ZTRRN6System7Uitypes12TCloseActionE
_ZTRRN6Winapi8Messages6TWMKeyE
_ZTRRPN3Vcl8Controls11TDragObjectE
_ZTRRPN3Vcl8Controls15TDragDockObjectE
_ZTRRb
_ZTRRi
_ZTRRt
_ZTRRw
_ZTRU9__closurePFbtxRbE
_ZTRU9__closurePFvP6TFaderPN3Vcl8Graphics7TCanvasERKN6System5Types5TRectEE
_ZTRU9__closurePFvPN6System7TObjectEE
_ZTRU9__closurePFvPN6System7TObjectENS_3SetINS_7Classes17System_Classes__1ELS4_0ELS4_10EEERKNS_5Types6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectENS_3SetINS_7Classes17System_Classes__1ELS4_0ELS4_10EEEiRKNS_5Types6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectENS_3SetINS_7Classes17System_Classes__1ELS4_0ELS4_10EEEiiE
_ZTRU9__closurePFvPN6System7TObjectENS_7Uitypes12TMouseButtonENS_3SetINS_7Classes17System_Classes__1ELS6_0ELS6_10EEEiiE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls15TDragDockObjectEiiE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls15TDragDockObjectEiiNS_7Uitypes10TDragStateERbE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls8TControlEPNS3_11TWinControlERbE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls8TControlERNS_5Types5TRectERKNS6_6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectERKNS_5Types6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectERNS_7Uitypes12TCloseActionEE
_ZTRU9__closurePFvPN6System7TObjectERPN3Vcl8Controls11TDragObjectEE
_ZTRU9__closurePFvPN6System7TObjectERPN3Vcl8Controls15TDragDockObjectEE
_ZTRU9__closurePFvPN6System7TObjectERbE
_ZTRU9__closurePFvPN6System7TObjectERiS2_RbE
_ZTRU9__closurePFvPN6System7TObjectERiS2_S2_S2_E
_ZTRU9__closurePFvPN6System7TObjectERtNS_3SetINS_7Classes17System_Classes__1ELS5_0ELS5_10EEEE
_ZTRU9__closurePFvPN6System7TObjectERwE
_ZTRU9__closurePFvPN6System7TObjectES1_iiE
_ZTRU9__closurePFvPN6System7TObjectES1_iiNS_7Uitypes10TDragStateERbE
_ZTRU9__closurePFvRN6System13UnicodeStringERbE
_ZTRU9__closurePFvRN6Winapi8Messages6TWMKeyERbE
__CPPdebugHook
__setRaiseListFuncAddr

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 240KB - Virtual size: 438KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/Effect/GWVSTBridge32.exe
.exe windows:6 windows x86 arch:x86

b8722a9e2e6bd7b550eb53d247d5d27e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MapViewOfFile
MultiByteToWideChar
OpenEventW
OpenFileMappingA
OpenFileMappingW
OpenMutexW
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

user32

DispatchMessageW
EnumThreadWindows
MessageBoxA
PeekMessageW
TranslateMessage
wsprintfA

Exports

Exports

___CPPdebugHook
___setRaiseListFuncAddr

Sections

.text
Size: 129KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/Effect/GWVSTBridge64.exe
.exe windows:6 windows x64 arch:x64

0e6a1422bbe372be429435f3d9a9329d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFileTimeToFileTime
MapViewOfFile
MultiByteToWideChar
OpenEventW
OpenFileMappingW
OpenMutexW
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx

user32

DispatchMessageW
EnumThreadWindows
MessageBoxA
PeekMessageW
TranslateMessage
wsprintfA

Exports

Exports

__CPPdebugHook
__setRaiseListFuncAddr

Sections

.text
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/Effect/directx.html
.html
GoldWave Portable/App/GoldWave/Effect/directx.pig
.dll windows:5 windows x64 arch:x64

50ea8915e17260383c1be4c13cfbbc93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyW
RegEnumValueW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateEventW
CreateFileA
CreateFileW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryW
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
ReleaseSemaphore
RemoveDirectoryA
RemoveVectoredExceptionHandler
ResetEvent
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetEvent
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
SetThreadPriority
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
RtlRestoreContext
RtlUnwindEx

comctl32

ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
InitCommonControls

user32

CreateDialogParamW
DestroyWindow
DialogBoxParamW
DispatchMessageW
EndDialog
EnumThreadWindows
GetClientRect
GetCursor
GetDlgItem
GetQueueStatus
GetWindowRect
IsDialogMessageW
LoadCursorW
LoadIconW
MessageBoxA
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageW
PostThreadMessageW
RegisterWindowMessageW
SendMessageW
SetCursor
SetFocus
SetWindowPos
ShowWindow
wvsprintfW
GetWindowLongPtrW
SetWindowLongPtrW
wsprintfA
wsprintfW

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
timeKillEvent
timeSetEvent

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes

oleaut32

SysAllocString
SysFreeString

Exports

Exports

GetEffectInterface
__CPPdebugHook

Sections

.text
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 88KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/File/FLACFile.pig
.dll windows:6 windows x64 arch:x64

3523a14da226697b672d90bcc07dbaab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx

user32

EnumThreadWindows
MessageBoxA
MessageBoxW
wsprintfA

Exports

Exports

GetAudioInterface
__CPPdebugHook
__setRaiseListFuncAddr

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/File/LAME_ENC.DLL
.dll windows:5 windows x64 arch:x64

7ab61454f7a6536d46a8572e7eb126e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
GetModuleFileNameA
OutputDebugStringA
FormatMessageA
GetThreadLocale
LoadLibraryA
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
SetFilePointer
MultiByteToWideChar
ReadFile
WriteFile
GetStdHandle
HeapSetInformation
HeapCreate
HeapDestroy
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetEndOfFile
GetProcessHeap

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 502KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trace
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/File/OggFile.pig
.dll windows:6 windows x64 arch:x64

c6e0d48c546b6c36f8488bdada1e8fa2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

GetAudioInterface
__CPPdebugHook
__setRaiseListFuncAddr

Sections

.text
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 118KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/File/OpusFile.pig
.dll windows:6 windows x64 arch:x64

c6e0d48c546b6c36f8488bdada1e8fa2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx

user32

EnumThreadWindows
MessageBoxA
wsprintfA

Exports

Exports

GetAudioInterface
__CPPdebugHook
__setRaiseListFuncAddr

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/File/WMAFile.pig
.dll windows:6 windows x64 arch:x64

e58f23dffee32c6bbe520b5f679cf268

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx

user32

EnumThreadWindows
MessageBoxA
wsprintfA

ole32

CoInitialize
CoUninitialize
IsEqualGUID

Exports

Exports

GetAudioInterface
__CPPdebugHook
__setRaiseListFuncAddr

Sections

.text
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 60KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/GWPreset.xml
GoldWave Portable/App/GoldWave/GWSpeed64.dll
.dll windows:5 windows x64 arch:x64

217d508ae7ff48d4a85b07577cd4a75e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetStdHandle
AllocConsole
GetLastError
LocalFree
FormatMessageA
CloseHandle
QueryPerformanceCounter
VirtualQuery
SleepEx
Sleep
GetExitCodeThread
SetEvent
TerminateThread
WaitForSingleObject
TlsSetValue
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
CreateThread
CreateEventA
DuplicateHandle
GetCurrentProcess
DeleteCriticalSection
TlsFree
TlsGetValue
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ResetEvent
SetThreadAffinityMask
GetProcessAffinityMask
TlsAlloc
GetSystemInfo
QueryPerformanceFrequency
SetEnvironmentVariableA
GetEnvironmentVariableA
GetComputerNameA
FlsSetValue
GetCommandLineA
HeapAlloc
HeapFree
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetCurrentProcessId
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
EncodePointer
SetConsoleCtrlHandler
HeapReAlloc
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetTickCount
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
WriteConsoleW
MultiByteToWideChar
CompareStringW
LCMapStringW
GetStringTypeW
CreateFileA
ReadFile
CreateFileW
SetEndOfFile
GetProcessHeap
RaiseException

Exports

Exports

ippiMulCScale_8u_C1IR
ippsCartToPolar_32fc
ippsFFTFree_R_32f
ippsFFTFwd_RToCCS_32f_I
ippsFFTGetBufSize_R_32f
ippsFFTInitAlloc_R_32f
ippsFFTInv_CCSToR_32f_I
ippsFree
ippsLn_32f_I
ippsMagnitude_32fc
ippsMalloc_32f
ippsMalloc_8u
ippsMulC_32f_I
ippsMul_32f
ippsMul_32f_I
ippsPolarToCart_32fc
ippsResamplePolyphaseFixedFree_32f
ippsResamplePolyphaseFixedInitAlloc_32f
ippsResamplePolyphaseFixed_32f
ippsResamplePolyphaseFree_32f
ippsResamplePolyphaseInitAlloc_32f
ippsResamplePolyphase_32f
ippsSet_32f
ippsSub_32f_I
ippsSum_32f
ippsThreshold_LT_32f_I
ippsWinBartlett_32f_I
ippsWinHann_32f_I

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/GoldWave.exe
.exe windows:6 windows x64 arch:x64

5f593d009711337cf01f788565803bfe

Code Sign

24:dd:d7:0c:ff:b1:26:ff:a6:a7:6c:f2:cd:c5:9e:70
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

24/08/2021, 02:22

Not After

23/08/2024, 02:22

Subject

SERIALNUMBER=44263,CN=GoldWave Inc,O=GoldWave Inc,L=Mount Pearl,ST=Newfoundland and Labrador,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,1.3.6.1.4.1.311.60.2.1.2=#13194e6577666f756e646c616e6420616e64204c61627261646f72,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26/03/2019, 17:44

Not After

22/03/2034, 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:0c:54:9b:f4:a4:34:a5:b6:03:c1:2a:ec:04:0b:e5:19:20:cb:a0:b5:77:6e:9a:6a:0c:26:00:41:b6:a3:0d
Signer

Actual PE Digest

f1:0c:54:9b:f4:a4:34:a5:b6:03:c1:2a:ec:04:0b:e5:19:20:cb:a0:b5:77:6e:9a:6a:0c:26:00:41:b6:a3:0d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

dsound

DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateW
DirectSoundCreate8
DirectSoundEnumerateW
GetDeviceID

gwspeed64

ippiMulCScale_8u_C1IR
ippsCartToPolar_32fc
ippsFFTFree_R_32f
ippsFFTFwd_RToCCS_32f_I
ippsFFTGetBufSize_R_32f
ippsFFTInitAlloc_R_32f
ippsFFTInv_CCSToR_32f_I
ippsFree
ippsLn_32f_I
ippsMagnitude_32fc
ippsMalloc_32f
ippsMalloc_8u
ippsMulC_32f_I
ippsMul_32f
ippsMul_32f_I
ippsPolarToCart_32fc
ippsResamplePolyphaseFixedFree_32f
ippsResamplePolyphaseFixedInitAlloc_32f
ippsResamplePolyphaseFixed_32f
ippsResamplePolyphaseFree_32f
ippsResamplePolyphaseInitAlloc_32f
ippsResamplePolyphase_32f
ippsSet_32f
ippsSub_32f_I
ippsSum_32f
ippsThreshold_LT_32f_I
ippsWinBartlett_32f_I
ippsWinHann_32f_I

wintrust

WinVerifyTrust

advapi32

FreeSid
GetUserNameW
RegCloseKey
RegConnectRegistryW
RegCreateKeyExW
RegDeleteKeyExW
RegDeleteKeyW
RegDeleteTreeW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegGetValueW
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
RegUnLoadKeyW

kernel32

AddVectoredExceptionHandler
CancelIo
CloseHandle
CompareStringA
CompareStringW
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateMutexA
CreateMutexW
CreateSemaphoreA
CreateSymbolicLinkW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumCalendarInfoW
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceA
FindResourceW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCPInfoExW
GetCommandLineW
GetComputerNameW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceW
GetDllDirectoryW
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsW
GetLogicalDrives
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLocaleName
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MapViewOfFile
MoveFileA
MoveFileW
MulDiv
MultiByteToWideChar
OpenProcess
OutputDebugStringW
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlUnwind
SearchPathW
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetDllDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WinExec
WriteFile
lstrcmpW
lstrlenW
RtlRestoreContext
RtlUnwindEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrintersW
GetDefaultPrinterW
OpenPrinterW

comctl32

FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitializeFlatSB
_TrackMouseEvent

comdlg32

ChooseColorW
FindTextW
GetOpenFileNameW
GetSaveFileNameW

gdi32

AbortDoc
AngleArc
Arc
ArcTo
BitBlt
Chord
CloseEnhMetaFile
CombineRgn
CopyEnhMetaFileW
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateEnhMetaFileW
CreateFontIndirectW
CreateHalftonePalette
CreateICW
CreatePalette
CreatePenIndirect
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EnumFontFamiliesExW
EnumFontsW
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtTextOutW
FillRgn
FrameRgn
GdiFlush
GetBitmapBits
GetBkMode
GetBrushOrgEx
GetClipBox
GetCurrentObject
GetCurrentPositionEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestColor
GetNearestPaletteIndex
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextColor
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetViewportOrgEx
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LPtoDP
LineTo
MaskBlt
MoveToEx
PatBlt
Pie
PlayEnhMetaFile
PolyBezier
PolyBezierTo
PolyPolyline
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDCPenColor
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetGraphicsMode
SetMapMode
SetPixel
SetROP2
SetRectRgn
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWinMetaFileBits
SetWindowExtEx
SetWindowOrgEx
SetWorldTransform
StartDocW
StartPage
StretchBlt
StretchDIBits
TextOutW
UnrealizeObject

msacm32

acmFormatDetailsW
acmFormatEnumW
acmFormatTagDetailsW
acmFormatTagEnumW
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader

shell32

DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconW
FindExecutableW
SHAppBarMessage
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW

shfolder

SHGetFolderPathW

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextW
CharUpperBuffA
CharUpperBuffW
CharUpperW
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CopyIcon
CopyImage
CountClipboardFormats
CreateAcceleratorTableW
CreateCaret
CreateIcon
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DragDetect
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateW
DrawTextExW
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndDeferWindowPos
EndMenu
EndPaint
EnumChildWindows
EnumClipboardFormats
EnumDisplayMonitors
EnumThreadWindows
EnumWindows
ExitWindowsEx
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetCaretPos
GetClassInfoExW
GetClassInfoW
GetClassNameW
GetClientRect
GetClipboardData
GetComboBoxInfo
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuItemRect
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMessageTime
GetMessageW
GetMonitorInfoW
GetNextDlgTabItem
GetParent
GetPropW
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetWindow
GetWindowDC
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuItemW
InsertMenuW
InvalidateRect
IsCharAlphaNumericW
IsCharAlphaW
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadKeyboardLayoutW
LoadStringW
LockWindowUpdate
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
NotifyWinEvent
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollDC
ScrollWindow
ScrollWindowEx
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TabbedTextOutW
TrackMouseEvent
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UnregisterDeviceNotification
UpdateLayeredWindow
UpdateWindow
ValidateRect
WaitMessage
WindowFromPoint
GetClassLongPtrW
GetWindowLongPtrW
SetClassLongPtrW
SetWindowLongPtrW
wsprintfA
wsprintfW

winmm

PlaySoundW
mixerClose
mixerGetControlDetailsW
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetNumDevs
mixerOpen
mixerSetControlDetails
sndPlaySoundW
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime
timeKillEvent
timeSetEvent

imm32

ImmSetCompositionFontW

ole32

CLSIDFromProgID
CoCreateInstance
CoGetClassObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
IsAccelerator
IsEqualGUID
OleDraw
OleInitialize
OleRegEnumVerbs
OleSetMenuDescriptor
OleUninitialize
ProgIDFromCLSID
PropVariantClear
StringFromCLSID

oleaut32

CreateErrorInfo
GetActiveObject
GetErrorInfo
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData
SetErrorInfo
SysAllocString
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
VariantChangeType
VariantClear
VariantCopy
VariantCopyInd
VariantInit

oleacc

LresultFromObject

crypt32

CryptMsgClose
CryptMsgGetParam
CryptQueryObject

ws2_32

WSACleanup
WSAGetLastError
WSALookupServiceBeginW
WSALookupServiceEnd
WSALookupServiceNextW
WSASetServiceW
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
getsockname
listen
recv
select
send
setsockopt
socket

shlwapi

SHCreateStreamOnFileW

winhttp

WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetCredentials
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpWriteData

Exports

Exports

CommonImagesData
GWMainForm
_ZTIN6System5Types5TRectE
_ZTIN6System5Types6TPointE
_ZTR10BlurThread
_ZTR10DevicePlay
_ZTR10FileDialog
_ZTR10HTTPThread
_ZTR10SoundPages
_ZTR10SoundSheet
_ZTR10TAudioForm
_ZTR10TBaseFrame
_ZTR10TBatchForm
_ZTR10TBlendForm
_ZTR10TBulgePage
_ZTR10TCDLogForm
_ZTR10TChainForm
_ZTR10TChainLink
_ZTR10TFindFrame
_ZTR10TGainFrame
_ZTR10TLevelPage
_ZTR10TMultiband
_ZTR10TPitchForm
_ZTR10TSoundForm
_ZTR10TStaffPage
_ZTR10TThemeForm
_ZTR10TToneFrame
_ZTR10TVoiceOver
_ZTR10TWaveBoxer
_ZTR10Waveformer
_ZTR11NoiseThread
_ZTR11TAutoOffset
_ZTR11TBlendFrame
_ZTR11TCensorForm
_ZTR11TColourForm
_ZTR11TGWMainForm
_ZTR11TOffsetForm
_ZTR11TPedalFrame
_ZTR11TPresetForm
_ZTR11TRecordHint
_ZTR11TReverbForm
_ZTR11TSoundFrame
_ZTR11TSpeechForm
_ZTR11TSplashForm
_ZTR11TStatusPage
_ZTR11TStripePage
_ZTR11TVisualForm
_ZTR11TVolumeForm
_ZTR11TrainThread
_ZTR12CenterThread
_ZTR12TAddEditForm
_ZTR12TAutoCueForm
_ZTR12TCanvasFrame
_ZTR12TCompareForm
_ZTR12TControlView
_ZTR12TEditCueForm
_ZTR12TFlangerForm
_ZTR12TListButtons
_ZTR12TMarkersForm
_ZTR12TOpenURLForm
_ZTR12TOverviewBox
_ZTR12TPresetFrame
_ZTR12TPreviewForm
_ZTR12TStorageForm
_ZTR12TToolBarForm
_ZTR12TUpgradeForm
_ZTR12TimeTextType
_ZTR12VisualThread
_ZTR12VisualWindow
_ZTR13ParametricBox
_ZTR13TAddChainForm
_ZTR13TAddLogicForm
_ZTR13TAutoGainForm
_ZTR13TCDReaderForm
_ZTR13TCDSelectForm
_ZTR13TDynamicsForm
_ZTR13TExpanderForm
_ZTR13TKeyboardForm
_ZTR13TLanguageForm
_ZTR13TLoudnessForm
_ZTR13TMaximizeForm
_ZTR13TNewSoundForm
_ZTR13TNumBaseFrame
_ZTR13TOkCancelForm
_ZTR13TPopClickForm
_ZTR13TPreviewFrame
_ZTR13TProgressForm
_ZTR13TRegisterForm
_ZTR13TReminderForm
_ZTR13TShutdownForm
_ZTR13TSmootherForm
_ZTR13TSpectrumPage
_ZTR13TWaveformPage
_ZTR13VocoderThread
_ZTR14FileOpenEvents
_ZTR14SpectrumThread
_ZTR14TAddEffectForm
_ZTR14TAddEvalPreset
_ZTR14TArrangerFrame
_ZTR14TAudioPageForm
_ZTR14TChannelSwitch
_ZTR14TCrossfadeForm
_ZTR14TEffectWrapper
_ZTR14TEqualizerForm
_ZTR14TEvaluatorForm
_ZTR14TFootPedalForm
_ZTR14TMechanizeForm
_ZTR14TNoiseGateForm
_ZTR14TRecorderFrame
_ZTR14TSplitFileForm
_ZTR14TWaterfallPage
_ZTR14TWaveSelection
_ZTR15PresetInterface
_ZTR15TAppOptionsForm
_ZTR15TChannelMixForm
_ZTR15TCrossfadeFrame
_ZTR15TEffectMenuItem
_ZTR15TFileFormatForm
_ZTR15TFileMergerForm
_ZTR15TFormEffectPage
_ZTR15TFormVisualPage
_ZTR15TNumUpDownFrame
_ZTR15TPassFilterForm
_ZTR15TRawFormatFrame
_ZTR15TransWaveformer
_ZTR15TransformThread
_ZTR16GImageCollection
_ZTR16TAudioConfigForm
_ZTR16TColourScalePage
_ZTR16TFileFormatsForm
_ZTR16TFilePatternForm
_ZTR16TFilePresetsForm
_ZTR16TFormEffectShape
_ZTR16TInformationForm
_ZTR16TSetPlaybackForm
_ZTR16TSpecifyViewForm
_ZTR16TSpectrogramPage
_ZTR16TTrimSilenceForm
_ZTR16TUpdateCheckForm
_ZTR16TVolumeMatchForm
_ZTR16TVolumeShapeForm
_ZTR16TWinStoreRegForm
_ZTR17IFileDialogEvents
_ZTR17TCDSaveTracksForm
_ZTR17TCommonImagesData
_ZTR17TInfinityLinkForm
_ZTR17TOkCancelHelpForm
_ZTR17TParametricEQForm
_ZTR17TRemoveVocalsForm
_ZTR17TSetSelectionForm
_ZTR17TStereoCenterForm
_ZTR17TTestPlaybackForm
_ZTR17TVistaFolderFrame
_ZTR18TBatchProgressForm
_ZTR18TDopplerEffectForm
_ZTR18TEffectSelectFrame
_ZTR18TFormatSelectFrame
_ZTR18TGWButtonStyleHook
_ZTR18TInsertSilenceForm
_ZTR18TMultiRecorderForm
_ZTR18TTestRecordingForm
_ZTR18TVoiceSettingsForm
_ZTR18TWindowOptionsForm
_ZTR19TFrequencyBlendForm
_ZTR19TNoiseReductionForm
_ZTR19TRecordDurationForm
_ZTR19TSpectrumFilterForm
_ZTR19TStartupOptionsForm
_ZTR20TAssociateFormatForm
_ZTR20TAudioAttributesForm
_ZTR20TChannelSelectorForm
_ZTR20TEncoderDownloadForm
_ZTR20TInstallWebViewFrame
_ZTR20TLanguageOptionsForm
_ZTR20TMultibandEffectForm
_ZTR20TMultichannelMixForm
_ZTR21TAudioAttributesFrame
_ZTR21TEvaluatorButtonsForm
_ZTR21TLanguageDownloadForm
_ZTR21TSilenceReductionForm
_ZTR22TChannelSeparationPage
_ZTR22TControlPropertiesForm
_ZTR22TDictationSettingsForm
_ZTR23PolyphaseResampleThread
_ZTR24IFileDialogControlEvents
_ZTR24TAmplitudeStatisticsForm
_ZTR24TCalculateSeparationForm
_ZTR24TTabStyleHookButtonClose
_ZTR31ICoreWebView2EnvironmentOptions
_ZTR57ICoreWebView2CreateCoreWebView2ControllerCompletedHandler
_ZTR58ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler
_ZTR6Device
_ZTR8IUnknown
_ZTR8TCueForm
_ZTR8TMP3Form
_ZTR8TMixForm
_ZTR8TPanForm
_ZTR8TRawForm
_ZTR8TWaveBox
_ZTR9TAboutBox
_ZTR9TAutoHint
_ZTR9TBandForm
_ZTR9TBaseForm
_ZTR9TCDIDForm
_ZTR9TEchoForm
_ZTR9TFadeForm
_ZTR9TFindForm
_ZTR9THTTPForm
_ZTR9THelpForm
_ZTR9TNumFrame
_ZTR9TPageForm
_ZTR9TRateForm
_ZTR9TRingPage
_ZTR9TTimeForm
_ZTR9TTonePage
_ZTR9TVolFrame
_ZTRN21DeviceTransformThread6ThreadE
_ZTRN3Hid10ReadThreadE
_ZTRN4pion11TEffectFormE
_ZTRN4pion14TConfigureFormE
_ZTRN4pion15WebSocketThreadE
_ZTRN4pion22WebEnvironmentCallbackE
_ZTRN4pion27WebCreateControllerCallbackE
_ZTRN4pion30CoreWebView2EnvironmentOptionsE
_ZTRN4pion7BrowserE
_ZTRN6System10IInterfaceE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZ5CDLogPKczE3$_0MS5_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN10TChainLink10RemoveLinkEPNS_7TObjectEEUlvE_MS6_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN11RESTRequest7Request11ResultEventENS_15DelphiInterfaceINS_5Types12IAsyncResultEEEEUlvE_MS9_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN11TGWMainForm34NotificationCreateWebViewCompletedEPN3Vcl4Edge18TCustomEdgeBrowserElE3$_0MS8_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN12TControlViewC1EPN3Vcl5Forms5TFormEE3$_0MS8_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN17TInfinityLinkForm13ServerExecuteEPN9Idcontext10TIdContextEE3$_1MS7_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN17TInfinityLinkForm13ServerExecuteEPN9Idcontext10TIdContextEE3$_2MS7_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN17TInfinityLinkForm5StateEPN3Vcl8Stdctrls11TStaticTextEE3$_0MS8_KFvvEEE
_ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN4pion9WebSocket10DoCompleteENS4_5ErrorEE3$_0MS6_KFvvEEE
_ZTRN6System13InvokeWrapperINS_8Sysutils5TProcEZ19FixInitialDialogPosP11IFileDialogRbE3$_0MS6_KFvvEEE
_ZTRN6System20TCppInterfacedObjectI17IFileDialogEvents24IFileDialogControlEventsNS_10IInterfaceEEE
_ZTRN6System20TCppInterfacedObjectI31ICoreWebView2EnvironmentOptions8IUnknownNS_10IInterfaceEEE
_ZTRN6System20TCppInterfacedObjectI57ICoreWebView2CreateCoreWebView2ControllerCompletedHandler8IUnknownNS_10IInterfaceEEE
_ZTRN6System20TCppInterfacedObjectI58ICoreWebView2CreateCoreWebView2EnvironmentCompletedHandler8IUnknownNS_10IInterfaceEEE
_ZTRN6System20TCppInterfacedObjectINS_7Classes16TThreadProcedureE8IUnknownNS_10IInterfaceEEE
_ZTRN6System20TCppInterfacedObjectINS_8Sysutils5TProcE8IUnknownNS_10IInterfaceEEE
_ZTRN6System3SetIN3Vcl8Controls16Vcl_Controls__52ELS3_0ELS3_2EEE
_ZTRN6System3SetINS_7Classes17System_Classes__1ELS2_0ELS2_10EEE
_ZTRN6System3SetINS_7Uitypes11TAnchorKindELS2_0ELS2_3EEE
_ZTRN6System3SetINS_7Uitypes11TBorderIconELS2_0ELS2_3EEE
_ZTRN6System7Classes16TThreadProcedureE
_ZTRN6System8Sysutils5TProcE
_ZTRN9TShapeBox4AxisE
_ZTRN9TShapeBox8MoveFlagE
_ZTRRKN6System5Types5TRectE
_ZTRRKN6System5Types6TPointE
_ZTRRN6System13UnicodeStringE
_ZTRRN6System5Types5TRectE
_ZTRRN6System7Uitypes12TCloseActionE
_ZTRRN6Winapi8Messages6TWMKeyE
_ZTRRPN3Vcl8Controls11TDragObjectE
_ZTRRPN3Vcl8Controls15TDragDockObjectE
_ZTRRb
_ZTRRi
_ZTRRt
_ZTRRw
_ZTRU9__closurePFbtxRbE
_ZTRU9__closurePFvP6TFaderPN3Vcl8Graphics7TCanvasERKN6System5Types5TRectEE
_ZTRU9__closurePFvPN3Vcl8Graphics7TCanvasERKN6System5Types5TRectES7_E
_ZTRU9__closurePFvPN6System7TObjectEE
_ZTRU9__closurePFvPN6System7TObjectENS_3SetINS_7Classes17System_Classes__1ELS4_0ELS4_10EEERKNS_5Types6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectENS_3SetINS_7Classes17System_Classes__1ELS4_0ELS4_10EEEiRKNS_5Types6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectENS_3SetINS_7Classes17System_Classes__1ELS4_0ELS4_10EEEiiE
_ZTRU9__closurePFvPN6System7TObjectENS_7Uitypes12TMouseButtonENS_3SetINS_7Classes17System_Classes__1ELS6_0ELS6_10EEEiiE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls15TDragDockObjectEiiE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls15TDragDockObjectEiiNS_7Uitypes10TDragStateERbE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls8TControlEPNS3_11TWinControlERbE
_ZTRU9__closurePFvPN6System7TObjectEPN3Vcl8Controls8TControlERNS_5Types5TRectERKNS6_6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectERKNS_5Types6TPointERbE
_ZTRU9__closurePFvPN6System7TObjectERNS_7Uitypes12TCloseActionEE
_ZTRU9__closurePFvPN6System7TObjectERPN3Vcl8Controls11TDragObjectEE
_ZTRU9__closurePFvPN6System7TObjectERPN3Vcl8Controls15TDragDockObjectEE
_ZTRU9__closurePFvPN6System7TObjectERbE
_ZTRU9__closurePFvPN6System7TObjectERiS2_RbE
_ZTRU9__closurePFvPN6System7TObjectERiS2_S2_S2_E
_ZTRU9__closurePFvPN6System7TObjectERtNS_3SetINS_7Classes17System_Classes__1ELS5_0ELS5_10EEEE
_ZTRU9__closurePFvPN6System7TObjectERwE
_ZTRU9__closurePFvPN6System7TObjectES1_iiE
_ZTRU9__closurePFvPN6System7TObjectES1_iiNS_7Uitypes10TDragStateERbE
_ZTRU9__closurePFvRN6System13UnicodeStringERbE
_ZTRU9__closurePFvRN6Winapi8Messages6TWMKeyERbE
__CPPdebugHook
__setRaiseListFuncAddr

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.1MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 501KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/Help/Figures/Add16.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/Play16.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayAll.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayContinue.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayContinueEnd.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayFast.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayFinish.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayIntroLoopEnd.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayLoop.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayLoopPoint.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayPause.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayRewind.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlaySelection.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayStartEnd.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayStop.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayUnselected.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayView.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/PlayViewEnd.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/Record.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/RecordDictate.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/RecordNew.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/RecordPause.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/RecordSelection.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/RecordStop.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/Remove16.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/Setup.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/Stop16.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/aliasing.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/bits.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/btnback.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/buynow.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/check.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/clipping.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/control.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/controlproperties.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/dash.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/db.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/dndcontents.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/dndrange.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/dynamics.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/effectcontrols.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/evalinternal.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/example.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/fblogo.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/fileformat.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/frequencyrange.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/gwlogo32.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/interpolate.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/main.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/mainandroid.jpg
.jpg
GoldWave Portable/App/GoldWave/Help/Figures/mainhorizontal.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/mazepic.jpg
.jpg
GoldWave Portable/App/GoldWave/Help/Figures/next.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/noisereduction.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/note.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/offset.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/pan1.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/pan2.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/parametriceq.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/previous.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/sample.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/samplingrate.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/solidtip.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/splittercable.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/steps.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/t_logo-a.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/toolbaroptions.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/transtip.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/turntableconnect.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/videomeld.jpg
.jpg
GoldWave Portable/App/GoldWave/Help/Figures/viewselection.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/volumescales.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/warn.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/where.png
.png
GoldWave Portable/App/GoldWave/Help/Figures/x.png
.png
GoldWave Portable/App/GoldWave/Help/GoldWave.html
.html
GoldWave Portable/App/GoldWave/Help/GoldWaveManual.html
.html
GoldWave Portable/App/GoldWave/Help/Index.html
.html
GoldWave Portable/App/GoldWave/Help/Style.css
GoldWave Portable/App/GoldWave/Language/en.lang
GoldWave Portable/App/GoldWave/Language/zh-tw.lang
GoldWave Portable/App/GoldWave/ReadMe.txt
GoldWave Portable/App/GoldWave/Visual/gwbpmcounter.html
.html
GoldWave Portable/App/GoldWave/Visual/gwbpmcounter.pig
.dll windows:5 windows x64 arch:x64

65269e6a433aec9dc817f166805475ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx

gdi32

CreateFontW
CreatePen
CreateSolidBrush
DeleteObject
Ellipse
GetDeviceCaps
GetTextExtentPoint32W
PatBlt
SelectObject
SetBkMode
SetTextColor
TextOutW

user32

CheckRadioButton
CreateDialogParamW
DestroyWindow
EnumThreadWindows
GetSysColor
GetWindowRect
IsDlgButtonChecked
MessageBoxA
MoveWindow
ShowWindow
wsprintfA

Exports

Exports

GetVisualInterface
__CPPdebugHook

Sections

.text
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/Visual/gwbpmcounter.png
.png
GoldWave Portable/App/GoldWave/Visual/gwmpvisual.html
.html
GoldWave Portable/App/GoldWave/Visual/gwmpvisual.pig
.dll windows:5 windows x64 arch:x64

68e78c25b34f19bb993556e9bba1b9cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx

gdi32

CreateFontW
CreateSolidBrush
DeleteObject
GetDeviceCaps
PatBlt
SelectObject
SetBkMode
SetTextColor
TextOutW

user32

CheckDlgButton
CreateDialogParamW
DestroyWindow
EnumThreadWindows
GetDlgItem
GetWindowRect
IsDlgButtonChecked
LoadCursorW
MessageBoxA
MoveWindow
SendDlgItemMessageW
SendMessageW
SetCursor
SetRect
ShowWindow
GetWindowLongPtrW
SetWindowLongPtrW
wsprintfA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

GetVisualInterface
__CPPdebugHook

Sections

.text
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/WebView2Loader.dll
.dll windows:5 windows x64 arch:x64

2a83d48aba3833cd76509f4d745e10bb

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

81:eb:48:b8:5c:28:cf:a2:0e:5e:be:4e:31:64:ec:a6:d0:ce:99:96:90:43:4a:e3:6b:d0:a4:fd:4e:ae:aa:0d
Signer

Actual PE Digest

81:eb:48:b8:5c:28:cf:a2:0e:5e:be:4e:31:64:ec:a6:d0:ce:99:96:90:43:4a:e3:6b:d0:a4:fd:4e:ae:aa:0d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WebView2Loader.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 62B

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GoldWave Portable/App/GoldWave/WhatsNew.txt
GoldWave Portable/Data/GoldWave/Active.lang
GoldWave Portable/Data/GoldWave/GoldWave.xml
GoldWave Portable/Data/settings/GoldWave Digital Audio EditorSettings.ini
GoldWave Portable/Data/settings/GoldWave.reg
GoldWave Portable/GoldWave Digital Audio Editor.exe
.exe windows:4 windows x86 arch:x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UAC.dll
.dll windows:4 windows x86 arch:x86

c4a726be6ec458c19b16bf3893cf4bc1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
lstrcmpiW
GetCurrentThreadId
GetProcAddress
GetCommandLineW
UnmapViewOfFile
WaitForSingleObject
GetCurrentProcessId
SetEvent
GetVersionExW
SetCurrentDirectoryW
MapViewOfFile
Sleep
OpenProcess
GetExitCodeProcess
GetExitCodeThread
CreateThread
CreateFileMappingW
CreateEventW
lstrlenW
GlobalAlloc
CreateProcessW
GetLastError
FormatMessageW
LocalFree
GlobalFree
CloseHandle
GetModuleFileNameW
lstrcatW
GetPrivateProfileIntW
GetPrivateProfileStringW
DuplicateHandle
LoadLibraryA

user32

SetWindowsHookExW
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
MsgWaitForMultipleObjects
DefWindowProcW
PostMessageW
SetForegroundWindow
CreateWindowExW
GetWindowThreadProcessId
CallWindowProcW
SetWindowPos
GetWindowRect
UnhookWindowsHookEx
GetClassNameW
CallNextHookEx
CharNextW
DialogBoxParamW
MessageBoxW
EndDialog
SetWindowLongW
LoadImageW
GetWindowLongW
EnableWindow
ShowWindow
wsprintfW
LoadStringW
GetDlgItem
SendMessageW
DestroyWindow

advapi32

GetUserNameW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
AdjustTokenPrivileges
OpenProcessToken

shell32

ShellExecuteExW

ole32

CoInitialize

Exports

Exports

_

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/execDos.dll
.dll windows:5 windows x86 arch:x86

a5d239ed12c9442d63c73cb9ff7cad0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
Sleep
lstrcatW
lstrcmpiW
TerminateProcess
ReadFile
GetExitCodeProcess
PeekNamedPipe
CreateFileW
FlushFileBuffers
WriteFile
lstrlenW
CloseHandle
CreateProcessW
DuplicateHandle
GetCurrentProcess
CreatePipe
GetProcAddress
GetModuleHandleW
GlobalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
lstrcpyW
lstrcpynW

user32

wsprintfW
GetClassNameW
GetDlgItem
FindWindowExW
SendMessageW

Exports

Exports

exec
isdone
wait

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/newadvsplash.dll
.dll windows:4 windows x86 arch:x86

7efb019e000b6e0291c32d00fe622590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
CloseHandle
WaitForSingleObject
GetProcAddress
lstrlenW
CreateThread
GetCurrentThreadId
Sleep
lstrcpyW
lstrcmpiW
GlobalAlloc
GlobalFree
lstrcpynW

user32

DefWindowProcW
DestroyWindow
IsWindowVisible
UnregisterClassW
EnumDisplaySettingsW
SendMessageW
wsprintfW
SystemParametersInfoW
EndPaint
SetWindowPos
LoadCursorW
RegisterClassW
CreateWindowExW
IsWindow
GetMessageW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetWindowLongW
GetClientRect
TranslateMessage
DispatchMessageW
PostMessageW
SetWindowRgn
BeginPaint

gdi32

CombineRgn
GetObjectW
CreateCompatibleDC
SelectObject
GetDIBits
CreateRectRgn
DeleteObject

winmm

timeSetEvent
PlaySoundW
timeKillEvent

oleaut32

OleLoadPicturePath

msvcrt

_lseek
memset
memcmp
_read
memcpy
_wopen
_close
wcstol

Exports

Exports

hwnd
play
show
stop

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/newtextreplace.dll
.dll windows:4 windows x86 arch:x86

42624ab02b71999959eb0f4168f609bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
CopyFileW
CreateFileW
FindAtomA
GetAtomNameA
GetFileAttributesW
GetFileSize
GlobalAlloc
GlobalFree
MultiByteToWideChar
ReadFile
SetFileAttributesW
SetFilePointer
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memset

user32

CharUpperA
wsprintfW

Exports

Exports

_FillReadBuffer
_FindInFile
_FreeReadBuffer
_ReplaceInFile
_Unload

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

c1c7505e1e6e929ebb6b9100e55b050a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
IsTextUnicode

user32

wsprintfW
CharNextExA
SendMessageW
FindWindowExW
CharNextW
CharPrevW

kernel32

CreatePipe
DeleteFileW
lstrcmpiW
GetCommandLineW
ExitProcess
Sleep
TerminateProcess
GlobalReAlloc
MultiByteToWideChar
IsDBCSLeadByteEx
ReadFile
PeekNamedPipe
GetExitCodeProcess
WaitForSingleObject
GetTickCount
lstrcpyW
CreateProcessW
GetStartupInfoW
CreateFileMappingW
GetVersion
GetCurrentProcess
lstrcpynW
lstrlenW
lstrcatW
CloseHandle
UnmapViewOfFile
MapViewOfFile
GlobalFree
CreateFileW
CopyFileW
GetTempFileNameW
GlobalAlloc
GetModuleFileNameW
GetProcAddress
GetModuleHandleA

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/registry.dll
.dll windows:4 windows x86 arch:x86

f450890bf454de37198f435d5832e67d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcpyW
FindClose
FindFirstFileW
lstrcmpW
GetFileSize
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
WriteFile
CloseHandle
lstrlenW
lstrcpynW
lstrcmpiW
lstrcatW
GlobalAlloc
ReadFile
GlobalFree

user32

wsprintfW
CharUpperW
SendMessageW
FindWindowExW
GetDlgItem

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegCloseKey

Exports

Exports

_Close
_CopyKey
_CopyValue
_CreateKey
_DeleteKey
_DeleteKeyEmpty
_DeleteValue
_Find
_HexToStr
_HexToStrUTF16LE
_KeyExists
_MoveKey
_MoveValue
_Open
_Read
_ReadExtra
_RestoreKey
_SaveKey
_StrToHex
_StrToHexUTF16LE
_Unload
_Write
_WriteExtra

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/splash.bmp

Sharing

General

Malware Config

Signatures

Files

66dad99d3a6b2353946758595a183a37

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

version

winspool.drv

comctl32

comdlg32

gdi32

shell32

shfolder

user32

ole32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rodata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 240KB - Virtual size: 438KB

.tls Size: 2KB - Virtual size: 2KB

.pdata Size: 330KB - Virtual size: 330KB

.xdata Size: 577KB - Virtual size: 576KB

.idata Size: 21KB - Virtual size: 20KB

.didata Size: 6KB - Virtual size: 6KB

.edata Size: 3KB - Virtual size: 3KB

.rsrc Size: 433KB - Virtual size: 433KB

.reloc Size: 250KB - Virtual size: 249KB

b8722a9e2e6bd7b550eb53d247d5d27e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 129KB - Virtual size: 132KB

.data Size: 19KB - Virtual size: 80KB

.tls Size: 1024B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 21KB - Virtual size: 24KB

.reloc Size: 8KB - Virtual size: 12KB

0e6a1422bbe372be429435f3d9a9329d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 313KB - Virtual size: 313KB

.rodata Size: 14KB - Virtual size: 14KB

.data Size: 58KB - Virtual size: 172KB

.tls Size: 1KB - Virtual size: 1KB

.pdata Size: 16KB - Virtual size: 15KB

.xdata Size: 25KB - Virtual size: 25KB

.rdata Size: 512B - Virtual size: 40B

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 512B - Virtual size: 116B

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 5KB - Virtual size: 4KB

50ea8915e17260383c1be4c13cfbbc93

Headers

File Characteristics

Imports

.text
Size: 3.4MB - Virtual size: 3.4MB

.rodata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 240KB - Virtual size: 438KB

.tls
Size: 2KB - Virtual size: 2KB

.pdata
Size: 330KB - Virtual size: 330KB

.xdata
Size: 577KB - Virtual size: 576KB

.idata
Size: 21KB - Virtual size: 20KB

.didata
Size: 6KB - Virtual size: 6KB

.edata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 433KB - Virtual size: 433KB

.reloc
Size: 250KB - Virtual size: 249KB

.text
Size: 129KB - Virtual size: 132KB

.data
Size: 19KB - Virtual size: 80KB

.tls
Size: 1024B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 21KB - Virtual size: 24KB

.reloc
Size: 8KB - Virtual size: 12KB

.text
Size: 313KB - Virtual size: 313KB

.rodata
Size: 14KB - Virtual size: 14KB

.data
Size: 58KB - Virtual size: 172KB

.tls
Size: 1KB - Virtual size: 1KB

.pdata
Size: 16KB - Virtual size: 15KB

.xdata
Size: 25KB - Virtual size: 25KB

.rdata
Size: 512B - Virtual size: 40B

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 116B

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 420KB - Virtual size: 420KB

.rodata
Size: 19KB - Virtual size: 18KB

.data
Size: 88KB - Virtual size: 136KB

.tls
Size: 512B - Virtual size: 240B

.pdata
Size: 25KB - Virtual size: 25KB

.xdata
Size: 38KB - Virtual size: 37KB

.idata
Size: 6KB - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 106B

.rsrc
Size: 88KB - Virtual size: 88KB

.reloc
Size: 9KB - Virtual size: 9KB

.text
Size: 475KB - Virtual size: 475KB

.rodata
Size: 27KB - Virtual size: 26KB

.data
Size: 61KB - Virtual size: 175KB

.tls
Size: 1KB - Virtual size: 1KB

.pdata
Size: 20KB - Virtual size: 20KB

.xdata
Size: 32KB - Virtual size: 31KB

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 139B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 502KB - Virtual size: 501KB

.rdata
Size: 273KB - Virtual size: 273KB

.data
Size: 9KB - Virtual size: 203KB

.pdata
Size: 13KB - Virtual size: 13KB

.trace
Size: 14KB - Virtual size: 14KB

_RDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 371KB - Virtual size: 371KB

.rodata
Size: 517KB - Virtual size: 516KB