08413d5f9fea4fbc2fd57167c7599447_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

08413d5f9fea4fbc2fd57167c7599447_JaffaCakes118
Size

1.5MB
MD5

08413d5f9fea4fbc2fd57167c7599447
SHA1

be7b232f06cae72e4be9c66d601f7d8538ec35e8
SHA256

fd8f2b5eaeb354d4b2d73acf8f79b93ef77a353f132f8f0fa1ff094e39c4db64
SHA512

2dc0a17e16d8328b5c94dccb79925165dfa17f4e636481148d81abd4b784fbb9ee79eb17cc9bbdd17c35e2f5061b688a6c23710b966f5c24afb8c9f0b877d475
SSDEEP

24576:Bmt8SEzNP0PwtOoA1108g+z/k5yJwpQ+eShU0qgjaT6vELL5pxqs94G/mqXg3QR:BmUsPPvo5HeSh2UmdpxdH/PXMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/NSISdl.dll
unpack002/$PLUGINSDIR/System.dll
unpack001/DFX.for.RealPlayer.v9.103/lpk.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
static1/unpack001/DFX.for.RealPlayer.v9.103/3ddown.com_setup.exe	nsis_installer_1
static1/unpack001/DFX.for.RealPlayer.v9.103/3ddown.com_setup.exe	nsis_installer_2

Files

08413d5f9fea4fbc2fd57167c7599447_JaffaCakes118
.rar
DFX.for.RealPlayer.v9.103/3ddown.com_setup.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12-03-2008 00:00

Not After

11-05-2010 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a4:fd:a2:94:dd:87:c2:d6:ba:87:98:44:79:0c:a5:8a:e3:68:af:e1
Signer

Actual PE Digest

a4:fd:a2:94:dd:87:c2:d6:ba:87:98:44:79:0c:a5:8a:e3:68:af:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$COMMONFILES/DFX/Skins/Obsidian/Obsidian.exe
.exe windows:4 windows x86 arch:x86

3f3ba99c7a17c84031710235ee2f7ba9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

11-05-2007 00:00

Not After

11-05-2008 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

d2:63:69:d7:6a:1d:ce:e5:92:2c:8c:89:18:ae:76:5e:12:45:b4:35
Signer

Actual PE Digest

d2:63:69:d7:6a:1d:ce:e5:92:2c:8c:89:18:ae:76:5e:12:45:b4:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
MoveFileA
lstrcatA
lstrlenA
GetShortPathNameA
SearchPathA
lstrcpyA
Sleep
RemoveDirectoryA
CopyFileA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
SetFileAttributesA
GetTempPathA
GetTempFileNameA
GetDiskFreeSpaceA
GetVersion
CreateThread
CreateProcessA
CreateFileA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
CreateDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
GetFileAttributesA
CompareFileTime
SetFileTime
CloseHandle
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
LoadLibraryA
WaitForSingleObject
GetExitCodeProcess
lstrcpynA
GetCommandLineA
GetProcAddress
GetTickCount
GlobalFree
WriteFile
GlobalAlloc
MulDiv
SetFilePointer
ReadFile
FreeLibrary
GetPrivateProfileStringA
WritePrivateProfileStringA
ExitProcess
GetCurrentProcess

user32

SetWindowPos
ScreenToClient
EnableWindow
GetDlgItem
SetClassLongA
SetFocus
GetWindowRect
CharPrevA
GetParent
SendDlgItemMessageA
LoadBitmapA
IsWindowVisible
IsWindow
GetDlgItemTextA
FindWindowExA
SendMessageA
DefWindowProcA
DialogBoxParamA
EndDialog
FillRect
GetWindowTextA
DrawTextA
EndPaint
LoadIconA
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDesktopWindow
CreateWindowExA
SetWindowTextA
SetDlgItemTextA
CharNextA
CreateDialogParamA
DestroyWindow
PostQuitMessage
ShowWindow
SetForegroundWindow
MessageBoxA
wsprintfA
IsWindowEnabled
BeginPaint
SetTimer
SetRect
PeekMessageA
ExitWindowsEx
GetClientRect
DispatchMessageA

gdi32

SetBkMode
SetTextColor
CreateFontA
CreateSolidBrush
DeleteObject
BitBlt
CreateCompatibleDC
GetTextColor
LineTo
MoveToEx
CreatePen
GetStockObject
SetBkColor
GetNearestColor
CreateBrushIndirect
SelectObject

advapi32

RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA

shell32

SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
SHFileOperationA
SHBrowseForFolderA

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

comctl32

ord17

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$COMMONFILES/DFX/Skins/Obsidian/all_off.bmp
$COMMONFILES/DFX/Skins/Obsidian/headphone_on.bmp
$COMMONFILES/DFX/Skins/Obsidian/master.bmp
$COMMONFILES/DFX/Skins/Obsidian/music1_on.bmp
$COMMONFILES/DFX/Skins/Obsidian/music2_on.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_0.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_1.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_10.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_2.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_3.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_4.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_5.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_6.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_7.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_8.bmp
$COMMONFILES/DFX/Skins/Obsidian/number_9.bmp
$COMMONFILES/DFX/Skins/Obsidian/section_off.bmp
$COMMONFILES/DFX/Skins/Obsidian/skin_definition.txt
$COMMONFILES/DFX/Skins/Obsidian/skin_info.txt
$COMMONFILES/DFX/Skins/Obsidian/slider.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_1.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_10.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_11.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_12.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_13.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_14.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_15.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_16.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_17.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_18.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_19.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_2.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_20.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_3.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_4.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_5.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_6.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_7.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_8.bmp
$COMMONFILES/DFX/Skins/Obsidian/spectrum_1_9.bmp
$COMMONFILES/DFX/Skins/Obsidian/speech_on.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/Obsidian_mini.exe
.exe windows:4 windows x86 arch:x86

3f3ba99c7a17c84031710235ee2f7ba9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

11-05-2007 00:00

Not After

11-05-2008 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c8:31:b0:3e:b3:6d:ab:d2:f7:c3:aa:93:bf:2d:1e:2f:db:3c:ff:9d
Signer

Actual PE Digest

c8:31:b0:3e:b3:6d:ab:d2:f7:c3:aa:93:bf:2d:1e:2f:db:3c:ff:9d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
MoveFileA
lstrcatA
lstrlenA
GetShortPathNameA
SearchPathA
lstrcpyA
Sleep
RemoveDirectoryA
CopyFileA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
SetFileAttributesA
GetTempPathA
GetTempFileNameA
GetDiskFreeSpaceA
GetVersion
CreateThread
CreateProcessA
CreateFileA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
CreateDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
GetFileAttributesA
CompareFileTime
SetFileTime
CloseHandle
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
LoadLibraryA
WaitForSingleObject
GetExitCodeProcess
lstrcpynA
GetCommandLineA
GetProcAddress
GetTickCount
GlobalFree
WriteFile
GlobalAlloc
MulDiv
SetFilePointer
ReadFile
FreeLibrary
GetPrivateProfileStringA
WritePrivateProfileStringA
ExitProcess
GetCurrentProcess

user32

SetWindowPos
ScreenToClient
EnableWindow
GetDlgItem
SetClassLongA
SetFocus
GetWindowRect
CharPrevA
GetParent
SendDlgItemMessageA
LoadBitmapA
IsWindowVisible
IsWindow
GetDlgItemTextA
FindWindowExA
SendMessageA
DefWindowProcA
DialogBoxParamA
EndDialog
FillRect
GetWindowTextA
DrawTextA
EndPaint
LoadIconA
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDesktopWindow
CreateWindowExA
SetWindowTextA
SetDlgItemTextA
CharNextA
CreateDialogParamA
DestroyWindow
PostQuitMessage
ShowWindow
SetForegroundWindow
MessageBoxA
wsprintfA
IsWindowEnabled
BeginPaint
SetTimer
SetRect
PeekMessageA
ExitWindowsEx
GetClientRect
DispatchMessageA

gdi32

SetBkMode
SetTextColor
CreateFontA
CreateSolidBrush
DeleteObject
BitBlt
CreateCompatibleDC
GetTextColor
LineTo
MoveToEx
CreatePen
GetStockObject
SetBkColor
GetNearestColor
CreateBrushIndirect
SelectObject

advapi32

RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA

shell32

SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
SHFileOperationA
SHBrowseForFolderA

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

comctl32

ord17

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$COMMONFILES/DFX/Skins/Obsidian_mini/all_off.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/headphone_on.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/master.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/music1_on.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/music2_on.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/skin_definition.txt
$COMMONFILES/DFX/Skins/Obsidian_mini/skin_info.txt
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_1.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_10.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_11.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_12.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_13.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_14.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_15.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_16.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_17.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_18.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_19.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_2.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_20.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_3.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_4.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_5.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_6.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_7.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_8.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/spectrum_1_9.bmp
$COMMONFILES/DFX/Skins/Obsidian_mini/speech_on.bmp
$COMMONFILES/DFX/Skins/SoundFX/SoundFX.exe
.exe windows:4 windows x86 arch:x86

3f3ba99c7a17c84031710235ee2f7ba9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

11-05-2007 00:00

Not After

11-05-2008 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

73:bf:eb:dd:c9:80:cd:58:d1:cd:7c:fe:24:5b:4b:4b:ce:3c:05:1b
Signer

Actual PE Digest

73:bf:eb:dd:c9:80:cd:58:d1:cd:7c:fe:24:5b:4b:4b:ce:3c:05:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
MoveFileA
lstrcatA
lstrlenA
GetShortPathNameA
SearchPathA
lstrcpyA
Sleep
RemoveDirectoryA
CopyFileA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
SetFileAttributesA
GetTempPathA
GetTempFileNameA
GetDiskFreeSpaceA
GetVersion
CreateThread
CreateProcessA
CreateFileA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
CreateDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
GetFileAttributesA
CompareFileTime
SetFileTime
CloseHandle
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
LoadLibraryA
WaitForSingleObject
GetExitCodeProcess
lstrcpynA
GetCommandLineA
GetProcAddress
GetTickCount
GlobalFree
WriteFile
GlobalAlloc
MulDiv
SetFilePointer
ReadFile
FreeLibrary
GetPrivateProfileStringA
WritePrivateProfileStringA
ExitProcess
GetCurrentProcess

user32

SetWindowPos
ScreenToClient
EnableWindow
GetDlgItem
SetClassLongA
SetFocus
GetWindowRect
CharPrevA
GetParent
SendDlgItemMessageA
LoadBitmapA
IsWindowVisible
IsWindow
GetDlgItemTextA
FindWindowExA
SendMessageA
DefWindowProcA
DialogBoxParamA
EndDialog
FillRect
GetWindowTextA
DrawTextA
EndPaint
LoadIconA
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDesktopWindow
CreateWindowExA
SetWindowTextA
SetDlgItemTextA
CharNextA
CreateDialogParamA
DestroyWindow
PostQuitMessage
ShowWindow
SetForegroundWindow
MessageBoxA
wsprintfA
IsWindowEnabled
BeginPaint
SetTimer
SetRect
PeekMessageA
ExitWindowsEx
GetClientRect
DispatchMessageA

gdi32

SetBkMode
SetTextColor
CreateFontA
CreateSolidBrush
DeleteObject
BitBlt
CreateCompatibleDC
GetTextColor
LineTo
MoveToEx
CreatePen
GetStockObject
SetBkColor
GetNearestColor
CreateBrushIndirect
SelectObject

advapi32

RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA

shell32

SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
SHFileOperationA
SHBrowseForFolderA

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

comctl32

ord17

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$COMMONFILES/DFX/Skins/SoundFX/all_off.bmp
$COMMONFILES/DFX/Skins/SoundFX/headphone_on.bmp
$COMMONFILES/DFX/Skins/SoundFX/master.bmp
$COMMONFILES/DFX/Skins/SoundFX/music1_on.bmp
$COMMONFILES/DFX/Skins/SoundFX/music2_on.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_0.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_1.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_10.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_2.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_3.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_4.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_5.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_6.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_7.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_8.bmp
$COMMONFILES/DFX/Skins/SoundFX/number_9.bmp
$COMMONFILES/DFX/Skins/SoundFX/section_off.bmp
$COMMONFILES/DFX/Skins/SoundFX/skin_definition.txt
$COMMONFILES/DFX/Skins/SoundFX/skin_info.txt
$COMMONFILES/DFX/Skins/SoundFX/slider.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_1.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_10.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_11.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_12.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_13.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_14.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_15.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_16.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_17.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_18.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_19.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_2.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_20.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_3.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_4.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_5.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_6.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_7.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_8.bmp
$COMMONFILES/DFX/Skins/SoundFX/spectrum_1_9.bmp
$COMMONFILES/DFX/Skins/SoundFX/speech_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/all_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/headphone_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_headphones_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_headphones_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_logo.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_menu.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_minimize.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_music1_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_music1_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_music2_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_music2_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_power_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_power_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_presets.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_section_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_section_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_skins.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_slider.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_small_mode.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_speakers_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_speakers_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_speech_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_speech_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/hover_titlebar.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/master.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/music1_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/music2_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/no_audio.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_0.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/number_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/section_off_ambience.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/section_off_boost.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/section_off_fidelity.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/section_off_hyperbass.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/section_off_surround.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/skin_definition.txt
$COMMONFILES/DFX/Skins/default_RealPlayer/slider.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_10_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_1_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_2_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_3_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_4_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_5_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_6_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_7_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_8_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/spectrum_9_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer/speech_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/all_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/headphone_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_headphones_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_headphones_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_logo.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_menu.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_minimize.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_music1_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_music1_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_music2_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_music2_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_power_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_power_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_presets.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_skins.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_small_mode.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_speakers_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_speakers_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_speech_off.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/hover_speech_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/master.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/music1_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/music2_on.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/no_audio.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/skin_definition.txt
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_10_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_1_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_2_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_3_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_4_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_5_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_6_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_7_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_8_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_1.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_10.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_11.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_12.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_13.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_14.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_15.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_16.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_17.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_18.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_19.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_2.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_20.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_3.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_4.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_5.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_6.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_7.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_8.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/spectrum_9_9.bmp
$COMMONFILES/DFX/Skins/default_RealPlayer_mini/speech_on.bmp
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/NSISdl.dll
.dll windows:4 windows x86 arch:x86

9cce555dd3ff1b6c7dc92d64c794c51a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
lstrcpynA
lstrlenA
lstrcatA
GlobalAlloc
GlobalFree
CloseHandle
GetTickCount
DeleteFileA
Sleep
WriteFile
CreateFileA
lstrcmpiA
lstrcpyA
MulDiv
CreateThread

user32

CharPrevA
SetWindowLongA
RegisterWindowMessageA
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExA
SetWindowTextA
SendMessageA
wsprintfA
SetDlgItemTextA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ws2_32

gethostbyname
inet_addr
ioctlsocket
htons
socket
closesocket
shutdown
connect
__WSAFDIsSet
select
recv
WSAGetLastError
send
WSACleanup
WSAStartup

Exports

Exports

download
download_quiet

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ask_email_page_IO.ini
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$_0_/dfxbtn.dll
.dll windows:4 windows x86 arch:x86

69deb0db4ef5e77af7d83131f475f2a3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12-03-2008 00:00

Not After

11-05-2010 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

de:22:1d:f5:17:2e:45:b5:7c:0b:3b:2c:78:02:33:b8:d9:b8:c0:b0
Signer

Actual PE Digest

de:22:1d:f5:17:2e:45:b5:7c:0b:3b:2c:78:02:33:b8:d9:b8:c0:b0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSection
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle

user32

PostMessageA
BringWindowToTop
ShowWindow
SetTimer
IsWindowVisible
KillTimer
LoadBitmapA
FindWindowW
LoadStringA

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Exports

Exports

RPCreateInstance

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_1_/dfxrealr.dll
.dll windows:4 windows x86 arch:x86

b7a5d692bd5f26fbd3817b6d25d7fc9f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12-03-2008 00:00

Not After

11-05-2010 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ca:78:e0:68:1a:44:ee:27:d4:c8:20:71:78:57:3b:2c:65:9a:a3:03
Signer

Actual PE Digest

ca:78:e0:68:1a:44:ee:27:d4:c8:20:71:78:57:3b:2c:65:9a:a3:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
ExpandEnvironmentStringsA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InterlockedDecrement
InterlockedIncrement
CreateProcessW
GetTempFileNameW
GetTempPathW
FindClose
FindNextFileW
FindFirstFileW
CreateThread
Sleep
GetTickCount
CreateDirectoryW
GetVersionExW
CopyFileW
GetCurrentProcess
GetProcAddress
FormatMessageW
GetLastError
LockResource
SizeofResource
LoadResource
FindResourceW
GetCurrentDirectoryW
lstrcmpW
RemoveDirectoryW
SetCurrentDirectoryW
SetFileTime
CloseHandle
GetFileTime
CompareFileTime
GetSystemTime
GetTimeZoneInformation
FileTimeToSystemTime
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
AreFileApisANSI
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
UnlockFile
LockFile
CreateFileA
CreateFileW
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
LoadLibraryA
LoadLibraryW
FormatMessageA
FreeLibrary
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
DeleteCriticalSection
InitializeCriticalSection
LockFileEx
GetTempPathA
GetFullPathNameA
GetFullPathNameW
GetSystemDirectoryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
HeapReAlloc
RtlUnwind
FileTimeToLocalFileTime
GetDriveTypeW
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableW
GetDriveTypeA
GetModuleHandleA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

wininet

InternetGetConnectedState
InternetOpenUrlW
InternetReadFile
InternetSetStatusCallbackW
InternetOpenW
InternetCloseHandle

winmm

mmioOpenW
mmioClose
mmioWrite
mmioSetInfo
mmioSeek
mmioCreateChunk
mmioGetInfo
mmioDescend
mmioRead
mmioAscend
PlaySoundW
mmioAdvance

comctl32

InitCommonControlsEx

user32

CheckDlgButton
GetCursorPos
ScreenToClient
wsprintfW
DestroyWindow
SetCursor
LoadCursorW
RegisterWindowMessageW
GetSystemMetrics
LoadImageW
SetWindowPlacement
GetWindowPlacement
SetWindowRgn
ShowWindow
SetForegroundWindow
CreateWindowExW
AdjustWindowRect
RegisterClassExW
UpdateWindow
IsWindowVisible
IsIconic
SetTimer
KillTimer
FindWindowW
BringWindowToTop
SetWindowTextW
GetDlgItem
EndDialog
GetWindowLongW
SetWindowLongW
CreateDialogParamW
LoadStringW
SendMessageW
MoveWindow
GetWindowRect
PostMessageW
InvalidateRect
TrackMouseEvent
SetWindowPos
ReleaseCapture
SetCapture
EnableMenuItem
DefWindowProcW
SendDlgItemMessageW
GetWindowTextW
IsDlgButtonChecked
EnableWindow
MessageBoxA
SetMenuItemInfoW
AppendMenuW
CreatePopupMenu
DestroyMenu
TrackPopupMenu
SetDlgItemTextW
GetClientRect
GetDlgItemTextW
EndPaint
BeginPaint
GetDesktopWindow
GetAsyncKeyState
ReleaseDC
SetRect
GetDC

gdi32

GetObjectW
DeleteObject
CreateCompatibleBitmap
SetTextColor
SetBkMode
SetTextAlign
CreateFontW
ExtTextOutW
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreatePolygonRgn

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW

Exports

Exports

RMACreateInstance

Sections

.text
Size: 696KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RealPlayer/Apps/record_date.exe
.exe windows:4 windows x86 arch:x86

a2f422b210ccd9065112597c9f5999d5

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12-03-2008 00:00

Not After

11-05-2010 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e3:96:1e:f4:a2:1e:16:5b:3a:22:dd:e3:bd:41:de:72:c7:c2:fb:eb
Signer

Actual PE Digest

e3:96:1e:f4:a2:1e:16:5b:3a:22:dd:e3:bd:41:de:72:c7:c2:fb:eb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathW

kernel32

SetLastError
SetEnvironmentVariableA
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
GetLastError
FindFirstFileW
CloseHandle
GetTimeZoneInformation
FileTimeToSystemTime
CreateFileW
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
FindClose
FileTimeToLocalFileTime
GetDriveTypeW
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
Sleep
RtlUnwind
GetFullPathNameW
GetCurrentDirectoryA
ReadFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetDriveTypeA
CreateFileA
CompareStringA
CompareStringW

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RealPlayer/Apps/record_email.exe
.exe windows:4 windows x86 arch:x86

4dfc0ce93284db6948e17d715fe25cfe

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12-03-2008 00:00

Not After

11-05-2010 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

af:1c:ff:fa:be:84:de:27:eb:f0:89:65:cf:c6:3c:d1:2f:18:76:25
Signer

Actual PE Digest

af:1c:ff:fa:be:84:de:27:eb:f0:89:65:cf:c6:3c:d1:2f:18:76:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\code32\Mains\Install\All\record_email\mtstaticrt\record_email.pdb

Imports

shell32

SHGetSpecialFolderPathW

kernel32

InterlockedIncrement
SetEnvironmentVariableA
GetLastError
CreateDirectoryW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetTimeZoneInformation
FileTimeToSystemTime
FindFirstFileW
CreateFileW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
FindClose
FileTimeToLocalFileTime
GetDriveTypeW
DeleteFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
Sleep
RtlUnwind
GetFullPathNameW
GetCurrentDirectoryA
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetDriveTypeA
CreateFileA
CompareStringA
CompareStringW

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RealPlayer/Apps/registryCleanUsers.exe
.exe windows:4 windows x86 arch:x86

8ec0aa31124b95b91829e994d0416204

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12-03-2008 00:00

Not After

11-05-2010 23:59

Subject

CN=Power Technology,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=www.fxsound.com,O=Power Technology,L=Brisbane,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9f:d6:6a:f2:4e:92:ed:24:26:bc:09:a2:f9:70:1d:b9:1e:78:fb:af
Signer

Actual PE Digest

9f:d6:6a:f2:4e:92:ed:24:26:bc:09:a2:f9:70:1d:b9:1e:78:fb:af

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumKeyW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW

kernel32

WideCharToMultiByte
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
MultiByteToWideChar
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
lstrlenW
GetCurrentProcessId

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RealPlayer/Help/DFX Manual.chm
.chm
RealPlayer/Icons/Help_16_16.ico
RealPlayer/Icons/dfx.ico
RealPlayer/Presets/Factsoft/1.fac
RealPlayer/Presets/Factsoft/10.fac
RealPlayer/Presets/Factsoft/11.fac
RealPlayer/Presets/Factsoft/12.fac
RealPlayer/Presets/Factsoft/13.fac
RealPlayer/Presets/Factsoft/14.fac
RealPlayer/Presets/Factsoft/15.fac
RealPlayer/Presets/Factsoft/16.fac
RealPlayer/Presets/Factsoft/17.fac
RealPlayer/Presets/Factsoft/18.fac
RealPlayer/Presets/Factsoft/19.fac
RealPlayer/Presets/Factsoft/2.fac
RealPlayer/Presets/Factsoft/20.fac
RealPlayer/Presets/Factsoft/21.fac
RealPlayer/Presets/Factsoft/22.fac
RealPlayer/Presets/Factsoft/23.fac
RealPlayer/Presets/Factsoft/24.fac
RealPlayer/Presets/Factsoft/25.fac
RealPlayer/Presets/Factsoft/26.fac
RealPlayer/Presets/Factsoft/27.fac
RealPlayer/Presets/Factsoft/28.fac
RealPlayer/Presets/Factsoft/29.fac
RealPlayer/Presets/Factsoft/3.fac
RealPlayer/Presets/Factsoft/30.fac
RealPlayer/Presets/Factsoft/31.fac
RealPlayer/Presets/Factsoft/32.fac
RealPlayer/Presets/Factsoft/33.fac
RealPlayer/Presets/Factsoft/34.fac
RealPlayer/Presets/Factsoft/35.fac
RealPlayer/Presets/Factsoft/36.fac
RealPlayer/Presets/Factsoft/37.fac
RealPlayer/Presets/Factsoft/38.fac
RealPlayer/Presets/Factsoft/39.fac
RealPlayer/Presets/Factsoft/4.fac
RealPlayer/Presets/Factsoft/5.fac
RealPlayer/Presets/Factsoft/6.fac
RealPlayer/Presets/Factsoft/7.fac
RealPlayer/Presets/Factsoft/8.fac
RealPlayer/Presets/Factsoft/9.fac
RealPlayer/Splash/hover_bullets.bmp
RealPlayer/Splash/hover_continue.bmp
RealPlayer/Splash/hover_logo.bmp
RealPlayer/Splash/hover_purchase.bmp
RealPlayer/Splash/hover_register.bmp
RealPlayer/Splash/hover_website.bmp
RealPlayer/Splash/splash_main.bmp
RealPlayer/Splash/splash_skin_definition.txt
uninstall_RealPlayer.exe.nsis
DFX.for.RealPlayer.v9.103/lpk.dll
.dll windows:5 windows x86 arch:x86

00c5fd00087020a0645079ce30f4148b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls

user32

wsprintfW

shell32

ord64
ord92

shlwapi

SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06Certificate

Extended Key Usages

Key Usages

a4:fd:a2:94:dd:87:c2:d6:ba:87:98:44:79:0c:a5:8a:e3:68:af:e1Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 52KB

.rsrc Size: 39KB - Virtual size: 39KB

3f3ba99c7a17c84031710235ee2f7ba9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19Certificate

Extended Key Usages

Key Usages

d2:63:69:d7:6a:1d:ce:e5:92:2c:8c:89:18:ae:76:5e:12:45:b4:35Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

version

comctl32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 99KB

.rsrc Size: 3KB - Virtual size: 3KB

3f3ba99c7a17c84031710235ee2f7ba9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

27:e0:24:eb:a8:98:68:df:d2:5f:63:05:80:55:06
Certificate

a4:fd:a2:94:dd:87:c2:d6:ba:87:98:44:79:0c:a5:8a:e3:68:af:e1
Signer

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 52KB

.rsrc
Size: 39KB - Virtual size: 39KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19
Certificate

d2:63:69:d7:6a:1d:ce:e5:92:2c:8c:89:18:ae:76:5e:12:45:b4:35
Signer

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 99KB

.rsrc
Size: 3KB - Virtual size: 3KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19
Certificate

c8:31:b0:3e:b3:6d:ab:d2:f7:c3:aa:93:bf:2d:1e:2f:db:3c:ff:9d
Signer

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 99KB

.rsrc
Size: 3KB - Virtual size: 3KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

67:c5:02:b4:b0:01:04:dc:bb:fe:09:31:d4:b1:19
Certificate

73:bf:eb:dd:c9:80:cd:58:d1:cd:7c:fe:24:5b:4b:4b:ce:3c:05:1b
Signer

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 99KB

.rsrc
Size: 3KB - Virtual size: 3KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 1012B