ZrSoft_ (EasyCrack4302)[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

ZrSoft_ (EasyCrack4302).rar
Size

45.2MB
MD5

ee0421732e639cab311ebd6a89a7f423
SHA1

03326de0c8ac3d444e733ec57f5591a00458d6a6
SHA256

fba507441fd482d20eb17505d4cd463daf338edc3959917eb39578ef0ea42da2
SHA512

57b214ff48db8507f81a4a5e4c72c56d8a14e36a614f6def5dcc74f7e23cb7f278d820ccf67c86cea8e437edc038cb3bbbeeed8f8e6773dd4a7ed9a7b02de51f
SSDEEP

786432:cLKMJXaAUgM7zODk31pNTvr/+BQYOoB75zscz3t5GHwRBzTgMa0Lq:aMpPt1pNr/WQYOoB7hs83nGHMBH802

Score

3^/10

Malware Config

Signatures

Unsigned PE 16 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ZrSoft_/DAC/WebRuntimeManager.dll
unpack001/ZrSoft_/DAC/WebcamUi.dll
unpack001/ZrSoft_/DAC/wbiosrvc.dll
unpack001/ZrSoft_/DAC/wcmsvc.dll
unpack001/ZrSoft_/DAC/wcnwiz.dll
unpack001/ZrSoft_/DAC/wdc.dll
unpack001/ZrSoft_/DAC/wdstftp.dll
unpack001/ZrSoft_/DAC/webio.dll
unpack001/ZrSoft_/DAC/webplatstorageserver.dll
unpack001/ZrSoft_/DAC/werconcpl.dll
unpack001/ZrSoft_/DAC/werui.dll
unpack001/ZrSoft_/DAC/wevtsvc.dll
unpack001/ZrSoft_/DAC/wfascim.dll
unpack001/ZrSoft_/DAC/wiaaut.dll
unpack001/ZrSoft_/DAC/wiaservc.dll
unpack001/ZrSoft_/ZrSoft_.exe

Files

ZrSoft_ (EasyCrack4302).rar
.rar

Password: EasyCrack4302
ZrSoft_/Client SDK/80/COM/sqlvdi.dll
.dll regsvr32 windows:6 windows x86 arch:x86

Password: EasyCrack4302

6499b940213d268aa405068355eafe37

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6
Signer

Actual PE Digest

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\sh\s19c\0719_152503\cmd\18\obj\x86retail\sql\ntdbms\storeng\dmu\dmpld\vdi\sql\sqlvdi.vcxproj\sqlvdi.pdb

Imports

kernel32

OpenSemaphoreW
CreateFileW
WaitForMultipleObjectsEx
WriteFile
ReleaseSemaphore
ReadFile
GetTickCount
ResetEvent
WaitForSingleObjectEx
SetEvent
ProcessIdToSessionId
CreateEventW
GetComputerNameW
GetCurrentThread
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcessId
LocalFree
FormatMessageW
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
CreateSemaphoreW
CloseHandle
GetLastError
OpenProcess
UnmapViewOfFile
OpenFileMappingW
GetEnvironmentVariableW
SetLastError
HeapFree
GetFileAttributesW
MultiByteToWideChar
HeapAlloc
GetProcessHeap
WideCharToMultiByte
VirtualQuery
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetACP
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
WriteConsoleW
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
GetSystemInfo
GetVersionExW
CompareStringW
InitializeCriticalSection

advapi32

SetSecurityDescriptorDacl
CloseServiceHandle
OpenSCManagerW
SetEntriesInAclW
CreateWellKnownSid
ConvertStringSidToSidW
RegEnumKeyExW
IsValidSid
OpenProcessToken
InitializeSecurityDescriptor
SetSecurityInfo
QueryServiceConfigW
OpenServiceW
BuildTrusteeWithSidW
OpenThreadToken
MakeSelfRelativeSD
LookupAccountNameW
GetSecurityInfo
GetTokenInformation
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyExW
RegSetValueExW
RegSetValueExA
RegOpenKeyExA
GetLengthSid
CopySid
RegQueryValueExW
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
RegEnumKeyExA

ole32

StringFromGUID2
CoCreateGuid
StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Client SDK/80/Tools/Binn/sqlvdi.dll
.dll regsvr32 windows:6 windows x86 arch:x86

Password: EasyCrack4302

6499b940213d268aa405068355eafe37

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6
Signer

Actual PE Digest

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\sh\s19c\0719_152503\cmd\18\obj\x86retail\sql\ntdbms\storeng\dmu\dmpld\vdi\sql\sqlvdi.vcxproj\sqlvdi.pdb

Imports

kernel32

OpenSemaphoreW
CreateFileW
WaitForMultipleObjectsEx
WriteFile
ReleaseSemaphore
ReadFile
GetTickCount
ResetEvent
WaitForSingleObjectEx
SetEvent
ProcessIdToSessionId
CreateEventW
GetComputerNameW
GetCurrentThread
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcessId
LocalFree
FormatMessageW
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
CreateSemaphoreW
CloseHandle
GetLastError
OpenProcess
UnmapViewOfFile
OpenFileMappingW
GetEnvironmentVariableW
SetLastError
HeapFree
GetFileAttributesW
MultiByteToWideChar
HeapAlloc
GetProcessHeap
WideCharToMultiByte
VirtualQuery
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetACP
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
WriteConsoleW
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
GetSystemInfo
GetVersionExW
CompareStringW
InitializeCriticalSection

advapi32

SetSecurityDescriptorDacl
CloseServiceHandle
OpenSCManagerW
SetEntriesInAclW
CreateWellKnownSid
ConvertStringSidToSidW
RegEnumKeyExW
IsValidSid
OpenProcessToken
InitializeSecurityDescriptor
SetSecurityInfo
QueryServiceConfigW
OpenServiceW
BuildTrusteeWithSidW
OpenThreadToken
MakeSelfRelativeSD
LookupAccountNameW
GetSecurityInfo
GetTokenInformation
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyExW
RegSetValueExW
RegSetValueExA
RegOpenKeyExA
GetLengthSid
CopySid
RegQueryValueExW
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
RegEnumKeyExA

ole32

StringFromGUID2
CoCreateGuid
StringFromCLSID
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Client SDK/90/Shared/Resources/1028/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1031/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1033/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1036/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1040/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1041/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1042/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1046/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/1049/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/2052/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/90/Shared/Resources/3082/License_SysClrTypes.rtf
.rtf
ZrSoft_/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
ZrSoft_/Client SDK/ODBC/170/SDK/Include/msodbcsql.h
ZrSoft_/Client SDK/ODBC/170/SDK/Lib/x64/msodbcsql17.lib
ZrSoft_/Client SDK/ODBC/170/SDK/Lib/x86/msodbcsql17.lib
ZrSoft_/DAC/WebRuntimeManager.dll
.dll windows:10 windows x64 arch:x64

Password: EasyCrack4302

b2cc1a5951aba90f1a8e416e2e23f199

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WebRuntimeManager.pdb

Imports

msvcp_win

??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?_Incref@facet@locale@std@@UEAAXXZ

api-ms-win-crt-string-l1-1-0

wcsncmp
wcslen
memset
wcscmp
wcsnlen

api-ms-win-crt-runtime-l1-1-0

_wassert
_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__register_onexit_function
_o__seh_filter_dll
_o__wcsicmp
_o__wcsnicmp
_o__wcstoui64
_o__wtof
_o__wtoi
_o_ceil
_o_free
_o_isalpha
_o_isdigit
_o_isxdigit
_o_malloc
_o_memcpy_s
_o_realloc
_o_strtol
_o_terminate
_o_toupper
_o_wcscat_s
_o_wcscpy_s
_o_wcstod
_o_wcstol
memmove
memcpy
memcmp
__C_specific_handler
_o__itow_s
_o__itow
_o__execute_onexit_table
_o__errno
wcschr
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__i64tow_s
_CxxThrowException
__std_terminate
__CxxFrameHandler3

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleHandleExW
LoadLibraryExW
GetProcAddress
GetModuleFileNameW
DisableThreadLibraryCalls
GetModuleFileNameA
FreeLibrary

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce
Sleep
InitOnceComplete
InitOnceBeginInitialize

api-ms-win-core-synch-l1-1-0

ReleaseMutex
SetWaitableTimer
ReleaseSRWLockExclusive
WaitForSingleObject
CreateEventW
AcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSemaphore
ReleaseSRWLockShared
CreateSemaphoreExW
TryAcquireSRWLockExclusive
AcquireSRWLockShared
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventExW
CancelWaitableTimer
InitializeCriticalSectionEx
OpenSemaphoreW
SetEvent
InitializeCriticalSection
InitializeSRWLock
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjectsEx
ResetEvent
CreateMutexExW
OpenEventW

api-ms-win-core-heap-l1-1-0

HeapSetInformation
HeapReAlloc
GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetErrorMode
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
SetLastError

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWriteEx
EventWriteTransfer
EventSetInformation
EventProviderEnabled
EventRegister

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-processthreads-l1-1-0

SuspendThread
GetCurrentProcessId
CreateThread
OpenProcessToken
SetThreadPriority
OpenThread
GetCurrentProcess
OpenThreadToken
InitializeProcThreadAttributeList
TerminateProcess
CreateProcessAsUserW
GetCurrentThreadId
UpdateProcThreadAttribute
SetPriorityClass
GetExitCodeProcess
GetProcessIdOfThread
GetThreadPriority
GetCurrentThread

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoOriginateErrorW
RoOriginateError
SetRestrictedErrorInfo
GetRestrictedErrorInfo

api-ms-win-core-localization-l1-2-0

LocaleNameToLCID
FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

oleaut32

LPSAFEARRAY_UserUnmarshal
VARIANT_UserFree
VARIANT_UserUnmarshal
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserFree
SysFreeString
LPSAFEARRAY_UserSize
VARIANT_UserMarshal64
VARIANT_UserSize64
BSTR_UserFree
SysStringByteLen
SysAllocStringByteLen
SafeArrayCopy
BSTR_UserUnmarshal64
SafeArrayAccessData
LPSAFEARRAY_UserSize64
VARIANT_UserUnmarshal64
VARIANT_UserFree64
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal64
VARIANT_UserMarshal
LPSAFEARRAY_UserMarshal64
VARIANT_UserSize
SysStringLen
SysAllocStringLen
VarBstrCmp
BSTR_UserUnmarshal
SafeArrayDestroy
VariantInit
SafeArrayGetUBound
BSTR_UserMarshal64
SafeArrayGetLBound
BSTR_UserSize64
BSTR_UserFree64
SysAllocString
SafeArrayUnaccessData
SafeArrayCreate
VariantClear
VariantCopy
BSTR_UserMarshal
BSTR_UserSize

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo
IsErrorPropagationEnabled

api-ms-win-core-file-l1-1-0

SetFileAttributesW
FindFirstFileW
GetFileAttributesW
CompareFileTime
FindClose
FindNextFileW

api-ms-win-shcore-stream-l1-1-0

IStream_Read
IStream_ReadStr

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoActivateInstance

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent
OpenProcess

api-ms-win-security-base-l1-1-0

GetTokenInformation
IsValidSid
GetLengthSid
GetKernelObjectSecurity
CopySid
GetAce
GetSecurityDescriptorSacl

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWait
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolTimer
TrySubmitThreadpoolCallback
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetTickCount
GetSystemTimeAsFileTime
GetSystemDirectoryW

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW
RegEnumValueW
RegDeleteValueW
RegEnumKeyExW
RegDeleteTreeW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegGetValueW
RegQueryValueExW
RegCreateKeyExW

api-ms-win-core-path-l1-1-0

PathCchCombine
PathCchAppend

userenv

GetAppContainerRegistryLocation

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-shell-shdirectory-l1-1-0

ord290

rpcrt4

CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
RpcImpersonateClient
RpcRevertToSelf
RpcServerInqCallAttributesW
RpcServerInqBindingHandle
I_RpcBindingInqLocalClientPID
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrGetUserMarshalInfo
RpcRaiseException
NdrStubForwardingFunction
I_RpcExceptionFilter
NdrDllGetClassObject
CStdStubBuffer_Connect
NdrCStdStubBuffer_Release
UuidCreate
NdrCStdStubBuffer2_Release
NdrClientCall3
RpcBindingCreateW
RpcBindingBind
RpcBindingFree
NdrStubCall3
CStdStubBuffer_Invoke
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
NdrOleFree
IUnknown_Release_Proxy
CStdStubBuffer_AddRef

api-ms-win-core-heap-l2-1-0

GlobalFree
LocalAlloc
LocalReAlloc
LocalFree
GlobalAlloc

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

iertutil

ord654
ord398
ord594
CreateIUriBuilder
CreateUri
ord57
ord870
ord650
ord651
ord37
ord99
ord790
ord852
ord652
ord855
ord798
ord661
ord79
ord596
ord76
ord89
ord78
ord230
ord68
ord65
ord61
ord597
ord795
ord140
ord300
ord144
ord794
ord797
ord792
ord85
ord74
ord81
ord793
ord134
ord791
ord796
ord854
ord63
ord70
ord67
ord64
ord850

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask
SHTaskPoolAllowThreadReuse

api-ms-win-downlevel-shlwapi-l1-1-0

StrStrIW
StrCmpICW
StrCmpCW
QISearch
StrChrW

api-ms-win-downlevel-shlwapi-l2-1-0

IStream_Reset
SHCreateMemStream
IStream_Size

api-ms-win-core-kernel32-legacy-l1-1-0

RaiseFailFastException
RegisterWaitForSingleObject
GetComputerNameW

ntdll

NtQueryInformationToken
NtCompareTokens
NtQueryWnfStateData
NtUpdateWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
NtQueryInformationProcess
RtlNtStatusToDosError
RtlIpv6AddressToStringExW
RtlIpv4AddressToStringExW
RtlGetDeviceFamilyInfoEnum
NtQuerySystemInformation

api-ms-win-core-psm-app-l1-1-0

PsmRegisterAppStateChangeNotification
PsmUnregisterAppStateChangeNotification

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
CompareStringOrdinal

rmclient

HamDisconnectForExtendedExecution
HamAddDependency
HamIsHostHamManaged
HamConnectForExtendedExecution

api-ms-win-crt-math-l1-1-0

_finite

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-namespace-l1-1-0

ClosePrivateNamespace
CreateBoundaryDescriptorW
OpenPrivateNamespaceW
DeleteBoundaryDescriptor

api-ms-win-core-debug-l1-1-1

CheckRemoteDebuggerPresent

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

api-ms-win-core-registry-l2-1-0

RegCreateKeyW
RegDeleteKeyTransactedW
RegOpenKeyTransactedW
RegCreateKeyTransactedW

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-synch-l1-2-1

CreateWaitableTimerW
WaitForMultipleObjects

api-ms-win-shcore-sysinfo-l1-1-0

GetCurrentProcessExplicitAppUserModelID

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW
ConvertStringSidToSidW

api-ms-win-shcore-path-l1-1-0

ord170

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-downlevel-advapi32-l1-1-0

AddAccessAllowedAceEx

api-ms-win-security-provider-l1-1-0

SetNamedSecurityInfoW
GetNamedSecurityInfoW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
SearchPathW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-url-l1-1-0

PathCreateFromUrlW

api-ms-win-shcore-obsolete-l1-1-0

SHStrDupW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalSize
GlobalFlags
GlobalUnlock
GlobalLock

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient23
ObjectStublessClient19
ObjectStublessClient26
ObjectStublessClient17
ObjectStublessClient16
ObjectStublessClient31
ObjectStublessClient21
ObjectStublessClient29
CStdStubBuffer2_Connect
NdrProxyForwardingFunction7
NdrProxyForwardingFunction9
NdrProxyForwardingFunction10
CStdAsyncStubBuffer_QueryInterface
NdrProxyForwardingFunction4
ObjectStublessClient4
CStdAsyncStubBuffer_AddRef
CStdStubBuffer2_QueryInterface
CStdAsyncStubBuffer_Connect
NdrProxyForwardingFunction11
ObjectStublessClient10
ObjectStublessClient9
ObjectStublessClient8
ObjectStublessClient6
NdrProxyForwardingFunction3
ObjectStublessClient5
ObjectStublessClient13
ObjectStublessClient7
ObjectStublessClient11
ObjectStublessClient28
ObjectStublessClient18
ObjectStublessClient14
ObjectStublessClient15
CStdAsyncStubBuffer_Invoke
ObjectStublessClient30
ObjectStublessClient22
ObjectStublessClient12
NdrProxyForwardingFunction5
ObjectStublessClient27
ObjectStublessClient20
ObjectStublessClient3
CStdStubBuffer2_Disconnect
NdrProxyForwardingFunction6
NdrProxyForwardingFunction8
CStdStubBuffer2_CountRefs
ObjectStublessClient24
ObjectStublessClient25
CStdAsyncStubBuffer_Release
CStdAsyncStubBuffer_Disconnect

api-ms-win-core-featurestaging-l1-1-0

UnsubscribeFeatureStateChangeNotification
SubscribeFeatureStateChangeNotification
RecordFeatureUsage
GetFeatureEnabledState

api-ms-win-core-featurestaging-l1-1-1

GetFeatureVariant

Exports

Exports

CreateMessagePortEventDispatcher
CreateServiceWorkerClientMessageDispatcher
CreateWebRuntimeFactory
CreateWebRuntimeNotificationFromEventArg
DllGetActivationFactory
EnsureServiceWorkerManagerComponent

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 905KB - Virtual size: 905KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/WebcamUi.dll
.dll windows:10 windows x64 arch:x64

Password: EasyCrack4302

741482553150988300fba6199a414497

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WebcamUi.pdb

Imports

msvcrt

toupper
_callnewh
_errno
strncpy_s
qsort
wcsrchr
wcscspn
realloc
rand_s
vswprintf_s
_vscwprintf
_wcsicmp
calloc
_vsnwprintf
memmove_s
memcpy_s
srand
time
free
_XcptFilter
malloc
_initterm
__C_specific_handler
_lock
_unlock
__dllonexit
_onexit
__CxxFrameHandler3
memmove
swscanf
memcpy
memcmp
strnlen
_amsg_exit
_purecall
memset

gdi32

Rectangle
CreatePen
GetStockObject
DeleteDC
GdiAlphaBlend
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
StretchDIBits
GetObjectW
DeleteObject
CreateDIBSection

ntdll

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
WinSqmIsOptedIn
WinSqmAddToStreamEx
WinSqmIncrementDWORD

kernel32

CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
ReleaseSemaphore
SetLastError
CreateSemaphoreExW
IsDebuggerPresent
GetProcessId
HeapDestroy
TlsGetValue
TlsSetValue
FreeLibrary
ResolveDelayLoadedAPI
DelayLoadFailureHook
HeapSize
OutputDebugStringW
CompareStringOrdinal
DecodePointer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EncodePointer
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeSRWLock
Sleep
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLastError
RaiseException
GetUserPreferredUILanguages
GetLocaleInfoEx
SizeofResource
OutputDebugStringA
LockResource
LoadResource
FindResourceExW
LocalFree
LocalReAlloc
LocalAlloc
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameA
DebugBreak
GetProcAddress
HeapReAlloc
GetDurationFormatEx
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
lstrcmpW
FormatMessageW
GetTickCount64
GetTempPathW
CreateEventExW
SubmitThreadpoolWork
CloseThreadpoolWork
WaitForThreadpoolWorkCallbacks
CreateThreadpoolWork
GetCurrentThread
SetThreadPriority
GlobalAlloc
GlobalUnlock
GlobalSize
GlobalLock
SetEvent
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventW
DeleteFileW
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection

ole32

ObjectStublessClient16
HWND_UserUnmarshal64
ObjectStublessClient10
ObjectStublessClient17
ObjectStublessClient9
ObjectStublessClient8
ObjectStublessClient6
HWND_UserMarshal64
HWND_UserMarshal
ObjectStublessClient5
ObjectStublessClient13
HWND_UserSize
HWND_UserSize64
ObjectStublessClient7
HWND_UserFree64
CStdStubBuffer2_CountRefs
HWND_UserFree
ObjectStublessClient18
HWND_UserUnmarshal
ObjectStublessClient3
ObjectStublessClient11
ObjectStublessClient14
ObjectStublessClient12
IIDFromString
StringFromCLSID
PropVariantClear
StringFromGUID2
GetHGlobalFromStream
CreateStreamOnHGlobal
CoGetApartmentType
CoWaitForMultipleHandles
CoReleaseMarshalData
RoGetAgileReference
CoGetInterfaceAndReleaseStream
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
ObjectStublessClient4
CStdStubBuffer2_Disconnect
CStdStubBuffer2_QueryInterface
NdrProxyForwardingFunction4
NdrProxyForwardingFunction5
NdrProxyForwardingFunction3
CStdStubBuffer2_Connect
ObjectStublessClient15

rpcrt4

NdrStubCall3
NdrStubForwardingFunction
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer2_Release
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release

shell32

SHCreateItemFromParsingName

shlwapi

PathCombineW
ord219
ord16
ord12
SHStrDupW
SHCreateStreamOnFileW
PathFindFileNameW

api-ms-win-shcore-scaling-l1-1-1

ord244

user32

ReleaseDC
GetDC
UnregisterClassA
GetWindow
GetPropW
EnumWindows
RemovePropW
SetPropW
IsWindowVisible
RegisterClassExW
DefWindowProcW
GetAncestor
SetCursorPos
GetCursorPos
PtInRect
SetRect
CopyRect
OffsetRect
SetWindowCompositionAttribute
IsRectEmpty
GetWindowRect
LoadCursorW
KillTimer
SetTimer
SetWindowPos
SetFocus
GetKeyState
CreateWindowExW
DestroyWindow
IsWindow
PostMessageW
SendMessageW
GetMonitorInfoW
MonitorFromWindow
LoadStringW

dui70

?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?SetToggleValue@TouchSwitch@DirectUI@@QEAAXH@Z
?GetSelectionIndex@TouchSelect@DirectUI@@QEAAHXZ
?GetSelection@TouchSelect@DirectUI@@QEAAPEAVElement@2@XZ
?RemoveAll@TouchSelect@DirectUI@@QEAAXXZ
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z
DUIStopPVLAnimation
DuiCreateObject
?SetPressed@TouchButton@DirectUI@@QEAAJ_N@Z
?GetClassInfoPtr@ModernProgressBar@DirectUI@@SAPEAUIClassInfo@2@XZ
?SetPosition@ModernProgressBar@DirectUI@@QEAAJH@Z
?GetClassInfoPtr@ModernProgressRing@DirectUI@@SAPEAUIClassInfo@2@XZ
?RemoveListener@Element@DirectUI@@QEAAXPEAUIElementListener@2@@Z
?TriggeredAnimationComplete@PVLAnimation@DirectUI@@SA?AVUID@@XZ
?_OnUIStateChanged@TouchHWNDElement@DirectUI@@MEAAXGG@Z
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UEAAXPEAPEBGPEAI@Z
?IsMSAAEnabled@TouchHWNDElement@DirectUI@@UEAA_NXZ
?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnWmSettingChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z
?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetClassInfoW@TouchHWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ
?RemoveTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?ActivateTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
?UpdateTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?MessageCallback@TouchHWNDElement@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?OnDestroy@TouchHWNDElement@DirectUI@@UEAAXXZ
?OnKeyFocusMoved@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@0@Z
?OnInput@TouchHWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@TouchHWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
??1TouchHWNDElement@DirectUI@@UEAA@XZ
??0TouchHWNDElement@DirectUI@@QEAA@XZ
?OnEvent@TouchHWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?ScaleChanged@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ
?ThemeChange@HWNDElement@DirectUI@@SA?AVUID@@XZ
?WndProc@TouchHWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
?SetParseErrorCallback@DUIXmlParser@DirectUI@@QEAAXP6AXPEBG0HPEAX@Z1@Z
?CreateParser@DUIFactory@DirectUI@@QEAAJXZ
?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ
?Initialize@TouchHWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
?FireRightClickEvent@TouchButton@DirectUI@@UEAAXIPEAUtagPOINT@@@Z
?FireClickEvent@TouchButton@DirectUI@@UEAAXIIW4ClickDevice@12@PEAUtagPOINT@@@Z
?GetForegroundColorRef@TouchButton@DirectUI@@UEAAJPEAK@Z
?DefaultAction@TouchButton@DirectUI@@UEAAJXZ
?OnUnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z
?OnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z
?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UEAAXPEAUtagRECT@@@Z
?GetContentSize@RichText@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@RichText@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnEvent@TouchButton@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnInput@TouchButton@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?Register@TouchButton@DirectUI@@SAJXZ
?SetTooltip@Element@DirectUI@@QEAAJ_N@Z
?HeightProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetFont@Element@DirectUI@@QEAAJPEBG@Z
?AccDescProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?ForegroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?IsEqual@Value@DirectUI@@QEAA_NPEAV12@@Z
?AccValueProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetFontSizeRuns@RichText@DirectUI@@QEAAJPEBG@Z
?SetFontColorRuns@RichText@DirectUI@@QEAAJPEBG@Z
?GetPressed@TouchButton@DirectUI@@QEAA_NXZ
?OnPropertyChanged@TouchButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?EnabledProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?PressedProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetContentAlign@Element@DirectUI@@QEAAJH@Z
?GetContentAlign@Element@DirectUI@@QEAAHXZ
?KeyWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?Initialize@TouchButton@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
??1TouchButton@DirectUI@@UEAA@XZ
??0TouchButton@DirectUI@@QEAA@XZ
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?GetBoolTrue@Value@DirectUI@@SAPEAV12@XZ
?GetIntMinusOne@Value@DirectUI@@SAPEAV12@XZ
?GetStringNull@Value@DirectUI@@SAPEAV12@XZ
?_Fill@Element@DirectUI@@IEAAXPEAUHDC__@@KHHHH_N@Z
?PaddingProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
?GetBoolFalse@Value@DirectUI@@SAPEAV12@XZ
?GetColorTrans@Value@DirectUI@@SAPEAV12@XZ
ARGBColorFromEnumI
?SetCursorHandle@Element@DirectUI@@QEAAJPEAUHICON__@@@Z
?MouseWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetIntZero@Value@DirectUI@@SAPEAV12@XZ
?GetY@Element@DirectUI@@QEAAHXZ
?GetX@Element@DirectUI@@QEAAHXZ
?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z
?GetClassInfoPtr@Viewer@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@TouchButton@DirectUI@@SAPEAUIClassInfo@2@XZ
?SetY@Element@DirectUI@@QEAAJH@Z
?SetX@Element@DirectUI@@QEAAJH@Z
?Add@Element@DirectUI@@QEAAJPEAV12@@Z
?SetActive@Element@DirectUI@@QEAAJH@Z
?SetSuppressSetContact@TouchScrollViewer@DirectUI@@QEAAJ_N@Z
?SetHeight@Element@DirectUI@@QEAAJH@Z
?SetWidth@Element@DirectUI@@QEAAJH@Z
?SetMargin@Element@DirectUI@@QEAAJHHHH@Z
?SetXOffset@BaseScrollViewer@DirectUI@@QEAAJH@Z
?ReleaseSnapshot@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?SnapshotTransformElement@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?GetHeight@Element@DirectUI@@QEAAHXZ
?GetWidth@Element@DirectUI@@QEAAHXZ
?OnEvent@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?MultipleClick@TouchButton@DirectUI@@SA?AVUID@@XZ
?SemanticChange@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?ManipulationCompleted@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?SetSnapMode@TouchScrollViewer@DirectUI@@QEAAJH@Z
?GetSnapMode@TouchScrollViewer@DirectUI@@QEAAHXZ
?GetVisibleRect@TouchScrollViewer@DirectUI@@QEAAXPEAUtagRECT@@@Z
?ManipulationDelta@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?ManipulationStarted@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?ManipulationStarting@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?GetXOffset@BaseScrollViewer@DirectUI@@QEAAHXZ
?Scroll@BaseScrollBar@DirectUI@@SA?AVUID@@XZ
?VisibleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetSnapIntervalX@TouchScrollViewer@DirectUI@@QEAAJM@Z
?ZoomToRect@TouchScrollViewer@DirectUI@@QEAAJPEBUtagRECT@@_N@Z
?UpdateContentSize@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ
?ExtentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z
?NewChildElementsAdded@TouchScrollViewer@DirectUI@@QEAAXXZ
?Remove@Element@DirectUI@@QEAAJPEAV12@@Z
?Insert@Element@DirectUI@@QEAAJPEAV12@I@Z
?StartDefer@Element@DirectUI@@QEAAXPEAK@Z
?SetDirection@Element@DirectUI@@QEAAJH@Z
?SetManipulationVerticalAlignment@TouchScrollViewer@DirectUI@@QEAAJH@Z
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
?IsFirstElement@HWNDElement@DirectUI@@QEAA_NPEAVElement@2@@Z
?IsLastElement@HWNDElement@DirectUI@@QEAA_NPEAVElement@2@@Z
?GetKeyFocusedElement@HWNDElement@DirectUI@@SAPEAVElement@2@XZ
?ToggleUIState@HWNDElement@DirectUI@@QEAAX_N0@Z
?FireEvent@Element@DirectUI@@QEAAXPEAUEvent@2@_N1@Z
?KeyboardNavigate@Element@DirectUI@@SA?AVUID@@XZ
?CreateHostWindow@NativeHWNDHost@DirectUI@@UEAAPEAUHWND__@@KPEBG0KHHHHPEAU3@PEAUHMENU__@@PEAUHINSTANCE__@@PEAX@Z
??1NativeHWNDHost@DirectUI@@UEAA@XZ
??0NativeHWNDHost@DirectUI@@QEAA@XZ
?Destroy@NativeHWNDHost@DirectUI@@QEAAXXZ
?GetClassInfoW@Element@DirectUI@@UEAAPEAUIClassInfo@2@XZ
?EndDefer@Element@DirectUI@@QEAAXK@Z
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z
?SetWrapKeyboardNavigate@HWNDElement@DirectUI@@QEAAJ_N@Z
?ShowWindow@NativeHWNDHost@DirectUI@@QEAAXH@Z
RegisterPVLBehaviorFactory
?BroadcastEvent@Element@DirectUI@@QEAAXPEAUEvent@2@@Z
?Destroy@Layout@DirectUI@@QEAAXXZ
?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z
?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z
?DestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ
?GetExtent@Element@DirectUI@@QEAAPEBUtagSIZE@@PEAPEAVValue@2@@Z
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?CustomProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?CreateBool@Value@DirectUI@@SAPEAV12@_N@Z
?CreateInt@Value@DirectUI@@SAPEAV12@HW4DynamicScaleValue@@@Z
?MapElementPoint@Element@DirectUI@@QEAAXPEAV12@PEBUtagPOINT@@PEAU3@@Z
?RemoveLocalValue@Element@DirectUI@@QEAAJPEBUPropertyInfo@2@@Z
?GetImage@Value@DirectUI@@QEAAPEAX_NM@Z
?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QEAAJPEBUPropertyInfo@2@HPEAVValue@2@@Z
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHBITMAP__@@EI_N11@Z
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@PEBUPropertyInfo@2@HPEAUUpdateCache@2@@Z
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
?Release@Value@DirectUI@@QEAAXXZ
?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
??1DUIFactory@DirectUI@@QEAA@XZ
?LoadFromResource@DUIFactory@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG1PEAVElement@2@PEAKPEAPEAV42@1@Z
StrToID
?DestroyAll@Element@DirectUI@@QEAAJ_N@Z
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
??0Element@DirectUI@@QEAA@XZ
??1Element@DirectUI@@UEAA@XZ
?Initialize@Element@DirectUI@@QEAAJIPEAV12@PEAK@Z
?Click@Button@DirectUI@@SA?AVUID@@XZ
?Click@TouchButton@DirectUI@@SA?AVUID@@XZ
?SliderUpdated@TouchSlider@DirectUI@@SA?AVUID@@XZ
?SelectionChange@TouchSelect@DirectUI@@SA?AVUID@@XZ
?IsDescendent@Element@DirectUI@@QEAA_NPEAV12@@Z
?SetOnOffText@TouchSwitch@DirectUI@@QEAAXPEBG0@Z
?AddString@TouchSelect@DirectUI@@QEAAJPEBG@Z
?SetRangeMin@TouchSlider@DirectUI@@QEAAXH@Z
?SetRangeMax@TouchSlider@DirectUI@@QEAAXH@Z
?SetIsContinuous@TouchSlider@DirectUI@@QEAAJ_N@Z
?SetFireContinuousSliderEvent@TouchSlider@DirectUI@@QEAAX_N@Z
?SetStepCount@TouchSlider@DirectUI@@QEAAXH@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z
?SetToggleValue@TouchSwitch@DirectUI@@QEAAXH_N@Z
?SetThumbValue@TouchSlider@DirectUI@@QEAAXH_N@Z
?SetSelectionIndex@TouchSelect@DirectUI@@QEAAJH@Z
?Register@Element@DirectUI@@SAJXZ
??0CritSecLock@DirectUI@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
??1CritSecLock@DirectUI@@QEAA@XZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
??1ClassInfoBase@DirectUI@@UEAA@XZ
?GetClassInfoPtr@RichText@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@TouchScrollViewer@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@TouchSlider@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@TouchSwitch@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@TouchSelect@DirectUI@@SAPEAUIClassInfo@2@XZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnInput@Element@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnDestroy@Element@DirectUI@@UEAAXXZ
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
UnInitThread
InitProcessPriv
InitThread
UnInitProcessPriv

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1028/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Password: EasyCrack4302

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a7:a3:e9:d8:e0:2e:99:81:9f:ef:1f:cb:a6:85:45:78:8c:af:75:21:24:a1:49:97:de:4c:53:02:a7:16:8e:97
Signer

Actual PE Digest

a7:a3:e9:d8:e0:2e:99:81:9f:ef:1f:cb:a6:85:45:78:8c:af:75:21:24:a1:49:97:de:4c:53:02:a7:16:8e:97

Digest Algorithm

sha256

PE Digest Matches

true

2d:af:66:a1:5e:ce:a9:68:35:6d:11:6d:a7:8f:a0:c1:9c:c2:95:c3
Signer

Actual PE Digest

2d:af:66:a1:5e:ce:a9:68:35:6d:11:6d:a7:8f:a0:c1:9c:c2:95:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1031/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Password: EasyCrack4302

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:13:a6:2f:9e:bd:07:34:d7:fc:cd:a6:be:ab:45:fa:bf:8f:fc:ba:9a:62:e6:18:2d:1f:69:92:3b:be:86:56
Signer

Actual PE Digest

27:13:a6:2f:9e:bd:07:34:d7:fc:cd:a6:be:ab:45:fa:bf:8f:fc:ba:9a:62:e6:18:2d:1f:69:92:3b:be:86:56

Digest Algorithm

sha256

PE Digest Matches

true

64:4e:4e:b8:05:0a:3d:2e:7f:13:77:61:55:65:90:9f:8f:ff:46:70
Signer

Actual PE Digest

64:4e:4e:b8:05:0a:3d:2e:7f:13:77:61:55:65:90:9f:8f:ff:46:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1033/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Password: EasyCrack4302

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e9:81:d0:7f:bf:e9:2d:0f:f7:a8:7e:78:1a:f0:3f:92:22:c0:98:c2:4c:2b:a7:04:61:6e:25:f5:47:8b:f9:fe
Signer

Actual PE Digest

e9:81:d0:7f:bf:e9:2d:0f:f7:a8:7e:78:1a:f0:3f:92:22:c0:98:c2:4c:2b:a7:04:61:6e:25:f5:47:8b:f9:fe

Digest Algorithm

sha256

PE Digest Matches

true

a5:87:f7:ac:6f:f8:03:bf:64:7a:69:b6:f3:02:ff:2e:13:98:f4:e6
Signer

Actual PE Digest

a5:87:f7:ac:6f:f8:03:bf:64:7a:69:b6:f3:02:ff:2e:13:98:f4:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1036/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Password: EasyCrack4302

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:20:f3:0e:c7:5a:3c:96:fe:51:c2:36:44:89:76:2d:44:0f:3d:aa:35:07:38:68:24:0f:d0:93:79:d2:36:79
Signer

Actual PE Digest

1d:20:f3:0e:c7:5a:3c:96:fe:51:c2:36:44:89:76:2d:44:0f:3d:aa:35:07:38:68:24:0f:d0:93:79:d2:36:79

Digest Algorithm

sha256

PE Digest Matches

true

11:53:79:01:54:3a:83:38:51:bf:c7:55:aa:ff:f9:5a:17:c6:61:58
Signer

Actual PE Digest

11:53:79:01:54:3a:83:38:51:bf:c7:55:aa:ff:f9:5a:17:c6:61:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1040/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:51:3c:18:9b:34:ad:34:ca:23:45:41:0d:f9:3d:0e:d8:81:a4:22:bd:cb:b1:2b:0e:cf:97:57:35:5b:94:7d
Signer

Actual PE Digest

e5:51:3c:18:9b:34:ad:34:ca:23:45:41:0d:f9:3d:0e:d8:81:a4:22:bd:cb:b1:2b:0e:cf:97:57:35:5b:94:7d

Digest Algorithm

sha256

PE Digest Matches

true

54:50:2a:68:d5:12:8c:b6:0d:21:8c:20:0f:91:ce:1d:92:ac:8e:39
Signer

Actual PE Digest

54:50:2a:68:d5:12:8c:b6:0d:21:8c:20:0f:91:ce:1d:92:ac:8e:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1041/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:93:cc:90:9e:d1:d6:4d:67:4d:b2:8e:83:85:16:69:08:74:ee:c7:6f:ca:a8:1f:e1:f7:ce:7e:5a:52:98:ec
Signer

Actual PE Digest

65:93:cc:90:9e:d1:d6:4d:67:4d:b2:8e:83:85:16:69:08:74:ee:c7:6f:ca:a8:1f:e1:f7:ce:7e:5a:52:98:ec

Digest Algorithm

sha256

PE Digest Matches

true

39:93:ce:dd:9c:95:e5:6a:b5:68:69:73:3d:8a:04:35:74:d0:b3:7f
Signer

Actual PE Digest

39:93:ce:dd:9c:95:e5:6a:b5:68:69:73:3d:8a:04:35:74:d0:b3:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1042/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:22:73:33:46:4f:06:a5:7c:d9:05:d5:46:0d:5c:61:2c:f1:d1:ce:68:3e:7b:6e:5e:8e:02:9a:ac:b8:1e:8e
Signer

Actual PE Digest

e4:22:73:33:46:4f:06:a5:7c:d9:05:d5:46:0d:5c:61:2c:f1:d1:ce:68:3e:7b:6e:5e:8e:02:9a:ac:b8:1e:8e

Digest Algorithm

sha256

PE Digest Matches

true

6d:cc:44:5d:db:14:f2:0b:b1:b6:21:1d:08:59:32:4e:77:30:60:45
Signer

Actual PE Digest

6d:cc:44:5d:db:14:f2:0b:b1:b6:21:1d:08:59:32:4e:77:30:60:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1046/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:c9:71:17:c7:b4:94:b8:b9:46:6f:01:12:56:74:48:50:17:9f:2f:e7:83:34:48:37:52:70:13:92:b7:e7:90
Signer

Actual PE Digest

ec:c9:71:17:c7:b4:94:b8:b9:46:6f:01:12:56:74:48:50:17:9f:2f:e7:83:34:48:37:52:70:13:92:b7:e7:90

Digest Algorithm

sha256

PE Digest Matches

true

3e:2e:d5:fd:01:39:7f:45:ef:c9:50:81:ab:fe:1c:e5:ce:8b:55:08
Signer

Actual PE Digest

3e:2e:d5:fd:01:39:7f:45:ef:c9:50:81:ab:fe:1c:e5:ce:8b:55:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/1049/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:3b:37:d0:fa:bc:10:32:8e:eb:b1:8d:0e:23:39:52:8f:d2:ae:e0:7d:fa:cc:c0:cd:39:04:e1:8c:19:b5:09
Signer

Actual PE Digest

5c:3b:37:d0:fa:bc:10:32:8e:eb:b1:8d:0e:23:39:52:8f:d2:ae:e0:7d:fa:cc:c0:cd:39:04:e1:8c:19:b5:09

Digest Algorithm

sha256

PE Digest Matches

true

2f:74:12:f1:9c:ec:2b:0b:fb:bf:f8:a8:97:35:a2:cd:04:08:23:c4
Signer

Actual PE Digest

2f:74:12:f1:9c:ec:2b:0b:fb:bf:f8:a8:97:35:a2:cd:04:08:23:c4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/2052/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b8:02:54:02:4f:1e:3b:84:38:cc:89:ef:d6:c5:57:a2:04:b2:04:37:e2:f0:02:3b:f6:c1:c3:39:36:a2:01:f4
Signer

Actual PE Digest

b8:02:54:02:4f:1e:3b:84:38:cc:89:ef:d6:c5:57:a2:04:b2:04:37:e2:f0:02:3b:f6:c1:c3:39:36:a2:01:f4

Digest Algorithm

sha256

PE Digest Matches

true

32:51:9e:05:c0:0e:ab:42:8e:09:c7:c9:bb:88:02:46:74:07:c5:85
Signer

Actual PE Digest

32:51:9e:05:c0:0e:ab:42:8e:09:c7:c9:bb:88:02:46:74:07:c5:85

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/3082/DacUnpack.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:df:34:ea:f3:59:b7:a9:a2:99:ec:38:c8:0e:0c:8d:86:0a:d1:cc:88:5a:9a:12:d7:41:90:e2:cc:97:cf:4e
Signer

Actual PE Digest

0f:df:34:ea:f3:59:b7:a9:a2:99:ec:38:c8:0e:0c:8d:86:0a:d1:cc:88:5a:9a:12:d7:41:90:e2:cc:97:cf:4e

Digest Algorithm

sha256

PE Digest Matches

true

19:6d:cc:a5:e0:10:4b:22:ae:5c:25:fa:da:f5:ff:cf:e2:1d:95:b8
Signer

Actual PE Digest

19:6d:cc:a5:e0:10:4b:22:ae:5c:25:fa:da:f5:ff:cf:e2:1d:95:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/DacUnpack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:60:2d:8f:8d:04:79:17:0d:51:1f:6f:a2:e5:69:7e:10:fc:c2:ee:0c:b5:ed:43:fe:48:45:d4:30:5d:e3:cb
Signer

Actual PE Digest

54:60:2d:8f:8d:04:79:17:0d:51:1f:6f:a2:e5:69:7e:10:fc:c2:ee:0c:b5:ed:43:fe:48:45:d4:30:5d:e3:cb

Digest Algorithm

sha256

PE Digest Matches

true

1e:8b:4d:09:b1:1b:9d:66:27:61:65:b9:2b:4f:36:a0:71:68:9c:35
Signer

Actual PE Digest

1e:8b:4d:09:b1:1b:9d:66:27:61:65:b9:2b:4f:36:a0:71:68:9c:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DacUnpack.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/Microsoft.Data.Tools.Prototype.Dac.Service3.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:34:12:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/05/2012, 21:39

Not After

14/08/2013, 21:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:45:eb:d2:cd:5e:d4:13:00:34:79:c2:69:aa:67:fe:1b:c9:17:f8:82:71:6d:5e:69:5f:b7:59:cc:56:54:4e
Signer

Actual PE Digest

35:45:eb:d2:cd:5e:d4:13:00:34:79:c2:69:aa:67:fe:1b:c9:17:f8:82:71:6d:5e:69:5f:b7:59:cc:56:54:4e

Digest Algorithm

sha256

PE Digest Matches

true

04:69:6b:8b:32:4b:77:41:22:cf:3e:80:db:29:6d:5b:90:21:c1:88
Signer

Actual PE Digest

04:69:6b:8b:32:4b:77:41:22:cf:3e:80:db:29:6d:5b:90:21:c1:88

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\bt\525\target\retail\i386\Contracts\Microsoft.Data.Tools.Prototype.Dac.Service3.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/Microsoft.Data.Tools.Schema.Sql.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

31:7c:78:01:9d:8c:e7:5f:ad:2e:72:67:66:a4:84:55:cd:a0:31:a9
Signer

Actual PE Digest

31:7c:78:01:9d:8c:e7:5f:ad:2e:72:67:66:a4:84:55:cd:a0:31:a9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\bt\9391732\target\retail\i386\SqlData\Microsoft.Data.Tools.Schema.Sql.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/Microsoft.Data.Tools.Schema.Tasks.Sql.11.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:34:12:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/05/2012, 21:39

Not After

14/08/2013, 21:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:8b:9f:dd:b9:33:f7:97:44:46:07:a8:d2:7b:19:bd:a7:1e:89:b9:1a:3d:08:f4:70:aa:85:5c:88:72:83:44
Signer

Actual PE Digest

0d:8b:9f:dd:b9:33:f7:97:44:46:07:a8:d2:7b:19:bd:a7:1e:89:b9:1a:3d:08:f4:70:aa:85:5c:88:72:83:44

Digest Algorithm

sha256

PE Digest Matches

true

ed:d4:f9:c3:fd:c4:dc:48:3e:a6:a0:af:6c:d1:c0:bf:b5:fb:5f:98
Signer

Actual PE Digest

ed:d4:f9:c3:fd:c4:dc:48:3e:a6:a0:af:6c:d1:c0:bf:b5:fb:5f:98

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\bt\525\target\retail\i386\SqlTasks\Microsoft.Data.Tools.Schema.Tasks.Sql.11.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/Microsoft.Data.Tools.Schema.Utilities.Sql.11.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:34:12:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/05/2012, 21:39

Not After

14/08/2013, 21:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cd:f3:e7:c6:e1:44:d5:53:a8:37:eb:c2:20:f1:76:64:5b:b8:02:9a:09:58:a7:8d:0d:6c:9a:96:17:82:2d:ae
Signer

Actual PE Digest

cd:f3:e7:c6:e1:44:d5:53:a8:37:eb:c2:20:f1:76:64:5b:b8:02:9a:09:58:a7:8d:0d:6c:9a:96:17:82:2d:ae

Digest Algorithm

sha256

PE Digest Matches

true

3c:c1:0f:d6:53:a1:fa:e8:e7:13:47:18:5c:24:a6:01:49:06:91:26
Signer

Actual PE Digest

3c:c1:0f:d6:53:a1:fa:e8:e7:13:47:18:5c:24:a6:01:49:06:91:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\bt\525\target\retail\i386\SchemaToolsSql\Microsoft.Data.Tools.Schema.Utilities.Sql.11.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/Microsoft.Data.Tools.Utilities.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

93:d1:d4:be:67:82:e5:2a:f7:af:f1:e4:a2:d4:46:a9:fc:5f:5b:62
Signer

Actual PE Digest

93:d1:d4:be:67:82:e5:2a:f7:af:f1:e4:a2:d4:46:a9:fc:5f:5b:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\bt\9391732\target\retail\i386\DataUtilities\Microsoft.Data.Tools.Utilities.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/Microsoft.SqlServer.Dac.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d6:33:2c:34:ba:d8:0b:a3:b6:45:32:47:67:e6:e5:67:8f:9d:f1:5e
Signer

Actual PE Digest

d6:33:2c:34:ba:d8:0b:a3:b6:45:32:47:67:e6:e5:67:8f:9d:f1:5e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\bt\9391732\target\retail\i386\DeploymentApi\Microsoft.SqlServer.Dac.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/Redist_DACFramework.txt
ZrSoft_/DAC/bin/SqlPackage.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bf:3f:7a:dd:52:a3:fc:37:dd:b6:bc:1b:c1:0e:a9:c4:4e:a9:dc:e8
Signer

Actual PE Digest

bf:3f:7a:dd:52:a3:fc:37:dd:b6:bc:1b:c1:0e:a9:c4:4e:a9:dc:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\bt\9391732\target\retail\i386\CommandLineTool\SqlPackage.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/SqlPackage.exe.config
ZrSoft_/DAC/bin/SsdtCompatibility.xml
ZrSoft_/DAC/bin/de/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:76:dd:9b:1c:cf:c0:f5:63:f6:a5:3b:b3:8b:de:f0:94:20:e0:57:38:0b:28:c5:76:d1:86:a3:13:44:14:7d
Signer

Actual PE Digest

c2:76:dd:9b:1c:cf:c0:f5:63:f6:a5:3b:b3:8b:de:f0:94:20:e0:57:38:0b:28:c5:76:d1:86:a3:13:44:14:7d

Digest Algorithm

sha256

PE Digest Matches

true

0c:32:58:e9:ad:ef:69:a3:1d:25:e5:d9:d6:bf:80:60:c7:ff:47:7d
Signer

Actual PE Digest

0c:32:58:e9:ad:ef:69:a3:1d:25:e5:d9:d6:bf:80:60:c7:ff:47:7d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/de/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

39:e4:55:78:f1:fd:fa:f3:40:bb:c8:4c:8e:6a:6c:75:07:33:8c:69
Signer

Actual PE Digest

39:e4:55:78:f1:fd:fa:f3:40:bb:c8:4c:8e:6a:6c:75:07:33:8c:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/de/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

51:74:92:bb:3f:1c:e5:e5:36:c6:10:39:5b:96:02:a4:a7:e3:2d:9e
Signer

Actual PE Digest

51:74:92:bb:3f:1c:e5:e5:36:c6:10:39:5b:96:02:a4:a7:e3:2d:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/de/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4a:a9:bb:5c:23:06:68:d7:c4:67:88:ea:2d:d4:b8:92:3b:fe:b1:7b
Signer

Actual PE Digest

4a:a9:bb:5c:23:06:68:d7:c4:67:88:ea:2d:d4:b8:92:3b:fe:b1:7b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/de/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d3:4f:1f:21:e0:ee:fc:c9:79:98:92:c4:09:0d:84:1b:83:32:c7:ae
Signer

Actual PE Digest

d3:4f:1f:21:e0:ee:fc:c9:79:98:92:c4:09:0d:84:1b:83:32:c7:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/en/License_DACFx.txt
ZrSoft_/DAC/bin/es/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:ed:27:5d:04:b4:4b:1f:54:77:29:a8:f0:b1:7c:fd:b0:dc:b0:c7:92:94:d3:07:e2:8f:81:05:53:3d:3e:da
Signer

Actual PE Digest

1d:ed:27:5d:04:b4:4b:1f:54:77:29:a8:f0:b1:7c:fd:b0:dc:b0:c7:92:94:d3:07:e2:8f:81:05:53:3d:3e:da

Digest Algorithm

sha256

PE Digest Matches

true

bf:5c:c5:c6:fd:73:dd:40:29:bd:53:ec:f7:45:d2:59:82:be:99:5a
Signer

Actual PE Digest

bf:5c:c5:c6:fd:73:dd:40:29:bd:53:ec:f7:45:d2:59:82:be:99:5a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/es/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

fd:74:5b:5f:5f:8d:24:df:2d:2b:55:d6:25:29:df:d0:8b:1f:7c:89
Signer

Actual PE Digest

fd:74:5b:5f:5f:8d:24:df:2d:2b:55:d6:25:29:df:d0:8b:1f:7c:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/es/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e7:ed:04:2d:43:d5:1b:17:fc:ad:99:61:46:38:4d:62:40:b9:8b:ee
Signer

Actual PE Digest

e7:ed:04:2d:43:d5:1b:17:fc:ad:99:61:46:38:4d:62:40:b9:8b:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/es/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5a:8a:22:45:65:3c:b6:72:a9:91:49:99:08:92:d0:bf:17:23:3f:6a
Signer

Actual PE Digest

5a:8a:22:45:65:3c:b6:72:a9:91:49:99:08:92:d0:bf:17:23:3f:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/es/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

22:d4:25:d5:15:0e:03:3b:e9:2c:d7:dc:6f:7b:35:3b:61:eb:1a:c0
Signer

Actual PE Digest

22:d4:25:d5:15:0e:03:3b:e9:2c:d7:dc:6f:7b:35:3b:61:eb:1a:c0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/fr/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:8f:ff:77:78:72:b3:ad:6b:22:08:2a:7c:af:f0:6a:45:6a:83:5b:9f:d0:da:4a:1f:93:fa:00:ca:86:73:4a
Signer

Actual PE Digest

b0:8f:ff:77:78:72:b3:ad:6b:22:08:2a:7c:af:f0:6a:45:6a:83:5b:9f:d0:da:4a:1f:93:fa:00:ca:86:73:4a

Digest Algorithm

sha256

PE Digest Matches

true

02:8e:6a:7b:51:bf:2c:3b:98:60:1d:47:5f:9a:1d:c9:fa:1e:d4:4b
Signer

Actual PE Digest

02:8e:6a:7b:51:bf:2c:3b:98:60:1d:47:5f:9a:1d:c9:fa:1e:d4:4b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/fr/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

78:38:5c:93:c6:11:0b:b6:87:b4:7e:73:34:49:eb:e0:b7:ff:cb:7d
Signer

Actual PE Digest

78:38:5c:93:c6:11:0b:b6:87:b4:7e:73:34:49:eb:e0:b7:ff:cb:7d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/fr/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

16:a5:46:41:18:46:38:11:af:73:e8:5f:a1:e8:79:9b:62:0d:6f:45
Signer

Actual PE Digest

16:a5:46:41:18:46:38:11:af:73:e8:5f:a1:e8:79:9b:62:0d:6f:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/fr/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

fe:b3:cd:8c:be:9b:a5:fb:96:81:4d:30:28:0c:a7:7c:6f:a6:36:32
Signer

Actual PE Digest

fe:b3:cd:8c:be:9b:a5:fb:96:81:4d:30:28:0c:a7:7c:6f:a6:36:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/fr/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

98:9f:0c:7b:84:55:fe:75:3f:7d:62:38:41:e3:1d:7b:d9:b6:a1:09
Signer

Actual PE Digest

98:9f:0c:7b:84:55:fe:75:3f:7d:62:38:41:e3:1d:7b:d9:b6:a1:09

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/it/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:74:f8:67:2f:22:94:35:68:91:c7:e4:28:f6:fc:6c:e5:24:ba:52:f9:2f:cf:77:f3:2a:63:aa:d6:13:f5:91
Signer

Actual PE Digest

98:74:f8:67:2f:22:94:35:68:91:c7:e4:28:f6:fc:6c:e5:24:ba:52:f9:2f:cf:77:f3:2a:63:aa:d6:13:f5:91

Digest Algorithm

sha256

PE Digest Matches

true

82:69:82:55:a6:61:d1:dc:20:87:5d:42:95:d0:c5:1c:6a:c9:ac:d4
Signer

Actual PE Digest

82:69:82:55:a6:61:d1:dc:20:87:5d:42:95:d0:c5:1c:6a:c9:ac:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/it/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c4:e6:70:19:f7:44:ef:a7:35:09:4a:36:a7:42:60:ca:7c:85:20:f2
Signer

Actual PE Digest

c4:e6:70:19:f7:44:ef:a7:35:09:4a:36:a7:42:60:ca:7c:85:20:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/it/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1e:f6:6e:fe:ee:ab:1e:f4:a0:fe:7b:f4:87:86:f4:df:6a:14:0b:e4
Signer

Actual PE Digest

1e:f6:6e:fe:ee:ab:1e:f4:a0:fe:7b:f4:87:86:f4:df:6a:14:0b:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/it/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ad:33:22:4c:de:f6:46:3b:1b:c7:58:46:4b:5b:df:56:aa:f5:c4:03
Signer

Actual PE Digest

ad:33:22:4c:de:f6:46:3b:1b:c7:58:46:4b:5b:df:56:aa:f5:c4:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/it/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:be:22:c0:7e:9a:ae:57:bb:d0:c8:16:6d:24:f8:f6:69:c4:23:cd
Signer

Actual PE Digest

10:be:22:c0:7e:9a:ae:57:bb:d0:c8:16:6d:24:f8:f6:69:c4:23:cd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ja/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:a0:a3:fa:00:f0:3d:0c:c8:53:0e:7a:5e:b4:d2:8e:6f:d5:80:c9:3f:20:5c:14:60:6c:fa:cf:5b:4e:90:90
Signer

Actual PE Digest

d4:a0:a3:fa:00:f0:3d:0c:c8:53:0e:7a:5e:b4:d2:8e:6f:d5:80:c9:3f:20:5c:14:60:6c:fa:cf:5b:4e:90:90

Digest Algorithm

sha256

PE Digest Matches

true

69:9d:13:36:64:df:85:24:39:f1:98:6c:29:cc:1d:d4:1d:2a:4d:65
Signer

Actual PE Digest

69:9d:13:36:64:df:85:24:39:f1:98:6c:29:cc:1d:d4:1d:2a:4d:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ja/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

be:64:2c:d4:42:c0:00:a5:cc:31:59:5f:ea:ac:8e:2d:bc:df:c1:8f
Signer

Actual PE Digest

be:64:2c:d4:42:c0:00:a5:cc:31:59:5f:ea:ac:8e:2d:bc:df:c1:8f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ja/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

63:0a:51:91:b1:9e:ac:9c:33:20:12:ef:8e:46:c6:e6:f8:bd:fa:fd
Signer

Actual PE Digest

63:0a:51:91:b1:9e:ac:9c:33:20:12:ef:8e:46:c6:e6:f8:bd:fa:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ja/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

df:45:5f:9c:3b:48:bb:b9:e0:7b:e4:3c:bc:9d:eb:81:d2:a4:8b:02
Signer

Actual PE Digest

df:45:5f:9c:3b:48:bb:b9:e0:7b:e4:3c:bc:9d:eb:81:d2:a4:8b:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ja/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

48:75:92:61:ef:74:06:d3:ba:79:05:db:33:b4:32:ef:af:5f:f0:2f
Signer

Actual PE Digest

48:75:92:61:ef:74:06:d3:ba:79:05:db:33:b4:32:ef:af:5f:f0:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ko/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2d:31:9a:19:3e:af:ee:1f:81:1f:21:db:57:f7:c9:7c:89:d7:51:37:99:da:2e:99:06:59:f7:81:2e:30:52:a9
Signer

Actual PE Digest

2d:31:9a:19:3e:af:ee:1f:81:1f:21:db:57:f7:c9:7c:89:d7:51:37:99:da:2e:99:06:59:f7:81:2e:30:52:a9

Digest Algorithm

sha256

PE Digest Matches

true

a6:f7:be:16:d8:1f:1c:f9:31:c4:7b:f0:ef:ef:27:c1:c4:e3:2b:30
Signer

Actual PE Digest

a6:f7:be:16:d8:1f:1c:f9:31:c4:7b:f0:ef:ef:27:c1:c4:e3:2b:30

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ko/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1c:ec:82:8c:a3:17:2c:db:7b:42:08:e9:5f:33:35:47:5c:ab:23:1f
Signer

Actual PE Digest

1c:ec:82:8c:a3:17:2c:db:7b:42:08:e9:5f:33:35:47:5c:ab:23:1f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ko/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b4:ee:52:7b:85:02:bb:0e:da:1e:7e:a4:e9:12:83:da:68:19:81:e1
Signer

Actual PE Digest

b4:ee:52:7b:85:02:bb:0e:da:1e:7e:a4:e9:12:83:da:68:19:81:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ko/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

98:a5:15:ee:7e:80:81:e4:65:95:32:8e:5c:65:76:de:e2:02:25:19
Signer

Actual PE Digest

98:a5:15:ee:7e:80:81:e4:65:95:32:8e:5c:65:76:de:e2:02:25:19

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ko/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:c0:28:78:b9:01:64:6c:df:59:7b:a5:d3:36:da:6d:66:00:73:59
Signer

Actual PE Digest

10:c0:28:78:b9:01:64:6c:df:59:7b:a5:d3:36:da:6d:66:00:73:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/pt/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:2d:9e:6a:7c:27:74:53:fa:34:bf:35:c5:85:a8:2c:2a:b4:3f:c2:12:fa:b9:66:ae:46:9a:88:a7:ec:74:45
Signer

Actual PE Digest

3d:2d:9e:6a:7c:27:74:53:fa:34:bf:35:c5:85:a8:2c:2a:b4:3f:c2:12:fa:b9:66:ae:46:9a:88:a7:ec:74:45

Digest Algorithm

sha256

PE Digest Matches

true

54:a4:1d:53:ac:4d:43:eb:a6:3f:bb:c2:85:72:36:9c:1c:23:07:d6
Signer

Actual PE Digest

54:a4:1d:53:ac:4d:43:eb:a6:3f:bb:c2:85:72:36:9c:1c:23:07:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/pt/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6:f1:04:d1:94:68:30:20:3b:cc:67:ff:64:37:8c:ec:08:3d:1d:0c
Signer

Actual PE Digest

e6:f1:04:d1:94:68:30:20:3b:cc:67:ff:64:37:8c:ec:08:3d:1d:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/pt/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0c:8f:1f:65:62:b1:36:08:65:3d:55:3e:10:ae:b9:ce:c7:20:4b:ba
Signer

Actual PE Digest

0c:8f:1f:65:62:b1:36:08:65:3d:55:3e:10:ae:b9:ce:c7:20:4b:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/pt/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

00:83:9a:f7:af:9f:9a:34:bc:18:91:37:f3:2e:c3:83:1e:44:f3:02
Signer

Actual PE Digest

00:83:9a:f7:af:9f:9a:34:bc:18:91:37:f3:2e:c3:83:1e:44:f3:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/pt/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0a:1a:9e:c3:93:46:48:0b:78:cc:fc:1b:56:79:39:fd:be:51:c8:2a
Signer

Actual PE Digest

0a:1a:9e:c3:93:46:48:0b:78:cc:fc:1b:56:79:39:fd:be:51:c8:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ru/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:5d:36:2e:26:ba:af:be:41:33:30:aa:cc:25:56:67:2f:1f:62:13:44:ac:d8:1f:fc:8e:80:a1:11:38:fc:28
Signer

Actual PE Digest

36:5d:36:2e:26:ba:af:be:41:33:30:aa:cc:25:56:67:2f:1f:62:13:44:ac:d8:1f:fc:8e:80:a1:11:38:fc:28

Digest Algorithm

sha256

PE Digest Matches

true

a7:fa:91:62:b5:28:c3:71:dd:07:f7:9d:b9:66:07:9b:d5:2b:55:4e
Signer

Actual PE Digest

a7:fa:91:62:b5:28:c3:71:dd:07:f7:9d:b9:66:07:9b:d5:2b:55:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ru/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4e:ff:4d:23:af:10:e8:26:6d:a0:00:32:3c:43:76:79:cc:e6:9c:9f
Signer

Actual PE Digest

4e:ff:4d:23:af:10:e8:26:6d:a0:00:32:3c:43:76:79:cc:e6:9c:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ru/Microsoft.Data.Tools.Schema.Tasks.Sql.11.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:34:12:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/05/2012, 21:39

Not After

14/08/2013, 21:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

88:0b:63:93:94:85:2d:1b:5a:23:ec:39:3b:03:f6:66:6d:22:09:0f:09:e7:24:47:f8:7d:11:36:b4:77:5d:96
Signer

Actual PE Digest

88:0b:63:93:94:85:2d:1b:5a:23:ec:39:3b:03:f6:66:6d:22:09:0f:09:e7:24:47:f8:7d:11:36:b4:77:5d:96

Digest Algorithm

sha256

PE Digest Matches

true

24:46:40:2f:e3:f2:12:cf:a1:2c:0c:74:d6:cf:13:cf:68:0f:71:fe
Signer

Actual PE Digest

24:46:40:2f:e3:f2:12:cf:a1:2c:0c:74:d6:cf:13:cf:68:0f:71:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ru/Microsoft.Data.Tools.Schema.Utilities.Sql.11.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:34:12:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/05/2012, 21:39

Not After

14/08/2013, 21:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:2b:d9:63:28:38:ca:5f:0a:43:fd:c7:ad:7b:74:28:b2:9d:2e:c3:17:6d:65:13:04:a0:ca:7c:75:71:ca:1e
Signer

Actual PE Digest

91:2b:d9:63:28:38:ca:5f:0a:43:fd:c7:ad:7b:74:28:b2:9d:2e:c3:17:6d:65:13:04:a0:ca:7c:75:71:ca:1e

Digest Algorithm

sha256

PE Digest Matches

true

50:04:59:2b:6d:04:64:10:de:e0:40:a9:94:77:cd:8a:e4:64:15:43
Signer

Actual PE Digest

50:04:59:2b:6d:04:64:10:de:e0:40:a9:94:77:cd:8a:e4:64:15:43

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ru/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

32:b2:b7:ca:d9:df:c5:20:c9:de:61:e8:44:a2:21:4b:4f:31:60:95
Signer

Actual PE Digest

32:b2:b7:ca:d9:df:c5:20:c9:de:61:e8:44:a2:21:4b:4f:31:60:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ru/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f2:01:1c:4e:d4:a6:43:78:a6:ea:85:61:ab:7d:70:4e:7a:3a:e6:0e
Signer

Actual PE Digest

f2:01:1c:4e:d4:a6:43:78:a6:ea:85:61:ab:7d:70:4e:7a:3a:e6:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/ru/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:90:5a:b8:03:fa:b8:31:46:76:78:5d:a5:e7:de:ea:41:0b:c2:1e
Signer

Actual PE Digest

44:90:5a:b8:03:fa:b8:31:46:76:78:5d:a5:e7:de:ea:41:0b:c2:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hans/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:ab:45:15:72:4f:c6:64:a5:cb:5e:40:1e:c1:1d:9d:28:37:ab:4f:37:d8:3c:1d:46:1b:b1:0a:87:bf:85:14
Signer

Actual PE Digest

d6:ab:45:15:72:4f:c6:64:a5:cb:5e:40:1e:c1:1d:9d:28:37:ab:4f:37:d8:3c:1d:46:1b:b1:0a:87:bf:85:14

Digest Algorithm

sha256

PE Digest Matches

true

0d:87:58:c5:1d:a5:1c:d8:51:0f:51:d7:c4:40:83:15:29:92:cf:e1
Signer

Actual PE Digest

0d:87:58:c5:1d:a5:1c:d8:51:0f:51:d7:c4:40:83:15:29:92:cf:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hans/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

43:3b:46:f9:4d:e3:4d:a9:0d:8c:9d:49:d6:af:d9:f1:3b:c3:91:2c
Signer

Actual PE Digest

43:3b:46:f9:4d:e3:4d:a9:0d:8c:9d:49:d6:af:d9:f1:3b:c3:91:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hans/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f7:c3:35:a4:c9:5d:da:06:ff:be:4c:87:ed:d7:f2:ad:b1:03:f2:49
Signer

Actual PE Digest

f7:c3:35:a4:c9:5d:da:06:ff:be:4c:87:ed:d7:f2:ad:b1:03:f2:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hans/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

34:a8:fc:3c:29:6e:be:a6:80:f6:fb:ea:51:59:45:2d:2a:01:8c:de
Signer

Actual PE Digest

34:a8:fc:3c:29:6e:be:a6:80:f6:fb:ea:51:59:45:2d:2a:01:8c:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hans/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d3:a0:b7:87:7d:9a:67:07:44:d6:f5:51:bd:e2:cb:47:6e:01:d9:ab
Signer

Actual PE Digest

d3:a0:b7:87:7d:9a:67:07:44:d6:f5:51:bd:e2:cb:47:6e:01:d9:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hant/DacUnpack.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:f4:aa:98:2f:8a:19:21:99:7b:96:b0:aa:9e:bb:67:ca:1b:3c:a4:bf:55:a6:37:62:2c:22:a2:8e:64:d9:6f
Signer

Actual PE Digest

f7:f4:aa:98:2f:8a:19:21:99:7b:96:b0:aa:9e:bb:67:ca:1b:3c:a4:bf:55:a6:37:62:2c:22:a2:8e:64:d9:6f

Digest Algorithm

sha256

PE Digest Matches

true

c8:2c:06:37:3c:aa:28:84:d0:ae:73:20:41:8e:e2:b3:2c:62:69:e8
Signer

Actual PE Digest

c8:2c:06:37:3c:aa:28:84:d0:ae:73:20:41:8e:e2:b3:2c:62:69:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hant/Microsoft.Data.Tools.Schema.Sql.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:de:5b:ab:ca:23:b5:9e:30:05:67:20:0f:f2:59:f9:3e:75:9c:50
Signer

Actual PE Digest

83:de:5b:ab:ca:23:b5:9e:30:05:67:20:0f:f2:59:f9:3e:75:9c:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hant/Microsoft.Data.Tools.Utilities.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:8b:6d:19:b7:3d:9c:77:67:86:ea:ae:47:3c:a2:e8:2f:a8:0d:02
Signer

Actual PE Digest

8b:8b:6d:19:b7:3d:9c:77:67:86:ea:ae:47:3c:a2:e8:2f:a8:0d:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hant/Microsoft.SqlServer.Dac.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d1:86:96:04:f1:11:53:c2:ed:49:ac:41:10:35:0b:eb:e3:cd:d2:7b
Signer

Actual PE Digest

d1:86:96:04:f1:11:53:c2:ed:49:ac:41:10:35:0b:eb:e3:cd:d2:7b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/bin/zh-Hant/SqlPackage.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ca:7e:5a:84:fc:47:8f:ab:c1:b4:08:76:cb:98:8b:5c:f0:3e:97:92
Signer

Actual PE Digest

ca:7e:5a:84:fc:47:8f:ab:c1:b4:08:76:cb:98:8b:5c:f0:3e:97:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wbiosrvc.dll
.dll windows:10 windows x64 arch:x64

1b2d2a091cc03aa09215fee474605e0f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wbiosrvc.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

strnlen
wcscmp
memset

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__strnicmp
_o__wcsicmp
_o__wcsnicmp
memmove
_o_free
_o_iswalpha
_o_iswdigit
_o_iswupper
_o_iswxdigit
_o_malloc
_o_terminate
_o_toupper
_o_towupper
_o_wcsncpy_s
_o_wcstoul
__C_specific_handler
_CxxThrowException
_o__cexit
_o__callnewh
_o__execute_onexit_table
_o__errno
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__crt_atexit
_o__configure_narrow_argv
__std_terminate
__CxxFrameHandler3
memcmp
memcpy

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
FreeLibraryAndExitThread
GetModuleHandleExW
FreeLibrary
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
LoadLibraryExW

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockShared
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateWaitableTimerExW
AcquireSRWLockShared
InitializeSRWLock
CreateEventExW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetEvent
CreateEventW
SetWaitableTimer
CancelWaitableTimer
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
InitializeCriticalSectionEx
ReleaseMutex
DeleteCriticalSection
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
OpenThreadToken
CreateThread
ResumeThread
ProcessIdToSessionId
GetCurrentThread
TerminateProcess
OpenProcessToken

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
EventProviderEnabled

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableFlags
TraceMessage
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids

api-ms-win-service-core-l1-1-0

SetServiceStatus
RegisterServiceCtrlHandlerExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-service-management-l1-1-0

OpenServiceW
OpenSCManagerW
CloseServiceHandle

api-ms-win-service-winsvc-l1-1-0

QueryServiceStatus

api-ms-win-service-management-l2-1-0

ChangeServiceConfigW
QueryServiceConfigW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-memory-l1-1-0

ReadProcessMemory

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetTickCount
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW
WaitForMultipleObjects

api-ms-win-core-io-l1-1-1

CancelSynchronousIo

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
CloseThreadpoolTimer
TrySubmitThreadpoolCallback
CloseThreadpool
CreateThreadpool
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer

api-ms-win-core-io-l1-1-0

GetOverlappedResult
DeviceIoControl
GetQueuedCompletionStatus
CreateIoCompletionPort
PostQueuedCompletionStatus
CancelIoEx

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

api-ms-win-security-base-l1-1-0

IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
EqualDomainSid
AccessCheck
GetTokenInformation
AdjustTokenPrivileges
FreeSid
GetSidIdentifierAuthority
EqualSid
CreateWellKnownSid
GetLengthSid
SetSecurityDescriptorDacl
GetSidSubAuthorityCount
AddAccessAllowedAce
ImpersonateLoggedOnUser
InitializeSecurityDescriptor
InitializeAcl
AllocateAndInitializeSid
IsValidSid
CopySid
GetSidSubAuthority

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification
PowerSettingUnregisterNotification

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegSetValueExW
RegCopyTreeW
RegCreateKeyExW
RegCloseKey
RegGetValueW
RegEnumKeyExW
RegQueryValueExW
RegDeleteValueW
RegDeleteTreeW
RegQueryInfoKeyW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-namedpipe-l1-1-0

CreatePipe

api-ms-win-core-file-l1-1-0

CreateFileW
ReadFile
WriteFile
FindFirstFileW
FindNextFileW
GetFileSize
FindClose
CreateDirectoryW
CompareFileTime

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW

rpcrt4

NdrClientCall3
RpcBindingBind
RpcBindingCreateW
RpcExceptionFilter
I_RpcExceptionFilter
RpcEpResolveBinding
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingFree
RpcStringFreeW
RpcServerInqCallAttributesW
RpcServerTestCancel
RpcRevertToSelfEx
UuidCreate
I_RpcMapWin32Status
UuidToStringW
Ndr64AsyncServerCallAll
NdrServerCallAll
NdrAsyncServerCall
NdrServerCall2
RpcServerInterfaceGroupCreateW
RpcServerInterfaceGroupClose
RpcServerInterfaceGroupActivate
RpcServerInterfaceGroupDeactivate
RpcServerSubscribeForNotification
RpcServerUnsubscribeForNotification
RpcAsyncCompleteCall
UuidEqual
RpcImpersonateClient
RpcRevertToSelf

api-ms-win-service-core-l1-1-4

GetServiceDirectory

bcrypt

BCryptSetProperty
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptDestroyHash
BCryptImportKey
BCryptExportKey
BCryptEncrypt
BCryptDecrypt
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptCreateHash
BCryptGenerateSymmetricKey
BCryptGenRandom
BCryptHashData

ncrypt

NCryptOpenStorageProvider
NCryptCreatePersistedKey
NCryptSetProperty
NCryptFinalizeKey
NCryptDeleteKey
NCryptOpenKey
NCryptGetProperty
NCryptFreeObject
NCryptEncrypt
NCryptDecrypt

api-ms-win-security-base-l1-2-0

GetCachedSigningLevel
SetCachedSigningLevel

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-psapi-l1-1-0

K32EnumProcesses
QueryFullProcessImageNameW

api-ms-win-service-private-l1-1-0

I_ScRegisterDeviceNotification
I_ScUnregisterDeviceNotification

profapi

ord104

api-ms-win-security-lsapolicy-l1-1-0

LsaQueryInformationPolicy
LsaClose
LsaFreeMemory
LsaOpenPolicy

api-ms-win-core-kernel32-legacy-l1-1-0

WTSGetActiveConsoleSessionId

api-ms-win-core-heap-obsolete-l1-1-0

LocalSize

ntdll

ZwAlpcSendWaitReceivePort
TpReleaseAlpcCompletion
ZwAlpcQueryInformation
RtlInitUnicodeString
RtlWaitOnAddress
ZwAlpcConnectPort
TpWaitForAlpcCompletion
AlpcInitializeMessageAttribute
AlpcGetMessageAttribute
ZwClose
ZwAlpcDisconnectPort
RtlGetNtProductType
RtlEqualSid
TpAllocAlpcCompletion
RtlWakeAddressAll
ZwAlpcCancelMessage
RtlIsStateSeparationEnabled
NtGetDevicePowerState
RtlIsMultiSessionSku
RtlNtStatusToDosError
RtlImageNtHeader
RtlPublishWnfStateData
NtQuerySystemInformation
NtQuerySystemEnvironmentValueEx
RtlDosPathNameToNtPathName_U_WithStatus
RtlCreateProcessParametersEx
NtCreateUserProcess
NtTerminateProcess
NtQueryInformationProcess
RtlAdjustPrivilege
RtlFreeHeap
RtlAllocateHeap
vDbgPrintEx
RtlFreeUnicodeString

msvcp_win

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
_Cnd_register_at_thread_exit
_Cnd_broadcast
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
_Cnd_destroy_in_situ
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
_Xtime_get_ticks
_Cnd_timedwait
_Mtx_current_owns
?__ExceptionPtrCurrentException@@YAXPEAX@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Cnd_init
_Mtx_init
_Cnd_do_broadcast_at_thread_exit
_Mtx_lock
_Cnd_signal
_Cnd_destroy
_Mtx_destroy
_Mtx_unlock
_Thrd_start
_Cnd_wait
?_Throw_C_error@std@@YAXH@Z
_Thrd_detach
_Thrd_id
_Thrd_join
?_Throw_Cpp_error@std@@YAXH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Cnd_init_in_situ
?_Syserror_map@std@@YAPEBDH@Z

wintrust

WTGetBioSignatureInfo

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

Exports

Exports

OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
ServiceMain
SvchostPushServiceGlobals

Sections

.text
Size: 647KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wcmsvc.dll
.dll windows:10 windows x64 arch:x64

ba9a6f50ebbf1d488e70355b54b1849c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wcmsvc.pdb

Imports

msvcrt

_wtoi
_wcsnicmp
swprintf_s
memset
_XcptFilter
memmove
_CxxThrowException
_amsg_exit
_lock
_unlock
malloc
strcpy_s
calloc
free
??8type_info@@QEBAHAEBV0@@Z
wcsncmp
mbtowc
wcscpy_s
??0exception@@QEAA@AEBQEBDH@Z
_itow_s
_initterm
_wtol
??0exception@@QEAA@AEBQEBD@Z
memcmp
memcpy
??1type_info@@UEAA@XZ
_callnewh
?terminate@@YAXXZ
?what@exception@@UEBAPEBDXZ
_purecall
_wcsicmp
__C_specific_handler
??_V@YAXPEAX@Z
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
__dllonexit
_swprintf_c_l
??3@YAXPEAX@Z
toupper
??1exception@@UEAA@XZ
memcpy_s
_vsnwprintf
__CxxFrameHandler3
_onexit
wcscmp

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindStringOrdinal

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
CreateMutexExW
CreateSemaphoreExW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
CreateEventW
CreateEventExW
DeleteCriticalSection
AcquireSRWLockShared
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
InitializeCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
InitializeSRWLock
ResetEvent
TryAcquireSRWLockExclusive
SetEvent
ReleaseSemaphore
EnterCriticalSection
ReleaseSRWLockShared
ReleaseSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
TerminateProcess
GetCurrentThreadId
CreateThread
OpenThreadToken
GetCurrentThread
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

ntdll

RtlQueryPackageIdentity
RtlQueryWnfStateData
vDbgPrintEx
RtlFreeHeap
RtlAllocateHeap
ZwClose
AlpcGetMessageAttribute
AlpcInitializeMessageAttribute
TpWaitForAlpcCompletion
ZwAlpcConnectPort
RtlWaitOnAddress
RtlIpv6StringToAddressExW
ZwAlpcQueryInformation
TpReleaseAlpcCompletion
ZwAlpcSendWaitReceivePort
ZwAlpcDisconnectPort
TpAllocAlpcCompletion
RtlWakeAddressAll
ZwAlpcCancelMessage
NtPowerInformation
EtwEventWrite
RtlSubscribeWnfStateChangeNotification
NtQueryWnfStateData
RtlInitUnicodeString
RtlIpv4StringToAddressExW
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlNtStatusToDosError
NtCreateWnfStateName
NtDeleteWnfStateName
RtlIsStateSeparationEnabled
EtwEventWriteTransfer
RtlPublishWnfStateData
EtwEventUnregister
EtwEventRegister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwTraceMessage
RtlReportException

api-ms-win-service-core-l1-1-0

RegisterServiceCtrlHandlerExW
SetServiceStatus

api-ms-win-core-sysinfo-l1-2-0

GetOsSafeBootMode

api-ms-win-core-threadpool-legacy-l1-1-0

ChangeTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueTimer
UnregisterWaitEx
CreateTimerQueue
QueueUserWorkItem
DeleteTimerQueueEx

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-file-l1-1-0

CreateFileW

rpcrt4

RpcServerTestCancel
RpcAsyncAbortCall
RpcBindingToStringBindingW
RpcServerInqCallAttributesW
RpcStringBindingParseW
RpcStringFreeW
RpcServerUseProtseqW
UuidToStringW
RpcRaiseException
RpcServerRegisterIf3
RpcEpRegisterW
UuidCreate
RpcServerUnregisterIfEx
RpcBindingCreateW
NdrClientCall3
RpcBindingBind
I_RpcExceptionFilter
RpcImpersonateClient
RpcSsContextLockExclusive
RpcRevertToSelfEx
RpcRevertToSelf
RpcBindingFree
RpcBindingVectorFree
RpcAsyncCompleteCall
UuidFromStringW
RpcServerInqBindings
NdrServerCall2
Ndr64AsyncServerCallAll
NdrServerCallAll
NdrAsyncServerCall
RpcEpUnregister

api-ms-win-security-base-l1-1-0

ImpersonateSelf
GetLengthSid
GetTokenInformation
CreateWellKnownSid
RevertToSelf
FreeSid
CheckTokenMembership

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW
ConvertStringSidToSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification
PowerSettingUnregisterNotification

api-ms-win-core-com-l1-1-0

CoSetProxyBlanket
CoWaitForMultipleHandles
CoCreateInstance
StringFromGUID2
CoUninitialize
CoIncrementMTAUsage
StringFromCLSID
CLSIDFromString
CoInitializeEx
CoTaskMemFree
CoTaskMemAlloc
CoDecrementMTAUsage
CoCreateFreeThreadedMarshaler

iphlpapi

GetIfTable2
CancelMibChangeNotify2
NotifyUnicastIpAddressChange
ConvertInterfaceGuidToLuid
GetUnicastIpAddressTable
GetIpForwardTable2
FreeMibTable
GetIpInterfaceTable
ConvertInterfaceLuidToGuid
ConvertInterfaceIndexToLuid
GetIfEntry2
ConvertInterfaceLuidToIndex
GetIfStackTable

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemInfo
GetTickCount64
GetSystemTimeAsFileTime
GetVersionExW
GetSystemTime

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-io-l1-1-0

GetOverlappedResult
DeviceIoControl

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork
CreateThreadpoolWork
SetThreadpoolThreadMaximum
DisassociateCurrentThreadFromCallback
SetThreadpoolTimerEx
SetThreadpoolThreadMinimum
CloseThreadpool
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
CreateThreadpool
CancelThreadpoolIo
CloseThreadpoolTimer
StartThreadpoolIo
CloseThreadpoolIo
CloseThreadpoolWait
WaitForThreadpoolTimerCallbacks
CreateThreadpoolIo
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
WaitForThreadpoolIoCallbacks

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce
Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

nsi

NsiAllocateAndGetTable
NsiGetAllParameters
NsiSetAllParameters
NsiFreeTable

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventProviderEnabled
EventSetInformation
EventRegister
EventUnregister

api-ms-win-service-private-l1-1-0

UnsubscribeServiceChangeNotifications
SubscribeServiceChangeNotifications

api-ms-win-service-management-l1-1-0

CloseServiceHandle
OpenSCManagerW
OpenServiceW

api-ms-win-core-registry-l1-1-0

RegNotifyChangeKeyValue
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegGetValueW
RegCreateKeyExW
RegQueryValueExW

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

api-ms-win-core-state-helpers-l1-1-0

GetRegistryValueWithFallbackW

api-ms-win-security-grouppolicy-l1-1-0

UnregisterGPNotificationInternal
RegisterGPNotificationInternal

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoUninitialize
RoInitialize
RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

userenv

DeriveAppContainerSidFromAppContainerName

api-ms-win-service-management-l2-1-0

QueryServiceStatusEx

winhttp

WinHttpCloseHandle
WinHttpConnectionSetProxyInfo
WinHttpConnectionDeletePolicyEntries
WinHttpConnectionSetPolicyEntries
WinHttpConnectionDeleteProxyInfo
WinHttpOpen
WinHttpConnectionUpdateIfIndexTable

api-ms-win-appmodel-runtime-l1-1-0

PackageFamilyNameFromFullName

ws2_32

WSAAddressToStringW
InetNtopW

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

winnsi

NsiDisconnectFromServer
NsiRpcDeregisterChangeNotification
NsiRpcRegisterChangeNotification
NsiConnectToServer

nlaapi

NlaIndicateReprobe

mobilenetworking

GetPersistentRegPath

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

CdeGetProfileList
CdeQueryParameter
CdeSetParameter
SvchostPushServiceGlobals
WcmSvcMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wcnwiz.dll
.dll windows:10 windows x64 arch:x64

7cc9674f1fe1aac8b915612754a34067

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wcnwiz.pdb

Imports

msvcrt

memcmp
memset
towlower
iswctype
wcsncmp
_vsnprintf_s
_wtol
rand_s
vswprintf_s
swprintf_s
wcscat_s
pow
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
memmove
memcpy
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@XZ
_callnewh
memmove_s
malloc
free
_purecall
memcpy_s
??_V@YAXPEAX@Z
__C_specific_handler
__CxxFrameHandler3
__RTDynamicCast
_vsnwprintf
_wcsdup
??3@YAXPEAX@Z
wcscmp

oleaut32

BSTR_UserMarshal
BSTR_UserMarshal64
SysFreeString
BSTR_UserSize
SysAllocString
BSTR_UserFree
BSTR_UserUnmarshal64
BSTR_UserSize64
BSTR_UserFree64
BSTR_UserUnmarshal

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW
LoadResource
LoadStringW
LoadLibraryExA
FindResourceExW
SizeofResource
DisableThreadLibraryCalls
GetModuleHandleExW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
CoWaitForMultipleHandles
IIDFromString
StringFromGUID2

api-ms-win-core-debug-l1-1-0

OutputDebugStringA

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegOpenKeyExW

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

rpcrt4

CStdStubBuffer_DebugServerRelease
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
NdrDllGetClassObject
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
NdrOleAllocate
NdrDllCanUnloadNow

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient3
ObjectStublessClient4

api-ms-win-core-heap-l1-1-0

HeapDestroy
HeapReAlloc
HeapSize
HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-memory-l1-1-0

VirtualAlloc
VirtualFree

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-processthreads-l1-1-1

FlushInstructionCache

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InterlockedPopEntrySList

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

ntdll

EtwRegisterTraceGuidsW
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwTraceMessage
EtwGetTraceEnableFlags
EtwUnregisterTraceGuids
EtwEventUnregister
EtwEventRegister
RtlNtStatusToDosError
EtwEventWriteTransfer
WinSqmSetDWORD

kernel32

QueryActCtxW
DeactivateActCtx
FindActCtxSectionStringW
ActivateActCtx
FormatMessageW
LockResource
LocalFree
GetComputerNameW
lstrcmpW
CreateActCtxW
MulDiv
GetSystemDirectoryW
RegGetValueW
GetFileSizeEx
ReadFile
GlobalAlloc
WriteFile
IsDebuggerPresent
DebugBreak
CreateMutexExW
GlobalFree
RegQueryValueExW
CreateFileW
CloseHandle
OpenSemaphoreW
FindResourceW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForMultipleObjects
WaitForSingleObject
CreateEventW
SetEvent
OutputDebugStringW
CreateThread
ResetEvent
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
ReleaseMutex
WaitForSingleObjectEx

user32

SetDlgItemTextW
ShowWindow
GetClientRect
GetWindowTextW
EnableWindow
GetAncestor
SetWindowTextW
SetWindowPos
GetDC
GetWindowRect
GetWindowTextLengthW
SystemParametersInfoW
IsWindowVisible
LoadImageW
DestroyIcon
GetSystemMetrics
GetWindowLongPtrW
EndPaint
BeginPaint
InvalidateRect
SetRect
IntersectRect
DrawFocusRect
UnregisterClassA
TrackMouseEvent
PostMessageW
GetPropW
SetWindowLongPtrW
InflateRect
SetTimer
SetFocus
ReleaseDC
GetParent
KillTimer
GetDlgItem
SetPropW
RemovePropW
SendMessageW

wlanapi

WlanStringToSsid
WlanGetNetworkBssList
WlanScan
WlanUtf8SsidToDisplayName
WFDGetDefaultGroupProfileInt
WFDParseProfileXmlInt
WFDGetProfileKeyInfoInt
WlanParseProfileXmlBasicSettings
WFDFreeMemoryInt
WlanGenerateProfileXmlBasicSettings
WlanGetAvailableNetworkList
WlanFreeMemory
WlanCloseHandle
WlanHostedNetworkQueryStatus
WlanOpenHandle
WlanGetProfile
WlanHostedNetworkQueryProperty
WFDLowPrivIsWfdSupportedInt
WlanInternalScan
WlanQueryInterface
WlanGetProfileList
WlanSetProfile
WlanEnumInterfaces
WlanRegisterNotification

dui70

?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z
?Release@Value@DirectUI@@QEAAXXZ
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
?UserTextChanged@TouchEditBase@DirectUI@@SA?AVUID@@XZ
?SetPasswordCharacter@TouchEditBase@DirectUI@@QEAAJH@Z
?SetMaxLength@TouchEditBase@DirectUI@@QEAAJH@Z
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHICON__@@_N11@Z
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
?RemoveLocalValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZ@Z
?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ
?KeyWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?GetEncodedContentString@Element@DirectUI@@QEAAJPEAG_K@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
DuiCreateObject
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?Click@TouchButton@DirectUI@@SA?AVUID@@XZ
?SetClass@Element@DirectUI@@QEAAJPEBG@Z
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
StrToID

crypt32

CryptProtectData
CryptUnprotectData

bcrypt

BCryptDestroyHash
BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptCreateHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider

shell32

SHGetKnownFolderPath

gdi32

CreateFontIndirectW
CreateDIBSection
StartDocW
StartPage
EndDoc
GetDeviceCaps
GetTextMetricsW
DeleteDC
TextOutW
SetBkColor
DeleteObject
GetObjectW
GetTextExtentPoint32W
SelectObject
EndPage
CreateFontW
CreateSolidBrush

ole32

CoGetObject

uxtheme

OpenThemeData
IsAppThemed
DrawThemeParentBackground
DrawThemeBackground
GetThemeMetric
SetWindowTheme
CloseThemeData
ord121
ord120

xmllite

CreateXmlReader

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

windowscodecs

WICCreateImagingFactory_Proxy

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 952KB - Virtual size: 951KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wcp.dll
.dll windows:10 windows x64 arch:x64

33769b6f1c65ceddc9a17bdc87606766

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

67:f8:df:72:01:c7:d2:0a:a9:97:77:f3:05:2a:e7:d2:9f:5d:df:65:71:74:0f:96:3e:07:a7:70:c8:97:2e:f7
Signer

Actual PE Digest

67:f8:df:72:01:c7:d2:0a:a9:97:77:f3:05:2a:e7:d2:9f:5d:df:65:71:74:0f:96:3e:07:a7:70:c8:97:2e:f7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wcp.pdb

Imports

msvcrt

memcpy
memmove
_onexit
__dllonexit
memset
wcscat_s
wcsnlen
_aligned_malloc
_aligned_free
_vsnwprintf_s
strstr
_i64tow_s
_ui64tow_s
_errno
_ultow
_wcstoi64
wcsncpy_s
_wcstoui64
wcschr
iswctype
_ultow_s
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
memmove_s
wcscpy_s
malloc
swprintf_s
wcsrchr
_wtol
_ltow
qsort
_snprintf_s
wcstoul
strncmp
free
sscanf_s
_wcsnicmp
wcsstr
_vsnwprintf
_wcsicmp
memcmp
wcstok_s
memcpy_s
toupper
tolower
bsearch
strchr
__C_specific_handler

rpcrt4

UuidFromStringW
RpcStringFreeW
UuidToStringW

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegGetValueW
RegCreateKeyExW
RegFlushKey

api-ms-win-core-libraryloader-l1-1-0

GetModuleHandleW
SizeofResource
GetProcAddress
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
LoadResource
LockResource
FindResourceExW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlCaptureContext
RtlCaptureStackBackTrace
RtlCompareMemory
RtlRaiseException

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventActivityIdControl
EventWriteTransfer

api-ms-win-core-file-l1-1-0

ReadFile
SetFileAttributesW
GetFinalPathNameByHandleW
GetFileAttributesW
FlushFileBuffers
DeleteFileW
SetEndOfFile
GetFileSizeEx
WriteFile
CreateFileW

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GlobalMemoryStatusEx
GetSystemTimeAsFileTime
GetSystemInfo
GetVersionExW
GetTickCount

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
WakeAllConditionVariable
Sleep

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
SetLastError
GetLastError

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo
GetProductInfo

api-ms-win-eventing-legacy-l1-1-0

FlushTraceW

api-ms-win-core-heap-obsolete-l1-1-0

LocalReAlloc
LocalFree
LocalAlloc

api-ms-win-security-base-l1-1-0

IsValidSecurityDescriptor
GetAce
CreateWellKnownSid
DestroyPrivateObjectSecurity
GetTokenInformation
GetSidSubAuthority
AddAccessAllowedAce
GetLengthSid
GetSidLengthRequired
InitializeSecurityDescriptor
CreatePrivateObjectSecurityWithMultipleInheritance
InitializeSid
GetSecurityDescriptorLength
SetPrivateObjectSecurityEx
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
MakeSelfRelativeSD
GetSecurityDescriptorControl
SetSecurityDescriptorGroup
InitializeAcl
IsValidSid

api-ms-win-core-kernel32-legacy-l1-1-0

LoadLibraryW
LoadLibraryA

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW

api-ms-win-core-processthreads-l1-1-0

TlsFree
GetCurrentProcess
CreateProcessW
GetExitCodeProcess
TlsAlloc
CreateThread
OpenThreadToken
TlsSetValue
GetCurrentThreadId
GetCurrentProcessId
GetCurrentThread
TerminateProcess
OpenProcessToken
TlsGetValue

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-security-provider-l1-1-0

GetNamedSecurityInfoW

api-ms-win-core-namedpipe-l1-1-0

CreatePipe

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
AcquireSRWLockExclusive
CreateSemaphoreExW
ReleaseSemaphore
WaitForMultipleObjectsEx
CreateEventW
SetEvent
ReleaseSRWLockExclusive
ResetEvent
EnterCriticalSection

api-ms-win-core-string-l1-1-0

CompareStringW

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-service-management-l1-1-0

OpenSCManagerW
OpenServiceW
StartServiceW
CloseServiceHandle
DeleteService

api-ms-win-service-winsvc-l1-1-0

QueryServiceStatus
ControlService

api-ms-win-security-lsalookup-l2-1-0

LookupAccountSidW

api-ms-win-security-cryptoapi-l1-1-0

CryptDestroyKey
CryptAcquireContextW
CryptExportKey
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpA

api-ms-win-core-localization-obsolete-l1-2-0

CompareStringA

api-ms-win-core-libraryloader-l1-1-1

EnumResourceLanguagesExW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-security-lsapolicy-l1-1-0

LsaOpenPolicy
LsaFreeMemory
LsaClose
LsaQueryInformationPolicy

ntdll

RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtSetEaFile
RtlReleaseRelativeName
NtQueryEaFile
RtlCopyUnicodeString
RtlDuplicateUnicodeString
RtlAppendUnicodeStringToString
RtlEqualUnicodeString
RtlGetControlSecurityDescriptor
RtlMakeSelfRelativeSD
RtlSetControlSecurityDescriptor
RtlAnsiCharToUnicodeChar
RtlUnicodeToMultiByteN
RtlIsTextUnicode
RtlUnicodeToMultiByteSize
RtlConvertSidToUnicodeString
NtAllocateLocallyUniqueId
NtQueryInformationToken
RtlLengthRequiredSid
RtlFreeSid
RtlTimeToTimeFields
RtlDosPathNameToNtPathName_U
RtlMultiByteToUnicodeSize
RtlMultiByteToUnicodeN
RtlFormatCurrentUserKeyPath
RtlDowncaseUnicodeChar
RtlUpcaseUnicodeChar
DbgPrintEx
RtlReAllocateHeap
RtlMapGenericMask
RtlGetSaclSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlAllocateAndInitializeSid
RtlAddAccessAllowedAce
RtlGetGroupSecurityDescriptor
RtlEqualSid
NtQuerySystemInformation
NtQueryLicenseValue
RtlValidAcl
NtAdjustPrivilegesToken
RtlSetSaclSecurityDescriptor
RtlValidSid
NtDuplicateToken
NtSetInformationThread
RtlSetGroupSecurityDescriptor
RtlFindAceByType
RtlCreateEnvironmentEx
RtlExpandEnvironmentStrings_U
RtlGetCompressionWorkSpaceSize
RtlDecompressBuffer
RtlCompressBuffer
RtlFreeUnicodeString
RtlInitializeSid
RtlAddAuditAccessObjectAce
RtlAddAuditAccessAceEx
RtlAbsoluteToSelfRelativeSD
RtlAddAccessDeniedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedObjectAce
RtlFirstFreeAce
RtlNtStatusToDosError
RtlDeleteSecurityObject
NtQueryValueKey
RtlGetDaclSecurityDescriptor
NtSetValueKey
NtQuerySecurityObject
NtQueryDirectoryFile
NtQueryObject
NtQueryVolumeInformationFile
NtCreateKey
RtlCreateAcl
NtOpenThreadToken
NtFsControlFile
NtDuplicateObject
RtlGetVersion
NtFlushBuffersFile
NtQueryAttributesFile
RtlAddAce
NtDeleteValueKey
NtSetSecurityObject
NtDeleteFile
RtlNewSecurityObjectEx
RtlAddAccessAllowedAceEx
NtSetInformationFile
RtlQueryInformationAcl
RtlpApplyLengthFunction
RtlGetAce
NtEnumerateValueKey
NtWriteFile
RtlGetLengthWithoutLastFullDosOrNtPathElement
NtEnumerateKey
RtlSetOwnerSecurityDescriptor
NtOpenProcessToken
NtDeleteKey
NtQueryKey
NtReadFile
RtlNtStatusToDosErrorNoTeb
RtlLengthSecurityDescriptor
RtlCreateEnvironment
RtlDestroyEnvironment
RtlSetEnvironmentVariable
NtDelayExecution
LdrUnloadDll
LdrLoadDll
RtlInitUnicodeString
RtlLengthSid
RtlAppendUnicodeToString
RtlCompareUnicodeString
RtlCreateServiceSid
RtlSubAuthorityCountSid
RtlCopySid
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAnsiStringToUnicodeString
RtlInitAnsiString
NtLoadKey2
NtOpenKey
NtFlushKey
NtUnloadKey2
NtCreateFile
LdrGetProcedureAddress
LdrGetDllHandle
NtOpenProcess
NtQueryInformationFile
NtOpenFile
RtlTimeToSecondsSince1980
NtWaitForSingleObject
RtlQueryEnvironmentVariable_U
NtClose
NtQuerySystemTime
NtYieldExecution
RtlHashUnicodeString
NtQueryPerformanceCounter
RtlCreateUnicodeStringFromAsciiz
DbgPrint
RtlRaiseStatus
RtlLeaveCriticalSection
RtlFreeHeap
RtlInitializeCriticalSection
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
RtlEnterCriticalSection
LdrDisableThreadCalloutsForDll
NtQueryInformationProcess
RtlRunOnceComplete
RtlRunOnceBeginInitialize
RtlFindNextForwardRunClear
RtlNumberOfSetBits
RtlInitializeSRWLock
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlComputeCrc32
NtQueryInformationThread
RtlAllocateHeap
RtlDeleteCriticalSection
RtlSubAuthoritySid

bcrypt

BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCreateHash
BCryptHashData
BCryptDestroyHash

crypt32

CertFindSubjectInCTL
CertFreeCertificateChain
CryptHashCertificate2
CertCreateCTLContext
CertGetSubjectCertificateFromStore
CertVerifyCertificateChainPolicy
CertOpenStore
CertAddStoreToCollection
CryptDecodeObject
CertFreeCTLContext
CertAddEncodedCertificateToStore
CryptMsgClose
CertGetEnhancedKeyUsage
CryptMsgUpdate
CertGetCertificateChain
CertFreeCertificateContext
CryptMsgGetAndVerifySigner
CryptMsgGetParam
CryptMsgOpenToDecode
CertCloseStore
CryptImportPublicKeyInfoEx

Exports

Exports

??0AIAsimovProvider@COM@Windows@@QEAA@XZ
??0CBackupFileCreator@PrimitiveInstaller@@QEAA@XZ
??0CBaseInstaller@PrimitiveInstaller@@IEAA@XZ
??0CCoordinator@PrimitiveInstaller@@QEAA@XZ
??0CFileInstaller@@QEAA@XZ
??0CGacPrimitiveInstaller@@QEAA@XZ
??0CMigInfoInstaller@@QEAA@XZ
??0CQueueExecutor@COM@Windows@@QEAA@XZ
??0CRawInstallMap@InstallMap@@QEAA@XZ
??0CRawStoreLayout@ComponentStore@@QEAA@XZ
??0CRegistryInstaller@@QEAA@XZ
??0CXmlCursor@@QEAA@XZ
??1AIAsimovProvider@COM@Windows@@QEAA@XZ
??1AutoLZMSDecoder@Rtl@WCP@Windows@@QEAA@XZ
??1AutoLZMSEncoder@Rtl@WCP@Windows@@QEAA@XZ
??1CBackupFileCreator@PrimitiveInstaller@@QEAA@XZ
??1CComponentInformation@COM@Windows@@QEAA@XZ
??1CCoordinator@PrimitiveInstaller@@QEAA@XZ
??1CGacPrimitiveInstaller@@QEAA@XZ
??1CMigInfoInstaller@@QEAA@XZ
??1CQueueExecutor@COM@Windows@@QEAA@XZ
??1CRawInstallMap@InstallMap@@QEAA@XZ
??1CRawStoreLayout@ComponentStore@@QEAA@XZ
??1CRegistryInstaller@@QEAA@XZ
??1CSettingsInstaller@@QEAA@XZ
??1CShortcutInstaller@@QEAA@XZ
??1CSysprepInstaller@@QEAA@XZ
??1PrivilegeAcquisition@RtlSystemUtil@@QEAA@XZ
?Acquire@PrivilegeAcquisition@RtlSystemUtil@@QEAAJAEBU?$Vector@$$CBJ@Windows@@@Z
?AcquireInstallerComponentPath@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEAUIDefinitionIdentity@@PEAPEA_WPEAK@Z
?AddCatalogMarkFromTlc@CRawStoreLayout@ComponentStore@@QEAAJAEBU_LUNICODE_STRING@@PEAUTlcData@2@@Z
?AddChange@ExecutionQueueDeriver@AiQueue@@QEAAJPEBVWcpManifest@@0@Z
?AddComponentImplication@CRawStoreLayout@ComponentStore@@QEAAJAEBUComponentData@2@PEAUTlcData@2@@Z
?AddInspect@ExecutionQueueDeriver@AiQueue@@QEAAJAEBVWcpManifest@@@Z
?AddInstallMarkToFamily@CRawInstallMap@InstallMap@@QEAAJPEAUMapForFamily@2@AEBT_FOUR_PART_VERSION@@@Z
?AddInstallerFailureAnnotation@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEA_W@Z
?AddRef@LocalInstallerServices@COM@WCP@Windows@@UEAAKXZ
?AddRef@LocalTransformerServices@COM@WCP@Windows@@UEAAKXZ
?AddTlcMark@CRawStoreLayout@ComponentStore@@QEAAJKAEBUTlcInstaller@2@PEAUTlcData@2@@Z
?Canonicalize@CBaseCanonicalizer@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@UNode@Rtl@Microdom@Windows@@@5@PEAUIRtlWOFOStream@35@@Z
?Canonicalize@CC14NCanonicalizer@@MEAAJUElement@Rtl@Microdom@Windows@@@Z
?Canonicalize@CC14NCanonicalizer@@MEAAJUProcessingInstruction@Rtl@Microdom@Windows@@@Z
?Canonicalize@CC14NCanonicalizer@@MEAAJUText@Rtl@Microdom@Windows@@@Z
?CheckComponentFileFlag@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@U_LUNICODE_STRING@@PEA_N@Z
?CheckComponentFlag@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEA_N@Z
?CleanupInstallMap@CRawInstallMap@InstallMap@@QEAAJXZ
?Close@?$Auto@U_ACL@@@Windows@@QEAAXXZ
?Close@?$Auto@U_SECURITY_DESCRIPTOR@@@Windows@@QEAAXXZ
?Close@?$Auto@U_SID@@@Windows@@QEAAXXZ
?Close@AutoDeltaBlob@Rtl@Windows@@QEAAXXZ
?Close@CApplicationAccessor@@QEAAXXZ
?Close@CCatalog@@QEAAJXZ
?CmsGetFileHashInformation@WcpManifest@@SAJAEBUFile@WcpManifestParser@@PEAUHashInfo@Rtl@ManifestParser@Windows@@@Z
?CoTaskMemAlloc@COM@Windows@@YAPEAX_K@Z
?CoTaskMemFree@COM@Windows@@YAXPEBX@Z
?CompressManifest@Rtl@Implementation@WCP@Windows@@YAJK_NPEBU_LBLOB@@PEAUIRtlFile@14@@Z
?ConvertIn@COM@Windows@@YAJPEAUIDefinitionIdentity@@PEAPEAUIRtlDefinitionIdentity@Rtl@Identity@2@@Z
?CopyOutPath@COM@Windows@@YAJPEBU_LUNICODE_STRING@@PEAPEA_W@Z
?Create@CCatalog@@QEAAJKKPEBU_LBLOB@@PEAK@Z
?DecompressManifest@Rtl@Implementation@WCP@Windows@@YAJKPEAV?$Auto@U_LBLOB@@@4@PEAK@Z
?DeletePendingFiles@CRawStoreLayout@ComponentStore@@QEAAJXZ
?DeltaCompressFile@Rtl@Windows@@YAJKKPEAU_LBLOB@@PEBU3@0PEAUIRtlFile@12@@Z
?DeltaCompressFile@Rtl@Windows@@YAJKPEAUIRtlFile@12@PEBU_LBLOB@@00@Z
?DeltaDecompressBuffer@Rtl@Windows@@YAJKPEAU_LBLOB@@_K0PEAVAutoDeltaBlob@12@@Z
?DeltaDecompressFile@Rtl@Windows@@YAJPEAUIRtlFile@12@_K00@Z
?DestroyOutputStream@Tracing@Windows@@YAXPEAUIRtlFormattedOutputStream@Rtl@2@@Z
?DoesManifestContainAIs@ExecutionQueueDeriver@AiQueue@@QEAAJAEBVWcpManifest@@PEA_N@Z
?DoesTargetHaveTestRootCert@@YAJPEAUIRtlSystemIsolationLayerPublic@Rtl@Windows@@PEA_N@Z
?FileHashAlgorithmToDigest@Rtl@Cms@Windows@@YA?AW4_CMS_HASH_DIGESTMETHOD@23@K@Z
?FilePathCombine@COM@Windows@@YAJPEBGAEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
?Finalize@CC14NCanonicalizer@@MEAAJXZ
?Finalize@ExecutionQueueDeriver@AiQueue@@QEAAJPEAV?$Auto@U?$Vector@VExecutionQueueEntry@AiQueue@@@Windows@@@Windows@@PEAK@Z
?FinalizeChanges@CCoordinator@PrimitiveInstaller@@QEAAJXZ
?FinalizeValue@CComponentInformationTableTraits@COM@Windows@@SAXAEAV?$Auto@PEAVCComponentInformation@COM@Windows@@@3@@Z
?FindSubject@CCatalog@@QEBAJKPEBU_LBLOB@@PEA_NPEAJ@Z
?FindUnchangedMatchingVersions@VersionedIndexHelper@ComponentStore@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@KKAEBU_LBLOB@@PEAV?$CVector@T_FOUR_PART_VERSION@@VCCallDisposition@Rtl@BUCL@@@BUCL@@@Z
?FormatFourPartVersion@Rtl@Implementation@WCP@Windows@@YAJKAEBT_FOUR_PART_VERSION@@PEAE1P6A?AU_RTL_UCSCHAR_ENCODER_RETURN_VALUE@@K11@ZPEAPEAE@Z
?FormatNumberIntoBuffer@Rtl@Implementation@WCP@Windows@@YAJ_KKPEAE1P6A?AU_RTL_UCSCHAR_ENCODER_RETURN_VALUE@@K11@ZPEAPEAE@Z
?FsnpDowncaseChar@@YAKK@Z
?GenerateCatalogThumbprint@@YAJPEAUIRtlFile@Rtl@Windows@@PEAV?$Auto@U_LUNICODE_STRING@@@3@@Z
?GenerateCatalogThumbprint@@YAJPEBU_LBLOB@@PEAV?$Auto@U_LUNICODE_STRING@@@Windows@@@Z
?GetComponentAbsolutePath@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAV?$Auto@U_LUNICODE_STRING@@@6@@Z
?GetComponentFileAbsolutePath@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@6@2@Z
?GetComponentWinningVersion@CRawInstallMap@InstallMap@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAT_FOUR_PART_VERSION@@PEA_N_N@Z
?GetCompressedFileType@Rtl@WCP@Windows@@YAKPEBU_LBLOB@@@Z
?GetCurrentDllWin32Path@COM@Windows@@YAJPEAXPEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
?GetExternalDirPath@CRawStoreLayout@ComponentStore@@QEAAJPEAPEBU_LUNICODE_STRING@@@Z
?GetIsolationAllocator@LocalTransformerServices@COM@WCP@Windows@@UEAAJPEAPEAUIMalloc@@@Z
?GetLUnicodeParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAK@Z
?GetNtFilePathParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAKK@Z
?GetNtRegistryPathParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAKK@Z
?GetOutputStreamStreamFromSink@Tracing@Windows@@YAXPEAUIRtlOutputSink@Rtl@2@PEAPEAUIRtlFormattedOutputStream@42@@Z
?GetParameter@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_WPEAK@Z
?GetRootDirPath@CRawStoreLayout@ComponentStore@@QEAAJPEAPEBU_LUNICODE_STRING@@@Z
?GetSignerPublicKeyToken@CCatalog@@QEAAJPEAUIRtlSystemIsolationLayer@Rtl@Windows@@PEAU_LBLOB@@@Z
?GetSystem@LocalTransformerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlSystemIsolationLayerPublic@Rtl@4@@Z
?GetTemporaryDirectory@CRawStoreLayout@ComponentStore@@QEAAJKPEAV?$Auto@PEAUIRtlDirectory@Rtl@Windows@@@Windows@@@Z
?GetUserProfile@LocalTransformerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlUserProfile@Rtl@4@@Z
?GetWin32FilePathParameter@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEBGPEAPEAGPEAKK@Z
?GetWin32PathOfSiblingFile@COM@Windows@@YAJPEAXPEBGPEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
?GetWin32PathOfSiblingFile@COM@Windows@@YAJPEAXPEB_WPEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
?GetWin32RegistryPathParameter@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEBGPEAPEAUHKEY__@@PEAPEAGPEAKK@Z
?InitComponentData@VersionedIndexHelper@ComponentStore@@QEAAJ_NPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAUComponentData@2@PEA_N@Z
?Initialize@AutoLZMSDecoder@Rtl@WCP@Windows@@QEAAJXZ
?Initialize@AutoLZMSEncoder@Rtl@WCP@Windows@@QEAAJXZ
?Initialize@CApplicationAccessor@@QEAAJPEAUIRtlDefinitionAppId@Rtl@AppId@Windows@@PEAUIRtlAppIdAuthority@345@@Z
?Initialize@CBaseCanonicalizer@@MEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@UNode@Rtl@Microdom@Windows@@@5@PEAUIRtlWOFOStream@35@@Z
?Initialize@CC14NCanonicalizer@@MEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@UNode@Rtl@Microdom@Windows@@@5@PEAUIRtlWOFOStream@35@@Z
?Initialize@CComponentAccessor@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAUIRtlIdentityAuthority@345@@Z
?Initialize@CCoordinator@PrimitiveInstaller@@QEAAJKKKPEAUIRtlPrimitiveInstallerSupport@Rtl@PrimitiveInstallers@Windows@@PEAUIRtlPrimitiveInstallerRepairCallback@456@PEAUIRtlSystemIsolationLayer@46@@Z
?Initialize@CQueueExecutor@COM@Windows@@QEAAJKPEB_WPEAVIComponentStoreHelper@23@PEAUIRtlSystemIsolationLayer@Rtl@3@PEAVCTransactionContent@23@@Z
?Initialize@CRawInstallMap@InstallMap@@QEAAJ_NPEAUIRtlIdentityAuthority@Rtl@Identity@Windows@@PEAUIRtlKey@46@PEAUIRtlSystemIsolationLayer@46@@Z
?Initialize@CXmlCursor@@QEAAJPEAX_K@Z
?Initialize@ExecutionQueueDeriver@AiQueue@@QEAAJKKK_KPEAUIRtlSystemIsolationLayer@Rtl@Windows@@1PEBV?$CVector@UTransformsChangeQueueEntry@AiQueue@@VCCallDisposition@Rtl@BUCL@@@BUCL@@@Z
?Initialize@VersionedIndexHelper@ComponentStore@@QEAAJPEAUIRtlKey@Rtl@Windows@@_NPEAVIStoreLayoutHelper@2@PEAUIRtlIdentityAuthority@4Identity@5@@Z
?InitializeDeltaCompressor@Rtl@Windows@@YAJPEAX@Z
?InitializeStoreContext@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlIdentityAuthority@Rtl@Identity@Windows@@PEAUIRtlAppIdAuthority@4AppId@6@PEAUIRtlSystemIsolationLayer@46@2PEAUIRtlKey@46@3AEAVCRawInstallMap@InstallMap@@PEAUIRtlDirectory@46@PEAV?$Lock@U_RTL_CRITICAL_SECTION@@@6@5@Z
?InitializeTlcCanonicalData@CRawStoreLayout@ComponentStore@@QEAAJAEBVCApplicationAccessor@@PEAUTlcData@2@PEA_N@Z
?IsComponentFileDeltaOrLZMSCompressed@CRawStoreLayout@ComponentStore@@QEAAJAEBUComponentData@2@AEBU_LUNICODE_STRING@@PEA_N@Z
?IsComponentFileStaged@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@PEA_N@Z
?IsComponentFileStaged@CRawStoreLayout@ComponentStore@@SAJKAEBUComponentData@2@AEBU_LUNICODE_STRING@@PEA_N@Z
?IsDeltaCompressorAvailable@Rtl@Windows@@YAJPEA_N@Z
?IsManifestCompressed@Rtl@Implementation@WCP@Windows@@YAJPEBU_LBLOB@@PEA_N@Z
?IsMobileStore@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
?IsSkuAssembly@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
?IsStateSeparated@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
?LZMSCompressFile@Rtl@WCP@Windows@@YAJPEBU_LBLOB@@PEAUIRtlFile@13@1@Z
?LZMSDecompressBuffer@Rtl@WCP@Windows@@YAJ_KPEBU_LBLOB@@AEAV?$Auto@U_LBLOB@@@3@@Z
?LZMSDecompressFile@Rtl@WCP@Windows@@YAJ_KPEAUIRtlFile@13@1@Z
?LoadFirstResourceLanguageAgnostic@Rtl@Windows@@YAJKPEAUHINSTANCE__@@PEBG1PEAU_LBLOB@@@Z
?ManuallyMarkComponentStaged@CRawStoreLayout@ComponentStore@@QEAAJAEBVCComponentAccessor@@PEBU_LBLOB@@@Z
?MarkServicingStackCorruptHelper@LocalInstallerServices@COM@WCP@Windows@@UEAAJXZ
?Next@CXmlCursor@@QEAAJXZ
?OpenComponentDerivedData@VersionedIndexHelper@ComponentStore@@QEAAJ_NPEBU_LUNICODE_STRING@@1PEAUComponentData@2@PEA_N@Z
?OpenFamilyMap@CRawInstallMap@InstallMap@@QEAAJ_NPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAUMapForFamily@2@PEA_N@Z
?ParseBase16String@Rtl@Implementation@WCP@Windows@@YAJKPEBE0P6A?AU_RTL_UCSCHAR_DECODER_RETURN_VALUE@@00@ZPEAU_LBLOB@@PEA_N@Z
?ParseFromBlob@WcpManifest@@QEAAJAEBU_LBLOB@@PEAVStopWatch@Rtl@Windows@@@Z
?ParseFromBlob@WcpManifest@@QEAAJW4ParseDocumentFlags@XmlParserGenerator@@AEBU_LBLOB@@PEAVStopWatch@Rtl@Windows@@@Z
?PoqWasExecutedInline@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
?PrepareForInspect@CCoordinator@PrimitiveInstaller@@QEAAJXZ
?ProcessChange@CCoordinator@PrimitiveInstaller@@QEAAJAEBUComponentChange@2@@Z
?QueryComponentFlag@CRawStoreLayout@ComponentStore@@SAJAEBUComponentData@2@PEA_NPEAK@Z
?QueryConfigurationOption@CRawStoreLayout@ComponentStore@@QEBAJAEBU_GUID@@KPEAK@Z
?QueryConfigurationOption@CRawStoreLayout@ComponentStore@@QEBAJAEBU_GUID@@_NPEA_N@Z
?QueryInterface@LocalInstallerServices@COM@WCP@Windows@@UEAAJAEBU_GUID@@PEAPEAX@Z
?QueryInterface@LocalTransformerServices@COM@WCP@Windows@@UEAAJAEBU_GUID@@PEAPEAX@Z
?QuerySingleResourceOwnershipConfiguration@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEA_N@Z
?QuerySmiHiveUpdatesConfiguration@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAK@Z
?QueryUnchangedFileVersions@VersionedIndexHelper@ComponentStore@@QEAAJ_N0PEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@AEBU_LBLOB@@PEAV?$CVector@T_FOUR_PART_VERSION@@VCCallDisposition@Rtl@BUCL@@@BUCL@@PEA_N@Z
?ReadAt@CBufferedStream@@QEAAJ_K0PEAXPEA_K@Z
?ReadKeyValue@ComponentStore@@YAJPEAUIRtlKey@Rtl@Windows@@PEBU_LUNICODE_STRING@@PEAV?$Auto@U_LBLOB@@@4@PEAPEBU_KEY_VALUE_PARTIAL_INFORMATION@@PEA_N@Z
?Release@LocalInstallerServices@COM@WCP@Windows@@UEAAKXZ
?Release@LocalTransformerServices@COM@WCP@Windows@@UEAAKXZ
?RemoveComponentImplication@CRawStoreLayout@ComponentStore@@QEAAJAEBUComponentData@2@PEAUTlcData@2@@Z
?RemoveInstallMarkFromFamily@CRawInstallMap@InstallMap@@QEAAJPEAUMapForFamily@2@AEBT_FOUR_PART_VERSION@@@Z
?RemoveTlcMark@CRawStoreLayout@ComponentStore@@QEAAJKAEBUTlcInstaller@2@PEAUTlcData@2@@Z
?ReplaceMacros@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_WPEAUIDefinitionIdentity@@@Z
?ReplaceMacros@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_WK@Z
?ResolvePendingPhases@COM@Windows@@YAJKPEAVCQueueExecutor@12@PEA_N@Z
?RtlCaptureTracingParameterList@Rtl@WCP@Windows@@YAXK_KPEADQEAU_RTL_TRACING_PARAMETER@123@@Z
?RtlFormatIntoStreamFromParameterList@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@QEBD_KQEBU_RTL_TRACING_PARAMETER@123@@Z
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z
?RtlGetVersionResourceFromSelf@@YAXPEAU_RTL_VERSION_RESOURCE@@@Z
?RtlIsTracingEnabled@Rtl@WCP@Windows@@YA_NPEAU_RTL_TRACING_FACILITY@123@K@Z
?RtlShutdownTracing@Rtl@WCP@Windows@@YAXXZ
?RtlTraceEx@Rtl@WCP@Windows@@YAXPEBU_RTL_TRACING_STATIC_DATA@123@QEBQEBX@Z
?RtlTraceFailureFromGroupList@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@PEBU_RTL_TRACING_FAILURE_DATA@123@_KQEBU_RTL_FORMATTING_GROUP@123@@Z
?RtlTraceFormat_FormattableObject@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_HANDLE@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_IRtlBaseIdentity@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_IRtlDefinitionAppId@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCBOOLEAN@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCFOUR_PART_VERSION@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCGUID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLARGE_INTEGER_AsReadableTime@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLARGE_INTEGER_AsTime@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLBLOB@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLBLOB_AsBase64@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLBLOB_LimitLength@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLUNICODE_STRING@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLUNICODE_STRING_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLUTF8_STRING@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCLUTF8_STRING_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCNTSTATUS@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCPCVOID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCPCVOID_AsOptDerefPCVOID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCSIZE_T@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONGLONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONGLONG_AsDecimalOnly@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONGLONG_AsTickDelta@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG_AsDecimalOnly@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG_AsHexadecimalOnly@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG_AsHexadecimalOnly_ShortZero@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG_AsRegValueType@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG_AsSpecialCount@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCULONG_PTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCUNICODE_STRING@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCUSHORT_AsProcessorArchitecture@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCVOID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCWSTR_Array@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_PCbool_AsSuccessIndicator@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFormat_RegistryValue@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?RtlTraceFromGroupList@Rtl@WCP@Windows@@YAXKPEAU_RTL_TRACING_FACILITY@123@PEBU_RTL_TRACING_FAILURE_DATA@123@_KQEBU_RTL_FORMATTING_GROUP@123@@Z
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z
?RtlWcpParseManifestFromXml@Rtl@Implementation@WCP@Windows@@YAJKPEBU_LBLOB@@PEAUIParseErrorCallback@1Microdom@4@PEAUIRtlManifestParseErrorCallback@1ManifestParser@4@PEAV?$Auto@PEAVIRtlCdf@Rtl@Cdf@Windows@@@4@@Z
?RtlpSetSystem@WcpDllDebug@@YAJKPEAUIRtlSystemIsolationLayer@Rtl@Windows@@@Z
?Scavenge@CRawStoreLayout@ComponentStore@@QEAAJ_NAEBUScavengeControl@12@PEAUIRtlDirectory@Rtl@Windows@@PEAUIScavengeLastDitch@12@@Z
?SetComponentFileStageFlag@CRawStoreLayout@ComponentStore@@QEAAJ_NPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@@Z
?SetComponentFlag@CRawStoreLayout@ComponentStore@@QEAAJ_NKAEBUComponentData@2@@Z
?SetComponentFlag@CRawStoreLayout@ComponentStore@@QEAAJ_NKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@@Z
?ShouldRunAIs@ExecutionQueueDeriver@AiQueue@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEA_N@Z
?SilCreateDirectories@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@@Z
?SilCreateKeys@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@@Z
?SilGetRegistryDWORD@Rtl@Windows@@YAJKPEAUIRtlKey@12@AEBU_LUNICODE_STRING@@PEAK2@Z
?SilGetRegistryDWORD@Rtl@Windows@@YAJKPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@1PEAK2@Z
?SilGetRegistryString@Rtl@Windows@@YAJKPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@1PEAV?$Auto@U_LUNICODE_STRING@@@2@PEAK@Z
?SplitWin32RegistryPathIntoBaseAndSubKey@COM@Windows@@YAJPEBGPEAPEAUHKEY__@@PEAPEBG@Z
?TraceChangeList@Rtl@ComponentStore@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
?TraceETWEvent@Rtl@WCP@Windows@@YAXU_EVENT_DESCRIPTOR@@PEBGZZ
?TrimNamespaceTable@CC14NCanonicalizer@@MEAAJUElement@Rtl@Microdom@Windows@@PEAVCNamespaceTable@@PEAVCAttributeTable@@@Z
?TryGetRollbackStorageDirectory@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEAPEAUIRtlDirectory@Rtl@4@@Z
?TryGetRollbackStorageKey@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEAPEAUIRtlKey@Rtl@4@@Z
?TryGetWin32DirectoryRollbackStoragePath@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEAPEAG@Z
?TryGetWin32RegistryRollbackStoragePath@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEAPEAUHKEY__@@PEAPEAG@Z
?VerifyAdvancedInstaller@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEB_W00PEAK@Z
?VerifyCertChainRoot@CCatalog@@QEAAJKPEAK@Z
?VerifySigner@CCatalog@@QEAAJPEAUIRtlSystemIsolationLayer@Rtl@Windows@@@Z
?VirtualNtRegistryPathToPhysical@Rtl@Transformers@WCP@Windows@@YAJPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@K@Z
?VirtualPathToPhysical@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_W@Z
?VirtualWin32RegistryPathToPhysical@COM@Transformers@WCP@Windows@@YAJPEAUICSITransformerServices@@PEBGPEAPEAUHKEY__@@PEAPEAGK@Z
?WriteAt@CBufferedStream@@QEAAJ_K0PEBXPEA_K@Z
?get_IsolationAllocator@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAPEAUIMalloc@@@Z
?get_RebootIndicator@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAW4RebootIndicators@@@Z
?get_System@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlSystemIsolationLayerPublic@Rtl@4@@Z
?get_TargetProcessorArchitecture@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAK@Z
?get_UserProfile@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlUserProfile@Rtl@4@@Z
?put_RebootIndicator@LocalInstallerServices@COM@WCP@Windows@@UEAAJW4RebootIndicators@@@Z
?utiludom_GetElementImmediateChildrenByName@@YAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@234@PEBU_LUTF8_STRING@@2PEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@4@@Z
?utiludom_GetElementNameDetails@@YAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@234@PEAPEBU_LUTF8_STRING@@22@Z
AddTrusteeCapabilities
AllocateTrusteeData
ApplyTransactionPOQsToSil
ConvertHResultToNtStatus
ConvertNtStatusToHResult
CreateNewOfflineStore
CreateNewPseudoWindows
CreateNewPseudoWindowsEx
CreateNewWindows
DeleteTrusteeCapabilities
DeleteTrusteeData
DismountRegistryHives
DllCsiGetHandler
EnumerateFileRedirections
EnumerateRegistryRedirections
ExecuteMidgroundInstallers
ExpandAndNullTerminateEnvironmentVariableString
FreeAndZeroCSI_BROKEN_COMPONENT
FreeAndZeroCSI_REPAIRED_COMPONENT
FreeRedirectionsMemory
GetAppIdAuthority
GetFriendlyInstallerName
GetGroupTrusteeDataCountFromManifest
GetGroupTrusteeDataFromManifest
GetIdentityAuthority
GetPrimitiveInstallerSupport
GetSystemStore
GetVersionString
InitializeCSI_BROKEN_COMPONENT
InitializeCSI_REPAIRED_COMPONENT
IsCompactOSEnabled
IsIdentityPnPDriver
IsSkuAssembly
MapToPrivilegeName
MapToWellKnownSidType
MergeTwoChangeLists
OpenExistingOfflineStore
ParseManifest
ParseManifestEx
PoqParsePoqexecLog
RtlAllocateLBlob
RtlAllocateLUnicodeString
RtlAllocateLUtf8String
RtlAllocateUnicodeString
RtlAppendLUnicodeStringToLUnicodeString
RtlAppendLUtf8StringToLUnicodeString
RtlAppendLUtf8StringToLUtf8String
RtlAppendUcsCharacterToLUnicodeString
RtlAppendUcsCharactersToLUnicodeString
RtlBase64EncodeLBlobToLUnicodeString
RtlCalculateUtf16StringLengthFromLUtf8String
RtlCombineNtPathSegments
RtlCommitSmartLBlobUcsWritingContext
RtlCompareLUnicodeStringToLUtf8String
RtlCompareLUnicodeStrings
RtlCompareLUtf8Strings
RtlConcatenateLUnicodeStrings
RtlConcatenateLUtf8Strings
RtlConvertNtFilePathToWin32FilePath
RtlConvertNtRegistryPathToWin32RegistryPath
RtlConvertWin32FilePathToNtFilePath
RtlConvertWin32RegistryPathToNtRegistryPath
RtlConvertWin32RegistryPathToNtRegistryPathWithSid
RtlCopyLBlob
RtlCopyLUnicodeString
RtlCopyLUtf8String
RtlCopyLUtf8StringToLUnicodeString
RtlCreateCdfEx
RtlCreateDefaultMicrodomXmlWriter
RtlCreateDefaultXmlWriter
RtlCreateMicrodom
RtlCreateMicrodomUpdateContext
RtlCreateUpdatedMicrodomAsMicrodom
RtlCreateUpdatedMicrodomAsUtf8
RtlCreateUtf16LEUCSStringBuilder
RtlCreateUtf8UCSStringBuilder
RtlDeallocateUnicodeString
RtlDecodeBase64LUnicodeStringToLBlob
RtlDecodeBase64LUtf8StringToLBlob
RtlDecodeUtf16LE
RtlDecodeUtf8
RtlDestroyGrowingList
RtlDestroyMicrodomUpdateContext
RtlDetermineTranscodedLBlobSize
RtlDoesLUnicodeStringMatchExpression
RtlDowncaseUCSCharacter
RtlDuplicateCountedStringToLUnicodeString
RtlDuplicateLBlob
RtlDuplicateLUnicodeString
RtlDuplicateLUnicodeStringToLUtf8String
RtlDuplicateLUtf8String
RtlDuplicateLUtf8StringToLUnicodeString
RtlDuplicateNullTerminatedAnsiStringToLUnicodeString
RtlDuplicateNullTerminatedStringToLUnicodeString
RtlDuplicateUnicodeStringToLUnicodeString
RtlDuplicateUnicodeStringToLUtf8String
RtlEncodeUtf16LE
RtlEncodeUtf8
RtlEqualLUnicodeStringPrefix
RtlEqualLUnicodeStringSuffix
RtlEqualLUnicodeStrings
RtlEqualLUtf8StringPrefix
RtlEqualLUtf8Strings
RtlExecuteXPathOverMicrodom
RtlFilterLUnicodeString
RtlFinalizeSmartLBlobUcsWritingContext
RtlFreeLBlob
RtlFreeLUnicodeString
RtlFreeLUtf8String
RtlGetAppIdAuthority
RtlGetDirectSystem
RtlGetEncodingSizeUtf16
RtlGetEncodingSizeUtf8
RtlGetHashAlgorithmHashLength
RtlGetIdentityAuthority
RtlGetSystem
RtlHashLBlob
RtlHashLUnicodeString
RtlHashLUtf8String
RtlIndexIntoGrowingList
RtlInitLUnicodeStringFromNullTerminatedString
RtlInitLUnicodeStringFromUnicodeString
RtlInitUnicodeStringFromLUnicodeString
RtlInitializeGrowingList
RtlInitializeSmartLUnicodeStringWritingContext
RtlIsLBlobValid
RtlIsLUnicodeStringValid
RtlLengthOfUcsCharacterEncodedAsUtf8
RtlMatchLUnicodeStringAgainstLUtf8StringList
RtlMatchLUnicodeStringAgainstList
RtlMatchLUnicodeStringAgainstPointerList
RtlMatchLUtf8StringAgainstList
RtlMatchLUtf8StringAgainstPointerList
RtlMicrodomUpdateCreateAttributeNs
RtlMicrodomUpdateCreateElementNs
RtlMicrodomUpdateCreateTextual
RtlMicrodomUpdateGetCookieForExistingAttribute
RtlMicrodomUpdateGetCookieForExistingElement
RtlMicrodomUpdateGetCookieForExistingNode
RtlMicrodomUpdateInsertChild
RtlMicrodomUpdateInsertMicrodomNode
RtlMicrodomUpdateRemoveChild
RtlMicrodomUpdateRemoveElement
RtlMicrodomUpdateSetNodeName
RtlMicrodomUpdateSetNodeTextContent
RtlMurmurHashLBlob
RtlNsDestroy
RtlNsInitialize
RtlParseDottedVersion
RtlParseManifestMicrodomIntoCdf
RtlPreInitializeSmartLBlobUcsWritingContext
RtlReallocateLBlob
RtlReallocateLUnicodeString
RtlReallocateLUtf8String
RtlReallocateUnicodeString
RtlRegisterErrorOriginationCallback
RtlReplaceSystemPathMappings
RtlReportErrorOrigination
RtlReportErrorPropagation
RtlShutdownMicrodomSystem
RtlSmartMultiUcsEncoder_Utf16LE
RtlSmartMultiUcsEncoder_Utf8
RtlSmartUcsEncoder_Utf16LE
RtlSmartUcsEncoder_Utf8
RtlSplitLUnicodeString
RtlSplitLUtf8String
RtlSplitNtPath
RtlSplitWin32RegistryPathIntoRootAndLeaves
RtlTranscodeLBlobs
RtlUpcaseUCSCharacter
RtlWcpDllDebugEntrypoint
RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext
RtlWriteMicrodomXml
RtlWriteUcsDataIntoSmartLBlobUcsWritingContext
RtlXmlCloneRawTokenizationState
RtlXmlCopyStringOut
RtlXmlDefaultCompareStrings
RtlXmlDestroyNextLogicalThing
RtlXmlDetermineStreamEncoding
RtlXmlExtentToString
RtlXmlExtentToUtf8String
RtlXmlInitializeNextLogicalThing
RtlXmlInitializeTokenization
RtlXmlNextLogicalThing
RtlXmlNextToken
SetIsolationIMalloc
SilCreateBufferedSil
SilCreateRerootedSil
WcpInitialize
WcpReportExternalErrorOrigination
WcpSetHelperCallback
WcpShutdown
WriteWinnersFromChangelist

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 763KB - Virtual size: 762KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wdc.dll
.dll regsvr32 windows:10 windows x64 arch:x64

239f26687556e53f1e87e053cefdcecc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wdc.pdb

Imports

msvcrt

_onexit
memset
memmove
memcpy
floor
wcstombs
_wcsicmp
wcstok
__dllonexit
wcstoul
wcschr
ceil
__CxxFrameHandler3
_unlock
_lock
??1type_info@@UEAA@XZ
_initterm
mbstowcs
towlower
wcsstr
wcsrchr
_XcptFilter
_amsg_exit
free
_vsnwprintf
_wcsnicmp
_purecall
_callnewh
_wtoi
__C_specific_handler
malloc
iswdigit
wcscmp

duser

ForwardGadgetMessage

gdi32

BitBlt
Polygon
SetROP2
LineTo
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
Polyline
GetStockObject
SelectObject
CreatePen
EndDoc
EndPage
CreateDIBSection
StartDocW
CreateFontIndirectW
GetDeviceCaps
DeleteObject
MoveToEx
StartPage

advapi32

AdjustTokenPrivileges
RegCloseKey
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
EventUnregister
I_QueryTagInformation
EventRegister
IsValidSid
QueryServiceConfigW
EnumServicesStatusExW
ControlService
StartServiceW
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegisterWaitChainCOMCallback
GetThreadWaitChain
OpenThreadWaitChainSession
CloseThreadWaitChainSession
ProcessTrace
EnableTraceEx
StartTraceW
OpenTraceW
StopTraceW
QueryTraceW
CloseTrace
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
CreateWellKnownSid
EventWriteTransfer
MapGenericMask
ConvertSecurityDescriptorToStringSecurityDescriptorW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
SetSecurityDescriptorOwner
GetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetSecurityDescriptorGroup
MakeAbsoluteSD
RegGetValueW

ntdll

NtQuerySystemInformationEx
NtQuerySystemTime
RtlNtStatusToDosError
WinSqmIncrementDWORD
NtQueryInformationProcess
WinSqmAddToStream
WinSqmAddToAverageDWORD
RtlIpv6AddressToStringExW
NtSuspendProcess
NtResumeProcess
NtQueryInformationThread
NtQueryObject
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
RtlInitUnicodeString
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
NtQueryInformationToken
NtOpenFile
NtQuerySystemInformation

pdh

PdhExpandWildCardPathW
PdhGetFormattedCounterArrayW
PdhOpenQueryW
PdhCollectQueryData
PdhCloseQuery
PdhAddEnglishCounterW
PdhGetFormattedCounterValue

pdhui

PdhUiBrowseCountersExHW

shlwapi

AssocQueryStringW
ord348

shell32

ShellExecuteW
ord265
CommandLineToArgvW
ShellExecuteExW
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW

comctl32

ord344
ord412
ord413
ord410
ord345

kernel32

HeapSize
GetTickCount
Sleep
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
ReadProcessMemory
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetPhysicallyInstalledSystemMemory
ResolveDelayLoadedAPI
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
K32GetModuleFileNameExW
IsWow64Process
GetModuleHandleW
FindResourceExW
DeviceIoControl
GetVersionExW
GetProcessorSystemCycleTime
GetActiveProcessorGroupCount
TerminateProcess
lstrlenW
QueryFullProcessImageNameW
GetProcessTimes
OpenProcess
TlsSetValue
MapViewOfFile
K32GetModuleBaseNameW
K32GetDeviceDriverFileNameW
K32GetDeviceDriverBaseNameW
K32EnumProcessModulesEx
K32EnumDeviceDrivers
GetSystemWindowsDirectoryW
CreateFileMappingW
SetProcessWorkingSetSize
UnmapViewOfFile
ReleaseMutex
CreateMutexW
TlsGetValue
TryEnterCriticalSection
DebugBreak
GetCurrentThread
SetThreadPriority
GetNumberFormatW
MulDiv
GetErrorMode
QueryPerformanceCounter
GetSystemTimeAsFileTime
DuplicateHandle
TerminateThread
DelayLoadFailureHook
QueryPerformanceFrequency
HeapSetInformation
TlsAlloc
DeleteCriticalSection
TlsFree
CreateThread
GetLastError
CloseHandle
SetLastError
DeactivateActCtx
ActivateActCtx
LoadLibraryW
FindActCtxSectionStringW
CreateActCtxW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
GetProcAddress
CancelSynchronousIo
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateFileW
ReadFile
EnterCriticalSection
SetEvent
WaitForSingleObject
LeaveCriticalSection
CreateEventW
ResetEvent
WaitForMultipleObjects
GetCurrentThreadId
GetLocaleInfoW
GetFileAttributesW
DeleteFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetCommandLineW
LocalFree
FreeLibrary
GetLocalTime
GetComputerNameW
ExpandEnvironmentStringsW
WriteFile
LocalAlloc
HeapAlloc
GetProcessHeap
HeapFree
OutputDebugStringW
FormatMessageW
HeapReAlloc
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource
FindFirstFileW
FindNextFileW
FindClose
GetTempPathW
GetTempFileNameW
InitializeCriticalSection
GetFileSize
GetCurrentProcess
ProcessIdToSessionId
GetCurrentProcessId
SetErrorMode

user32

MapWindowPoints
GhostWindowFromHungWindow
HungWindowFromGhostWindow
CharLowerW
EnumWindowStationsW
CloseWindowStation
EnumDesktopsW
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
LoadImageW
LoadIconW
LoadStringW
GetDlgItem
SendMessageW
SetWindowTextW
GetClientRect
EnableWindow
SetWindowLongPtrW
GetWindowLongPtrW
EndDialog
IsDlgButtonChecked
CheckDlgButton
DialogBoxParamW
SetFocus
GetWindowTextW
GetDlgItemTextW
SetDlgItemTextW
SendDlgItemMessageW
PostMessageW
GetParent
CheckRadioButton
CallWindowProcW
GetDC
LoadBitmapW
SendMessageTimeoutW
PostThreadMessageW
KillTimer
SetTimer
RegisterClipboardFormatW
DefWindowProcW
FlashWindow
IsWindowEnabled
SetCursor
LoadCursorW
GetKeyState
GetWindowRect
LoadMenuW
GetSubMenu
CheckMenuItem
EnableMenuItem
TrackPopupMenuEx
DestroyMenu
GetMenuItemCount
CloseDesktop
GetMenuStringW
SetActiveWindow
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
DestroyIcon
GetClassNameW
GetWindow
MessageBeep
GetSystemMetrics
ShowWindow
DestroyWindow
CreateWindowExW
FillRect
RegisterClassW
InvalidateRect
BeginPaint
EndPaint
UpdateWindow
CheckMenuRadioItem
GetMenu
GetMenuItemID
AppendMenuW
DeleteMenu
SetRect
SetWindowPos
ReleaseDC
RemoveMenu
PtInRect
GetScrollPos
GetMessagePos
EmptyClipboard
SetClipboardData
GetSysColor
GetFocus
GetWindowLongW
IsWindowVisible
IsHungAppWindow
GetWindowThreadProcessId
OpenDesktopW
GetThreadDesktop
SetThreadDesktop
EnumDesktopWindows

oleaut32

SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
VariantClear
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringLen
VariantChangeType
VariantInit
SysFreeString
SysAllocString
SystemTimeToVariantTime
VariantCopy

ole32

CoCreateInstanceEx
CreateStreamOnHGlobal
CoTaskMemRealloc
CoUninitialize
CoCreateInstance
CoGetActivationState
CoGetCallState
GetHGlobalFromStream
StringFromCLSID
ReadClassStm
WriteClassStm
CoTaskMemAlloc
StringFromGUID2
CoSetProxyBlanket
CreateOleAdviseHolder
CoInitializeEx
CoTaskMemFree
CoInitialize

odbc32

ord75
ord157
ord31
ord24

uxtheme

SetWindowTheme

secur32

GetUserNameExW

credui

CredUIPromptForCredentialsW

wevtapi

EvtCreateRenderContext
EvtOpenPublisherMetadata
EvtOpenSession
EvtSubscribe
EvtRender
EvtNext
EvtClose

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

pla

PlaGetLegacyAlertActionsFlagsFromString
PlaGetLegacyAlertActionsStringFromFlags
PlaGetServerCapabilities
PlaExpandTaskArguments
PlaDeleteReport

iphlpapi

GetPerTcpConnectionEStats
GetPerTcp6ConnectionEStats
GetExtendedTcpTable
GetExtendedUdpTable
GetAdaptersAddresses
NhGetInterfaceNameFromDeviceGuid
GetIfEntry2
SetPerTcp6ConnectionEStats
SetPerTcpConnectionEStats

winsta

WinStationGetProcessSid

utildll

CachedGetUserFromSid

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

api-ms-win-core-appcompat-l1-1-1

BaseReadAppCompatDataForProcess
BaseFreeAppCompatDataForProcess

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WdcParseLegacyFile
WdcRunTaskAsInteractiveUser

Sections

.text
Size: 491KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 690KB - Virtual size: 690KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wdstftp.dll
.dll windows:10 windows x64 arch:x64

994358051d933c4a8ab3c6296f857f7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wdstftp.pdb

Imports

msvcrt

towupper
qsort
memcpy_s
wcsstr
_vsnwprintf
swscanf_s
wcsrchr
_wcsicmp
_vsnprintf
_strtoui64
strtoul
_stricmp
_wcsnicmp
toupper
_vscwprintf
memcmp
memcpy
iswspace
memmove_s
srand
rand
wcsncmp
wcschr
memmove
_onexit
__dllonexit
_unlock
_lock
__CxxFrameHandler3
__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter
_purecall
_strcmpi
memset

kernel32

GetProcAddress
FreeLibrary
CreateDirectoryW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
SetFileAttributesW
UnmapViewOfFile
GetVolumePathNamesForVolumeNameW
DosDateTimeToFileTime
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLongPathNameW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MapViewOfFile
CreateFileMappingW
CreateSemaphoreW
ReleaseSemaphore
MultiByteToWideChar
LocalFileTimeToFileTime
SetFileTime
GetTickCount
WaitForMultipleObjects
DuplicateHandle
OpenProcess
WideCharToMultiByte
WaitForSingleObject
GetModuleHandleExW
LocalAlloc
GetCurrentProcess
ResetEvent
UnlockFileEx
LockFileEx
InitializeCriticalSectionAndSpinCount
GetFinalPathNameByHandleW
GetVolumeInformationW
GetFullPathNameW
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
WriteFile
DeviceIoControl
GetFileInformationByHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
HeapFree
HeapAlloc
HeapDestroy
HeapSetInformation
HeapCreate
RaiseException
SwitchToThread
GetCurrentThreadId
ChangeTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueTimer
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
GetLastError
GetFileAttributesW
InitializeCriticalSection
DeleteCriticalSection
OpenFileMappingW
OutputDebugStringA
GetModuleHandleW
GetCurrentDirectoryW
GetTempPathW
SystemTimeToFileTime
GetSystemTime
CloseHandle
CreateFileW
GetFileTime
CompareFileTime
GetFileSize
BindIoCompletionCallback
ReadFile
SetEvent
CreateEventW
WaitForSingleObjectEx
GetHandleInformation
SetLastError
GetFileSizeEx
SetFilePointerEx
SetEndOfFile
GetProcessHeap
GetEnvironmentVariableW
CompareStringW
GetOverlappedResult
LocalFree
FlushFileBuffers
HeapReAlloc
DeleteFileW

advapi32

OpenProcessToken
RegQueryValueExW
RegisterEventSourceW
DeregisterEventSource
ReportEventW
EventRegister
EventUnregister
RegCloseKey
RegOpenKeyExW
EventWriteTransfer
AdjustTokenPrivileges
ConvertStringSecurityDescriptorToSecurityDescriptorW

wdssrv

WdsRegisterCallback
WdsQueueWorkItem
WdsSendPacketList
WdsSendPacket
WdsPacketAllocate
WdsTraceV
WdsEndpointClose
WdsPacketFree
WdsSendReply
WdsEndpointOpen

bcrypt

BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptOpenAlgorithmProvider
BCryptGetProperty

cabinet

ord20
ord23
ord22

wdscsl

WdsCpPacketInitialize
WdsCpRecvPacketInitialize
WdsClientInitializeLibrary
WdsClientFreeLibrary
WdsCpPacketRelease
WdsCpParameterAdd
WdsCpPacketGetBuffer

wdsdiag

WdsDiagRecordEvent

ntdll

RtlReAllocateHeap
RtlRaiseStatus
DbgPrintEx
RtlDeleteCriticalSection
NtYieldExecution
RtlInitializeCriticalSection
RtlDeleteResource
RtlAcquireResourceShared
RtlAcquireResourceExclusive
RtlInitializeResource
NtCreateFile
NtSetInformationFile
NtQueryInformationProcess
NtQueryInformationFile
RtlFreeHeap
NtClose
RtlAllocateHeap
RtlDosPathNameToNtPathName_U
RtlNtStatusToDosError
RtlSetIoCompletionCallback
RtlReleaseResource

shlwapi

PathCanonicalizeW

oleaut32

GetErrorInfo
SysFreeString
SetErrorInfo

netapi32

NetApiBufferFree
NetShareGetInfo

ws2_32

ntohs
htons
WSAStartup
WSACleanup
WSAAddressToStringW
WSAGetLastError

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreate

Exports

Exports

ClosePerfCounters
CollectPerfCounters
OpenPerfCounters
WdsProviderInitialize

Sections

.text
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/webengine.dll
.dll regsvr32 windows:5 windows x64 arch:x64

e1b9b6127c4ccfec93396d10c10a6fcf

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:7f:6a:12:d4:43:16:b6:0c:04:51:c2:6a:cf:c8:42:92:3e:f7:9f:46:77:84:8f:38:e8:27:60:dc:b2:91:21
Signer

Actual PE Digest

a0:7f:6a:12:d4:43:16:b6:0c:04:51:c2:6a:cf:c8:42:92:3e:f7:9f:46:77:84:8f:38:e8:27:60:dc:b2:91:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

webengine.pdb

Imports

msvcr80

free
memcpy
_itow_s
__C_specific_handler
memset
_wcsicmp
_purecall
_wtoi
wcsstr
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
wcstol
_errno
iswxdigit
isxdigit
_CxxThrowException
strrchr
_wtol
memcmp
memmove
strncmp
towlower
strtol
_atoi64
isdigit
sscanf
_itoa_s
strcat_s
sprintf_s
strtoul
strncpy_s
wcschr
calloc
strcpy_s
strstr
_wcslwr
_ultoa_s
_vsnprintf_s
swscanf
_wcsnicmp
wcstok
_beginthread
bsearch
wcsrchr
_set_error_mode
iswspace
iswalnum
wcstoul
_stricmp
_strnicmp
atoi
memchr
strchr
_vsnwprintf_s
wcsncmp

ntdll

NtQueryInformationProcess
RtlVirtualUnwind
RtlZeroMemory
RtlLookupFunctionEntry
NtQuerySystemInformation
RtlCopyMemory
RtlCaptureContext
NtQueryInformationThread
RtlCaptureStackBackTrace

kernel32

GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
CreateTimerQueueTimer
DeleteTimerQueueTimer
VirtualFree
VirtualAlloc
ExpandEnvironmentStringsW
TlsFree
GetFileSizeEx
CreateSemaphoreA
CompareStringW
LocalReAlloc
GetSystemDefaultLangID
ReleaseSemaphore
CreateSemaphoreW
OutputDebugStringA
GetProcessAffinityMask
HeapSize
HeapReAlloc
GetFileType
GetConsoleMode
WriteConsoleW
GetSystemDirectoryW
ReadProcessMemory
GetModuleHandleA
CreateRemoteThread
PostQueuedCompletionStatus
CreateIoCompletionPort
GetQueuedCompletionStatus
GetSystemDirectoryA
LoadLibraryA
CompareFileTime
lstrcmpW
RemoveDirectoryW
FlushFileBuffers
GetDateFormatA
GetTimeFormatA
CopyFileW
WritePrivateProfileStringW
GetTempPathW
GetWindowsDirectoryW
GetTempFileNameW
FindResourceW
SizeofResource
LoadResource
LockResource
DeleteFileW
LocalAlloc
CreateDirectoryW
GetSystemWindowsDirectoryW
GetComputerNameW
GetFileAttributesW
GlobalMemoryStatus
DebugBreak
GetEnvironmentVariableW
ResetEvent
SetEvent
OpenProcess
GetSystemInfo
TerminateProcess
CreateProcessW
WaitForMultipleObjects
GetExitCodeProcess
CreateEventW
GetVersionExW
ConnectNamedPipe
DisconnectNamedPipe
FindFirstFileExW
FindNextFileW
FindFirstFileW
FindClose
GetSystemDefaultUILanguage
LoadLibraryExW
GetStdHandle
GetUserDefaultUILanguage
GetConsoleOutputCP
GetLocaleInfoW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ReadFile
WriteFile
CreateNamedPipeW
lstrlenW
GetOverlappedResult
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
HeapFree
HeapCreate
HeapAlloc
SwitchToThread
lstrlenA
WideCharToMultiByte
FormatMessageW
GetFileAttributesExW
GetTickCount
CreateFileW
OutputDebugStringW
GetCurrentThreadId
WaitForSingleObject
CreateThread
ReadDirectoryChangesW
GetLongPathNameW
GetSystemTimeAsFileTime
LocalFree
DuplicateHandle
GetModuleFileNameW
RaiseException
TlsSetValue
TlsGetValue
MultiByteToWideChar
GetFileSize
FormatMessageA
AddAtomW
FindAtomW
FreeLibrary
GetProcAddress
LoadLibraryW
SetLastError
CreateMutexW
WaitForSingleObjectEx
ReleaseMutex
GlobalFree
GlobalAlloc
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetProcessHeap

user32

LoadStringA
CharNextExA
GetUserObjectSecurity
SetUserObjectSecurity
MessageBoxW
PeekMessageW
CharNextA
CharPrevW

userenv

LoadUserProfileW
CreateEnvironmentBlock
DestroyEnvironmentBlock

psapi

GetModuleFileNameExW
GetProcessMemoryInfo

Exports

Exports

??0BUFFER@@QEAA@I@Z
??0BUFFER@@QEAA@PEAEI@Z
??0BUFFER_CHAIN@@QEAA@XZ
??0BUFFER_CHAIN_ITEM@@QEAA@I@Z
??0CCritSec@@QEAA@XZ
??0CFakeLock@@QEAA@XZ
??0CReaderWriterLock2@@QEAA@XZ
??0CReaderWriterLock3@@QEAA@XZ
??0CReaderWriterLock@@QEAA@XZ
??0CRtlResource@@QEAA@XZ
??0CShareLock@@QEAA@XZ
??0CSharelock@@QEAA@HH@Z
??0CSmallSpinLock@@QEAA@XZ
??0CSpinLock@@QEAA@XZ
??0STRA@@AEAA@AEBV0@@Z
??0STRA@@AEAA@PEAD@Z
??0STRA@@AEAA@PEBD@Z
??0STRA@@QEAA@PEADK@Z
??0STRA@@QEAA@XZ
??0STRAU@@QEAA@AEAV0@@Z
??0STRAU@@QEAA@PEBD@Z
??0STRAU@@QEAA@PEBDH@Z
??0STRAU@@QEAA@PEBG@Z
??0STRAU@@QEAA@XZ
??0STRU@@AEAA@AEBV0@@Z
??0STRU@@AEAA@PEAG@Z
??0STRU@@AEAA@PEBG@Z
??0STRU@@QEAA@PEAGK@Z
??0STRU@@QEAA@XZ
??0TS_RESOURCE@@QEAA@XZ
??1BUFFER@@QEAA@XZ
??1BUFFER_CHAIN@@QEAA@XZ
??1BUFFER_CHAIN_ITEM@@QEAA@XZ
??1CCritSec@@QEAA@XZ
??1CFakeLock@@QEAA@XZ
??1CReaderWriterLock2@@QEAA@XZ
??1CReaderWriterLock3@@QEAA@XZ
??1CReaderWriterLock@@QEAA@XZ
??1CRtlResource@@QEAA@XZ
??1CShareLock@@QEAA@XZ
??1CSharelock@@QEAA@XZ
??1CSmallSpinLock@@QEAA@XZ
??1CSpinLock@@QEAA@XZ
??1STRA@@QEAA@XZ
??1STRAU@@QEAA@XZ
??1STRU@@QEAA@XZ
??1TS_RESOURCE@@QEAA@XZ
??2BUFFER_CHAIN_ITEM@@SAPEAX_K@Z
??3BUFFER_CHAIN_ITEM@@SAXPEAX@Z
??4?$CLockBase@$00$00$02$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$01$00$00$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$02$00$00$00$00$00@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$03$00$00$01$02$02@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$04$01$00$01$02$02@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$05$01$00$01$02$02@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$06$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$07$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$08$01$00$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4BUFFER@@QEAAAEAV0@AEBV0@@Z
??4BUFFER_CHAIN@@QEAAAEAV0@AEBV0@@Z
??4BUFFER_CHAIN_ITEM@@QEAAAEAV0@AEBV0@@Z
??4CCritSec@@QEAAAEAV0@AEBV0@@Z
??4CFakeLock@@QEAAAEAV0@AEBV0@@Z
??4CReaderWriterLock2@@QEAAAEAV0@AEBV0@@Z
??4CReaderWriterLock3@@QEAAAEAV0@AEBV0@@Z
??4CReaderWriterLock@@QEAAAEAV0@AEBV0@@Z
??4CRtlResource@@QEAAAEAV0@AEBV0@@Z
??4CSmallSpinLock@@QEAAAEAV0@AEBV0@@Z
??4CSpinLock@@QEAAAEAV0@AEBV0@@Z
??4STRA@@AEAAAEAV0@AEBV0@@Z
??4STRAU@@QEAAAEAV0@AEBV0@@Z
??4STRU@@AEAAAEAV0@AEBV0@@Z
??4TS_RESOURCE@@QEAAAEAV0@AEBV0@@Z
??_FBUFFER@@QEAAXXZ
??_FBUFFER_CHAIN_ITEM@@QEAAXXZ
??_FCSharelock@@QEAAXXZ
?ActiveUsers@CSharelock@@QEAAHXZ
?Append@STRA@@QEAAJAEBV1@@Z
?Append@STRA@@QEAAJPEBD@Z
?Append@STRA@@QEAAJPEBDK@Z
?Append@STRAU@@QEAAHAEAV1@@Z
?Append@STRAU@@QEAAHPEBD@Z
?Append@STRAU@@QEAAHPEBDK@Z
?Append@STRAU@@QEAAHPEBG@Z
?Append@STRAU@@QEAAHPEBGK@Z
?Append@STRU@@QEAAJAEBV1@@Z
?Append@STRU@@QEAAJG@Z
?Append@STRU@@QEAAJPEBG@Z
?Append@STRU@@QEAAJPEBGK@Z
?AppendA@STRU@@QEAAJPEBD@Z
?AppendA@STRU@@QEAAJPEBDK@Z
?AppendBuffer@BUFFER_CHAIN@@QEAAHPEAVBUFFER_CHAIN_ITEM@@@Z
?AppendW@STRA@@QEAAJPEBG@Z
?AppendW@STRA@@QEAAJPEBGK@Z
?AppendWTruncate@STRA@@QEAAJPEBG@Z
?AppendWTruncate@STRA@@QEAAJPEBGK@Z
?AuxAppend@STRA@@AEAAJPEBEKKH@Z
?AuxAppend@STRAU@@AEAAHPEBDIH@Z
?AuxAppend@STRAU@@AEAAHPEBGIH@Z
?AuxAppend@STRU@@AEAAJPEBEKKH@Z
?AuxAppendA@STRU@@AEAAJPEBEKKH@Z
?AuxAppendW@STRA@@AEAAJPEBGKKH@Z
?AuxAppendWTruncate@STRA@@AEAAJPEBGKKH@Z
?AuxInit@STRAU@@AEAAXPEBD@Z
?AuxInit@STRAU@@AEAAXPEBG@Z
?CalcTotalSize@BUFFER_CHAIN@@QEBAKH@Z
?ChangeExclusiveLockToSharedLock@CSharelock@@QEAAXXZ
?ChangeSharedLockToExclusiveLock@CSharelock@@QEAAEH@Z
?ClaimExclusiveLock@CSharelock@@QEAAEH@Z
?ClaimShareLock@CSharelock@@QEAAEH@Z
?ClassName@CCritSec@@SAPEBGXZ
?ClassName@CFakeLock@@SAPEBGXZ
?ClassName@CReaderWriterLock2@@SAPEBGXZ
?ClassName@CReaderWriterLock3@@SAPEBGXZ
?ClassName@CReaderWriterLock@@SAPEBGXZ
?ClassName@CRtlResource@@SAPEBDXZ
?ClassName@CShareLock@@SAPEBDXZ
?ClassName@CSmallSpinLock@@SAPEBGXZ
?ClassName@CSpinLock@@SAPEBGXZ
?Clone@STRA@@QEBAJPEAV1@@Z
?Convert@TS_RESOURCE@@QEAAXW4TSRES_CONV_TYPE@@@Z
?ConvertExclusiveToShared@CCritSec@@QEAAXXZ
?ConvertExclusiveToShared@CFakeLock@@QEAAXXZ
?ConvertExclusiveToShared@CReaderWriterLock2@@QEAAXXZ
?ConvertExclusiveToShared@CReaderWriterLock3@@QEAAXXZ
?ConvertExclusiveToShared@CReaderWriterLock@@QEAAXXZ
?ConvertExclusiveToShared@CRtlResource@@QEAAXXZ
?ConvertExclusiveToShared@CShareLock@@QEAAXXZ
?ConvertExclusiveToShared@CSmallSpinLock@@QEAAXXZ
?ConvertExclusiveToShared@CSpinLock@@QEAAXXZ
?ConvertSharedToExclusive@CCritSec@@QEAAXXZ
?ConvertSharedToExclusive@CFakeLock@@QEAAXXZ
?ConvertSharedToExclusive@CReaderWriterLock2@@QEAAXXZ
?ConvertSharedToExclusive@CReaderWriterLock3@@QEAAXXZ
?ConvertSharedToExclusive@CReaderWriterLock@@QEAAXXZ
?ConvertSharedToExclusive@CRtlResource@@QEAAXXZ
?ConvertSharedToExclusive@CShareLock@@QEAAXXZ
?ConvertSharedToExclusive@CSmallSpinLock@@QEAAXXZ
?ConvertSharedToExclusive@CSpinLock@@QEAAXXZ
?Copy@STRA@@QEAAJAEBV1@@Z
?Copy@STRA@@QEAAJPEBD@Z
?Copy@STRA@@QEAAJPEBDK@Z
?Copy@STRAU@@QEAAHAEAV1@@Z
?Copy@STRAU@@QEAAHPEBD@Z
?Copy@STRAU@@QEAAHPEBDK@Z
?Copy@STRAU@@QEAAHPEBG@Z
?Copy@STRAU@@QEAAHPEBGK@Z
?Copy@STRU@@QEAAJAEBV1@@Z
?Copy@STRU@@QEAAJPEBG@Z
?Copy@STRU@@QEAAJPEBGK@Z
?Copy@STRU@@QEAAJPEBV1@@Z
?CopyA@STRU@@QEAAJPEBD@Z
?CopyA@STRU@@QEAAJPEBDK@Z
?CopyBinary@STRA@@QEAAJPEAXK@Z
?CopyToBuffer@STRA@@QEBAJPEADPEAK@Z
?CopyToBuffer@STRU@@QEBAJPEAGPEAK@Z
?CopyW@STRA@@QEAAJPEBG@Z
?CopyW@STRA@@QEAAJPEBGK@Z
?CopyWToUTF8Escaped@STRA@@QEAAJAEBVSTRU@@@Z
?CopyWToUTF8Escaped@STRA@@QEAAJPEBG@Z
?CopyWToUTF8Escaped@STRA@@QEAAJPEBGK@Z
?CopyWToUTF8Unescaped@STRA@@QEAAJAEBVSTRU@@@Z
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBG@Z
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBGK@Z
?CopyWTruncate@STRA@@QEAAJPEBG@Z
?CopyWTruncate@STRA@@QEAAJPEBGK@Z
?DeleteChain@BUFFER_CHAIN@@QEAAKXZ
?Equals@STRA@@QEBAHAEBV1@@Z
?Equals@STRA@@QEBAHPEBD@Z
?Equals@STRU@@QEBAHAEBV1@@Z
?Equals@STRU@@QEBAHPEBG@Z
?EqualsNoCase@STRA@@QEBAHAEBV1@@Z
?EqualsNoCase@STRA@@QEBAHPEBD@Z
?EqualsNoCase@STRU@@QEBAHAEBV1@@Z
?EqualsNoCase@STRU@@QEBAHPEBG@Z
?Escape@STRA@@QEAAJHH@Z
?Escape@STRU@@QEAAJXZ
?FormatString@STRA@@QEAAJKQEAPEBDPEBDK@Z
?FreeMemory@BUFFER@@QEAAXXZ
?GetDefaultSpinAdjustmentFactor@CCritSec@@SANXZ
?GetDefaultSpinAdjustmentFactor@CFakeLock@@SANXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SANXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SANXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SANXZ
?GetDefaultSpinAdjustmentFactor@CRtlResource@@SANXZ
?GetDefaultSpinAdjustmentFactor@CShareLock@@SANXZ
?GetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SANXZ
?GetDefaultSpinAdjustmentFactor@CSpinLock@@SANXZ
?GetDefaultSpinCount@CCritSec@@SAGXZ
?GetDefaultSpinCount@CFakeLock@@SAGXZ
?GetDefaultSpinCount@CReaderWriterLock2@@SAGXZ
?GetDefaultSpinCount@CReaderWriterLock3@@SAGXZ
?GetDefaultSpinCount@CReaderWriterLock@@SAGXZ
?GetDefaultSpinCount@CRtlResource@@SAGXZ
?GetDefaultSpinCount@CShareLock@@SAGXZ
?GetDefaultSpinCount@CSmallSpinLock@@SAGXZ
?GetDefaultSpinCount@CSpinLock@@SAGXZ
?GetNewStorage@BUFFER@@AEAAHI@Z
?GetSpinCount@CCritSec@@QEBAGXZ
?GetSpinCount@CFakeLock@@QEBAGXZ
?GetSpinCount@CReaderWriterLock2@@QEBAGXZ
?GetSpinCount@CReaderWriterLock3@@QEBAGXZ
?GetSpinCount@CReaderWriterLock@@QEBAGXZ
?GetSpinCount@CRtlResource@@QEBAGXZ
?GetSpinCount@CShareLock@@QEBAGXZ
?GetSpinCount@CSmallSpinLock@@QEBAGXZ
?GetSpinCount@CSpinLock@@QEBAGXZ
?HTMLEncode@STRA@@QEAAJXZ
?HTMLEncode@STRU@@QEAAJXZ
?IsCurrentUnicode@STRAU@@QEAAHXZ
?IsDynAlloced@BUFFER@@AEBAHXZ
?IsEmpty@STRA@@QEBAHXZ
?IsEmpty@STRAU@@QEAAHXZ
?IsEmpty@STRU@@QEBAHXZ
?IsReadLocked@CCritSec@@QEBA_NXZ
?IsReadLocked@CFakeLock@@QEBA_NXZ
?IsReadLocked@CReaderWriterLock2@@QEBA_NXZ
?IsReadLocked@CReaderWriterLock3@@QEBA_NXZ
?IsReadLocked@CReaderWriterLock@@QEBA_NXZ
?IsReadLocked@CRtlResource@@QEBA_NXZ
?IsReadLocked@CShareLock@@QEBA_NXZ
?IsReadLocked@CSmallSpinLock@@QEBA_NXZ
?IsReadLocked@CSpinLock@@QEBA_NXZ
?IsReadUnlocked@CCritSec@@QEBA_NXZ
?IsReadUnlocked@CFakeLock@@QEBA_NXZ
?IsReadUnlocked@CReaderWriterLock2@@QEBA_NXZ
?IsReadUnlocked@CReaderWriterLock3@@QEBA_NXZ
?IsReadUnlocked@CReaderWriterLock@@QEBA_NXZ
?IsReadUnlocked@CRtlResource@@QEBA_NXZ
?IsReadUnlocked@CShareLock@@QEBA_NXZ
?IsReadUnlocked@CSmallSpinLock@@QEBA_NXZ
?IsReadUnlocked@CSpinLock@@QEBA_NXZ
?IsValid@BUFFER@@QEBAHXZ
?IsValid@STRA@@QEBAHXZ
?IsValid@STRAU@@QEAAHXZ
?IsWriteLocked@CCritSec@@QEBA_NXZ
?IsWriteLocked@CFakeLock@@QEBA_NXZ
?IsWriteLocked@CReaderWriterLock2@@QEBA_NXZ
?IsWriteLocked@CReaderWriterLock3@@QEBA_NXZ
?IsWriteLocked@CReaderWriterLock@@QEBA_NXZ
?IsWriteLocked@CRtlResource@@QEBA_NXZ
?IsWriteLocked@CShareLock@@QEBA_NXZ
?IsWriteLocked@CSmallSpinLock@@QEBA_NXZ
?IsWriteLocked@CSpinLock@@QEBA_NXZ
?IsWriteUnlocked@CCritSec@@QEBA_NXZ
?IsWriteUnlocked@CFakeLock@@QEBA_NXZ
?IsWriteUnlocked@CReaderWriterLock2@@QEBA_NXZ
?IsWriteUnlocked@CReaderWriterLock3@@QEBA_NXZ
?IsWriteUnlocked@CReaderWriterLock@@QEBA_NXZ
?IsWriteUnlocked@CRtlResource@@QEBA_NXZ
?IsWriteUnlocked@CShareLock@@QEBA_NXZ
?IsWriteUnlocked@CSmallSpinLock@@QEBA_NXZ
?IsWriteUnlocked@CSpinLock@@QEBA_NXZ
?LoadStringW@STRA@@QEAAJKPEAUHINSTANCE__@@@Z
?LoadStringW@STRA@@QEAAJKPEBDK@Z
?Lock@TS_RESOURCE@@QEAAXW4TSRES_LOCK_TYPE@@@Z
?LockType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?MutexType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?NextBuffer@BUFFER_CHAIN@@QEAAPEAVBUFFER_CHAIN_ITEM@@PEAV2@@Z
?PerLockSpin@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PrivateQueryStr@STRAU@@AEAAPEAGH@Z
?QueryBuffer@STRU@@QEAAPEAVBUFFER@@XZ
?QueryCB@STRA@@QEBAIXZ
?QueryCB@STRAU@@QEAAIH@Z
?QueryCB@STRU@@QEBAIXZ
?QueryCBA@STRAU@@QEAAIXZ
?QueryCBW@STRAU@@QEAAIXZ
?QueryCCH@STRA@@QEBAIXZ
?QueryCCH@STRAU@@QEAAIXZ
?QueryCCH@STRU@@QEBAIXZ
?QueryPtr@BUFFER@@QEBAPEAXXZ
?QuerySize@BUFFER@@QEBAIXZ
?QuerySize@STRA@@QEBAIXZ
?QuerySizeCCH@STRA@@QEBAIXZ
?QuerySizeCCH@STRU@@QEBAIXZ
?QueryStr@STRA@@QEAAPEADXZ
?QueryStr@STRA@@QEBAPEBDXZ
?QueryStr@STRAU@@QEAAPEAGH@Z
?QueryStr@STRU@@QEAAPEAGXZ
?QueryStr@STRU@@QEBAPEBGXZ
?QueryStrA@STRAU@@QEAAPEADXZ
?QueryStrW@STRAU@@QEAAPEAGXZ
?QueryUsed@BUFFER_CHAIN_ITEM@@QEBAKXZ
?QueueType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?ReadLock@CCritSec@@QEAAXXZ
?ReadLock@CFakeLock@@QEAAXXZ
?ReadLock@CReaderWriterLock2@@QEAAXXZ
?ReadLock@CReaderWriterLock3@@QEAAXXZ
?ReadLock@CReaderWriterLock@@QEAAXXZ
?ReadLock@CRtlResource@@QEAAXXZ
?ReadLock@CShareLock@@QEAAXXZ
?ReadLock@CSmallSpinLock@@QEAAXXZ
?ReadLock@CSpinLock@@QEAAXXZ
?ReadOrWriteLock@CCritSec@@QEAA_NXZ
?ReadOrWriteLock@CFakeLock@@QEAA_NXZ
?ReadOrWriteLock@CReaderWriterLock3@@QEAA_NXZ
?ReadOrWriteLock@CSpinLock@@QEAA_NXZ
?ReadOrWriteUnlock@CCritSec@@QEAAX_N@Z
?ReadOrWriteUnlock@CFakeLock@@QEAAX_N@Z
?ReadOrWriteUnlock@CReaderWriterLock3@@QEAAX_N@Z
?ReadOrWriteUnlock@CSpinLock@@QEAAX_N@Z
?ReadUnlock@CCritSec@@QEAAXXZ
?ReadUnlock@CFakeLock@@QEAAXXZ
?ReadUnlock@CReaderWriterLock2@@QEAAXXZ
?ReadUnlock@CReaderWriterLock3@@QEAAXXZ
?ReadUnlock@CReaderWriterLock@@QEAAXXZ
?ReadUnlock@CRtlResource@@QEAAXXZ
?ReadUnlock@CShareLock@@QEAAXXZ
?ReadUnlock@CSmallSpinLock@@QEAAXXZ
?ReadUnlock@CSpinLock@@QEAAXXZ
?ReallocStorage@BUFFER@@AEAAHI@Z
?Recursion@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?ReleaseExclusiveLock@CSharelock@@QEAAXXZ
?ReleaseShareLock@CSharelock@@QEAAXXZ
?Reset@STRA@@QEAAXXZ
?Reset@STRAU@@QEAAXXZ
?Reset@STRU@@QEAAXXZ
?Resize@BUFFER@@QEAAHI@Z
?Resize@BUFFER@@QEAAHII@Z
?Resize@STRA@@QEAAJK@Z
?Resize@STRU@@QEAAJK@Z
?ResizeW@STRAU@@QEAAHK@Z
?SAFE_snwprintf@@YAJPEAVSTRU@@PEBGZZ
?SafeCopy@STRAU@@QEAAHPEBD@Z
?SafeCopy@STRAU@@QEAAHPEBG@Z
?SetDefaultSpinAdjustmentFactor@CCritSec@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CFakeLock@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CRtlResource@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CShareLock@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CSpinLock@@SAXN@Z
?SetDefaultSpinCount@CCritSec@@SAXG@Z
?SetDefaultSpinCount@CFakeLock@@SAXG@Z
?SetDefaultSpinCount@CReaderWriterLock2@@SAXG@Z
?SetDefaultSpinCount@CReaderWriterLock3@@SAXG@Z
?SetDefaultSpinCount@CReaderWriterLock@@SAXG@Z
?SetDefaultSpinCount@CRtlResource@@SAXG@Z
?SetDefaultSpinCount@CShareLock@@SAXG@Z
?SetDefaultSpinCount@CSmallSpinLock@@SAXG@Z
?SetDefaultSpinCount@CSpinLock@@SAXG@Z
?SetLen@STRA@@QEAAHK@Z
?SetLen@STRAU@@QEAAHK@Z
?SetLen@STRU@@QEAAHK@Z
?SetSpinCount@CCritSec@@QEAA_NG@Z
?SetSpinCount@CCritSec@@SAKPEAU_RTL_CRITICAL_SECTION@@K@Z
?SetSpinCount@CFakeLock@@QEAA_NG@Z
?SetSpinCount@CReaderWriterLock2@@QEAA_NG@Z
?SetSpinCount@CReaderWriterLock3@@QEAA_NG@Z
?SetSpinCount@CReaderWriterLock@@QEAA_NG@Z
?SetSpinCount@CRtlResource@@QEAA_NG@Z
?SetSpinCount@CShareLock@@QEAA_NG@Z
?SetSpinCount@CSmallSpinLock@@QEAA_NG@Z
?SetSpinCount@CSpinLock@@QEAA_NG@Z
?SetUsed@BUFFER_CHAIN_ITEM@@QEAAXK@Z
?SetValid@BUFFER@@QEAAXH@Z
?SleepWaitingForLock@CSharelock@@AEAAEH@Z
?SyncWithBuffer@STRA@@QEAAXXZ
?SyncWithBuffer@STRU@@QEAAXXZ
?TryConvertSharedToExclusive@CReaderWriterLock3@@QEAA_NXZ
?TryReadLock@CCritSec@@QEAA_NXZ
?TryReadLock@CFakeLock@@QEAA_NXZ
?TryReadLock@CReaderWriterLock2@@QEAA_NXZ
?TryReadLock@CReaderWriterLock3@@QEAA_NXZ
?TryReadLock@CReaderWriterLock@@QEAA_NXZ
?TryReadLock@CRtlResource@@QEAA_NXZ
?TryReadLock@CShareLock@@QEAA_NXZ
?TryReadLock@CSmallSpinLock@@QEAA_NXZ
?TryReadLock@CSpinLock@@QEAA_NXZ
?TryReadOrWriteLock@CReaderWriterLock3@@QEAA_NAEA_N@Z
?TryWriteLock@CCritSec@@QEAA_NXZ
?TryWriteLock@CFakeLock@@QEAA_NXZ
?TryWriteLock@CReaderWriterLock2@@QEAA_NXZ
?TryWriteLock@CReaderWriterLock3@@QEAA_NXZ
?TryWriteLock@CReaderWriterLock@@QEAA_NXZ
?TryWriteLock@CRtlResource@@QEAA_NXZ
?TryWriteLock@CShareLock@@QEAA_NXZ
?TryWriteLock@CSmallSpinLock@@QEAA_NXZ
?TryWriteLock@CSpinLock@@QEAA_NXZ
?Unescape@STRA@@QEAAJXZ
?Unescape@STRU@@QEAAJXZ
?Unlock@TS_RESOURCE@@QEAAXXZ
?UpdateMaxSpins@CSharelock@@QEAAEH@Z
?UpdateMaxUsers@CSharelock@@QEAAEH@Z
?VerifyState@BUFFER@@AEBAXXZ
?WaitForExclusiveLock@CSharelock@@AEAAEH@Z
?WaitForShareLock@CSharelock@@AEAAEH@Z
?WaitType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$04$01$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$05$01$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WakeAllSleepers@CSharelock@@AEAAXXZ
?WriteLock@CCritSec@@QEAAXXZ
?WriteLock@CFakeLock@@QEAAXXZ
?WriteLock@CReaderWriterLock2@@QEAAXXZ
?WriteLock@CReaderWriterLock3@@QEAAXXZ
?WriteLock@CReaderWriterLock@@QEAAXXZ
?WriteLock@CRtlResource@@QEAAXXZ
?WriteLock@CShareLock@@QEAAXXZ
?WriteLock@CSmallSpinLock@@QEAAXXZ
?WriteLock@CSpinLock@@QEAAXXZ
?WriteUnlock@CCritSec@@QEAAXXZ
?WriteUnlock@CFakeLock@@QEAAXXZ
?WriteUnlock@CReaderWriterLock2@@QEAAXXZ
?WriteUnlock@CReaderWriterLock3@@QEAAXXZ
?WriteUnlock@CReaderWriterLock@@QEAAXXZ
?WriteUnlock@CRtlResource@@QEAAXXZ
?WriteUnlock@CShareLock@@QEAAXXZ
?WriteUnlock@CSmallSpinLock@@QEAAXXZ
?WriteUnlock@CSpinLock@@QEAAXXZ
?_CmpExch@CReaderWriterLock2@@AEAA_NJJ@Z
?_CmpExch@CReaderWriterLock3@@AEAA_NJJ@Z
?_CmpExch@CReaderWriterLock@@AEAA_NJJ@Z
?_CurrentThreadId@CReaderWriterLock3@@CAJXZ
?_CurrentThreadId@CSmallSpinLock@@CAJXZ
?_CurrentThreadId@CSpinLock@@CAJXZ
?_IsLocked@CSpinLock@@AEBA_NXZ
?_Lock@CSpinLock@@AEAAXXZ
?_LockSpin@CReaderWriterLock2@@AEAAX_N@Z
?_LockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z
?_LockSpin@CReaderWriterLock@@AEAAX_N@Z
?_LockSpin@CSmallSpinLock@@AEAAXXZ
?_LockSpin@CSpinLock@@AEAAXXZ
?_ReadLockSpin@CReaderWriterLock2@@AEAAXXZ
?_ReadLockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z
?_ReadLockSpin@CReaderWriterLock@@AEAAXXZ
?_TryLock@CSmallSpinLock@@AEAA_NXZ
?_TryLock@CSpinLock@@AEAA_NXZ
?_TryReadLock@CReaderWriterLock2@@AEAA_NXZ
?_TryReadLock@CReaderWriterLock3@@AEAA_NXZ
?_TryReadLock@CReaderWriterLock@@AEAA_NXZ
?_TryReadLockRecursive@CReaderWriterLock3@@AEAA_NXZ
?_TryWriteLock2@CReaderWriterLock3@@AEAA_NXZ
?_TryWriteLock@CReaderWriterLock2@@AEAA_NJ@Z
?_TryWriteLock@CReaderWriterLock3@@AEAA_NJ@Z
?_TryWriteLock@CReaderWriterLock@@AEAA_NXZ
?_Unlock@CSpinLock@@AEAAXXZ
?_WriteLockSpin@CReaderWriterLock2@@AEAAXXZ
?_WriteLockSpin@CReaderWriterLock3@@AEAAXXZ
?_WriteLockSpin@CReaderWriterLock@@AEAAXXZ
?sm_dblDfltSpinAdjFctr@CCritSec@@1NA
?sm_dblDfltSpinAdjFctr@CFakeLock@@1NA
?sm_dblDfltSpinAdjFctr@CReaderWriterLock2@@1NA
?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA
?sm_dblDfltSpinAdjFctr@CReaderWriterLock@@1NA
?sm_dblDfltSpinAdjFctr@CRtlResource@@1NA
?sm_dblDfltSpinAdjFctr@CShareLock@@1NA
?sm_dblDfltSpinAdjFctr@CSmallSpinLock@@1NA
?sm_dblDfltSpinAdjFctr@CSpinLock@@1NA
?sm_wDefaultSpinCount@CCritSec@@1GA
?sm_wDefaultSpinCount@CFakeLock@@1GA
?sm_wDefaultSpinCount@CReaderWriterLock2@@1GA
?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA

Sections

.text
Size: 654KB - Virtual size: 653KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/webengine4.dll
.dll regsvr32 windows:6 windows x64 arch:x64

ce2ad8ca8af059e091d3561da481517c

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:ff:83:66:2b:71:a4:61:4f:af:6e:43:6e:60:19:7e:46:a1:a5:99:45:62:f8:11:1e:8f:b4:31:61:9c:73:58
Signer

Actual PE Digest

3a:ff:83:66:2b:71:a4:61:4f:af:6e:43:6e:60:19:7e:46:a1:a5:99:45:62:f8:11:1e:8f:b4:31:61:9c:73:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

webengine4.pdb

Imports

kernel32

ReadFile
WriteFile
CloseHandle
GetLastError
CreateNamedPipeW
GetOverlappedResult
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
lstrlenW
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
HeapCreate
HeapAlloc
HeapFree
SwitchToThread
FormatMessageW
lstrlenA
WideCharToMultiByte
CreateFileW
GetFileAttributesExW
GetTickCount
OutputDebugStringW
GetCurrentThreadId
WaitForSingleObject
CreateThread
GetLongPathNameW
GetSystemTimeAsFileTime
ReadDirectoryChangesW
LocalFree
DuplicateHandle
GetModuleFileNameW
GetModuleHandleW
TlsGetValue
TlsSetValue
GetFileSize
MultiByteToWideChar
FormatMessageA
AddAtomW
FindAtomW
SetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
ReleaseMutex
WaitForSingleObjectEx
CreateMutexW
GlobalAlloc
GlobalFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
TlsAlloc
DisableThreadLibraryCalls
GetStdHandle
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
LoadLibraryExW
lstrcmpW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetConsoleOutputCP
FindFirstFileExW
FindNextFileW
ConnectNamedPipe
DisconnectNamedPipe
GetVersionExW
GetEnvironmentVariableW
SetEvent
ResetEvent
CreateEventW
TerminateProcess
GetExitCodeProcess
CreateProcessW
OpenProcess
GetSystemInfo
WaitForMultipleObjects
DebugBreak
GlobalMemoryStatus
CreateDirectoryW
GetFileAttributesW
GetSystemWindowsDirectoryW
GetComputerNameW
LocalAlloc
GetSystemDirectoryW
CopyFileW
DeleteFileW
GetTempFileNameW
GetTempPathW
GetWindowsDirectoryW
LoadResource
LockResource
SizeofResource
FindResourceW
WritePrivateProfileStringW
FlushFileBuffers
GetDateFormatA
GetTimeFormatA
RemoveDirectoryW
CompareFileTime
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateRemoteThread
ReadProcessMemory
GetModuleHandleA
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
VirtualFree
VirtualAlloc
DeleteTimerQueueTimer
CreateTimerQueueTimer
TlsFree
OutputDebugStringA
GetFileSizeEx
CompareStringW
LocalReAlloc
GetSystemDefaultLangID
WriteConsoleW
GetConsoleMode
GetFileType
GetProcessAffinityMask
HeapSize
HeapReAlloc
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
LoadLibraryExA
VirtualQuery
VirtualProtect
RaiseException
RtlCaptureStackBackTrace
AcquireSRWLockShared

msvcr120_clr0400

_vsnprintf
isdigit
strstr
_itoa_s
_atoi64
strtol
sscanf_s
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__clean_type_info_names_internal
_vsnprintf_s
strrchr
wcsncpy_s
wcscpy_s
swscanf_s
wcstol
strcmp
__CxxFrameHandler3
strtoul
_errno
_vsnwprintf_s
iswxdigit
sprintf_s
strcat_s
_wcsnicmp
wcstok_s
_beginthread
bsearch
wcsrchr
_set_error_mode
wcstoul
iswalnum
iswspace
atoi
_strnicmp
strncmp
_stricmp
strchr
memchr
wcscmp
_vsnwprintf
wcsstr
wcsncmp
_wtoi
_wcsicmp
_purecall
memcmp
__C_specific_handler
memset
memcpy
_itow_s
wcschr
_ultoa_s
towlower
memmove
_wcslwr
_wtol
isxdigit

user32

CharNextA
MessageBoxW
PeekMessageW
SetUserObjectSecurity
GetUserObjectSecurity
CharPrevW
CharNextExA
LoadStringA

userenv

DestroyEnvironmentBlock
LoadUserProfileW
CreateEnvironmentBlock

psapi

GetProcessMemoryInfo
GetModuleFileNameExW

ntdll

NtQueryInformationThread
NtQueryInformationProcess
NtQuerySystemInformation

Exports

Exports

??0BUFFER@@QEAA@I@Z
??0BUFFER@@QEAA@PEAEI@Z
??0BUFFER_CHAIN@@QEAA@XZ
??0BUFFER_CHAIN_ITEM@@QEAA@I@Z
??0CCritSec@@QEAA@XZ
??0CFakeLock@@QEAA@XZ
??0CReaderWriterLock2@@QEAA@XZ
??0CReaderWriterLock3@@QEAA@XZ
??0CReaderWriterLock@@QEAA@XZ
??0CSmallSpinLock@@QEAA@XZ
??0CSpinLock@@QEAA@XZ
??0STRA@@AEAA@AEBV0@@Z
??0STRA@@AEAA@PEAD@Z
??0STRA@@AEAA@PEBD@Z
??0STRA@@QEAA@PEADK@Z
??0STRA@@QEAA@XZ
??0STRAU@@QEAA@AEAV0@@Z
??0STRAU@@QEAA@PEBD@Z
??0STRAU@@QEAA@PEBDH@Z
??0STRAU@@QEAA@PEBG@Z
??0STRAU@@QEAA@XZ
??0STRU@@AEAA@AEBV0@@Z
??0STRU@@AEAA@PEAG@Z
??0STRU@@AEAA@PEBG@Z
??0STRU@@QEAA@PEAGK@Z
??0STRU@@QEAA@XZ
??1BUFFER@@QEAA@XZ
??1BUFFER_CHAIN@@QEAA@XZ
??1BUFFER_CHAIN_ITEM@@QEAA@XZ
??1CCritSec@@QEAA@XZ
??1CFakeLock@@QEAA@XZ
??1CReaderWriterLock2@@QEAA@XZ
??1CReaderWriterLock3@@QEAA@XZ
??1CReaderWriterLock@@QEAA@XZ
??1CSmallSpinLock@@QEAA@XZ
??1CSpinLock@@QEAA@XZ
??1STRA@@QEAA@XZ
??1STRAU@@QEAA@XZ
??1STRU@@QEAA@XZ
??2BUFFER_CHAIN_ITEM@@SAPEAX_K@Z
??3BUFFER_CHAIN_ITEM@@SAXPEAX@Z
??4?$CLockBase@$00$00$02$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$01$00$00$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$02$00$00$00$00$00@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$03$00$00$01$02$02@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$06$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$07$01$01$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4?$CLockBase@$08$01$00$00$02$01@@QEAAAEAV0@AEBV0@@Z
??4BUFFER@@QEAAAEAV0@AEBV0@@Z
??4BUFFER_CHAIN@@QEAAAEAV0@AEBV0@@Z
??4BUFFER_CHAIN_ITEM@@QEAAAEAV0@AEBV0@@Z
??4CCritSec@@QEAAAEAV0@AEBV0@@Z
??4CFakeLock@@QEAAAEAV0@AEBV0@@Z
??4CReaderWriterLock2@@QEAAAEAV0@AEBV0@@Z
??4CReaderWriterLock3@@QEAAAEAV0@AEBV0@@Z
??4CReaderWriterLock@@QEAAAEAV0@AEBV0@@Z
??4CSmallSpinLock@@QEAAAEAV0@AEBV0@@Z
??4CSpinLock@@QEAAAEAV0@AEBV0@@Z
??4STRA@@AEAAAEAV0@AEBV0@@Z
??4STRAU@@QEAAAEAV0@AEBV0@@Z
??4STRU@@AEAAAEAV0@AEBV0@@Z
??_FBUFFER@@QEAAXXZ
??_FBUFFER_CHAIN_ITEM@@QEAAXXZ
?Append@STRA@@QEAAJAEBV1@@Z
?Append@STRA@@QEAAJPEBD@Z
?Append@STRA@@QEAAJPEBDK@Z
?Append@STRAU@@QEAAHAEAV1@@Z
?Append@STRAU@@QEAAHPEBD@Z
?Append@STRAU@@QEAAHPEBDK@Z
?Append@STRAU@@QEAAHPEBG@Z
?Append@STRAU@@QEAAHPEBGK@Z
?Append@STRU@@QEAAJAEBV1@@Z
?Append@STRU@@QEAAJG@Z
?Append@STRU@@QEAAJPEBG@Z
?Append@STRU@@QEAAJPEBGK@Z
?AppendA@STRU@@QEAAJPEBD@Z
?AppendA@STRU@@QEAAJPEBDK@Z
?AppendBuffer@BUFFER_CHAIN@@QEAAHPEAVBUFFER_CHAIN_ITEM@@@Z
?AppendW@STRA@@QEAAJPEBG@Z
?AppendW@STRA@@QEAAJPEBGK@Z
?AppendWTruncate@STRA@@QEAAJPEBG@Z
?AppendWTruncate@STRA@@QEAAJPEBGK@Z
?AuxAppend@STRA@@AEAAJPEBEKKH@Z
?AuxAppend@STRAU@@AEAAHPEBDIH@Z
?AuxAppend@STRAU@@AEAAHPEBGIH@Z
?AuxAppend@STRU@@AEAAJPEBEKKH@Z
?AuxAppendA@STRU@@AEAAJPEBEKKH@Z
?AuxAppendW@STRA@@AEAAJPEBGKKH@Z
?AuxAppendWTruncate@STRA@@AEAAJPEBGKKH@Z
?AuxInit@STRAU@@AEAAXPEBD@Z
?AuxInit@STRAU@@AEAAXPEBG@Z
?CalcTotalSize@BUFFER_CHAIN@@QEBAKH@Z
?ClassName@CCritSec@@SAPEBGXZ
?ClassName@CFakeLock@@SAPEBGXZ
?ClassName@CReaderWriterLock2@@SAPEBGXZ
?ClassName@CReaderWriterLock3@@SAPEBGXZ
?ClassName@CReaderWriterLock@@SAPEBGXZ
?ClassName@CSmallSpinLock@@SAPEBGXZ
?ClassName@CSpinLock@@SAPEBGXZ
?Clone@STRA@@QEBAJPEAV1@@Z
?ConvertExclusiveToShared@CCritSec@@QEAAXXZ
?ConvertExclusiveToShared@CFakeLock@@QEAAXXZ
?ConvertExclusiveToShared@CReaderWriterLock2@@QEAAXXZ
?ConvertExclusiveToShared@CReaderWriterLock3@@QEAAXXZ
?ConvertExclusiveToShared@CReaderWriterLock@@QEAAXXZ
?ConvertExclusiveToShared@CSmallSpinLock@@QEAAXXZ
?ConvertExclusiveToShared@CSpinLock@@QEAAXXZ
?ConvertSharedToExclusive@CCritSec@@QEAAXXZ
?ConvertSharedToExclusive@CFakeLock@@QEAAXXZ
?ConvertSharedToExclusive@CReaderWriterLock2@@QEAAXXZ
?ConvertSharedToExclusive@CReaderWriterLock3@@QEAAXXZ
?ConvertSharedToExclusive@CReaderWriterLock@@QEAAXXZ
?ConvertSharedToExclusive@CSmallSpinLock@@QEAAXXZ
?ConvertSharedToExclusive@CSpinLock@@QEAAXXZ
?Copy@STRA@@QEAAJAEBV1@@Z
?Copy@STRA@@QEAAJPEBD@Z
?Copy@STRA@@QEAAJPEBDK@Z
?Copy@STRAU@@QEAAHAEAV1@@Z
?Copy@STRAU@@QEAAHPEBD@Z
?Copy@STRAU@@QEAAHPEBDK@Z
?Copy@STRAU@@QEAAHPEBG@Z
?Copy@STRAU@@QEAAHPEBGK@Z
?Copy@STRU@@QEAAJAEBV1@@Z
?Copy@STRU@@QEAAJPEBG@Z
?Copy@STRU@@QEAAJPEBGK@Z
?Copy@STRU@@QEAAJPEBV1@@Z
?CopyA@STRU@@QEAAJPEBD@Z
?CopyA@STRU@@QEAAJPEBDK@Z
?CopyBinary@STRA@@QEAAJPEAXK@Z
?CopyToBuffer@STRA@@QEBAJPEADPEAK@Z
?CopyToBuffer@STRU@@QEBAJPEAGPEAK@Z
?CopyW@STRA@@QEAAJPEBG@Z
?CopyW@STRA@@QEAAJPEBGK@Z
?CopyWToUTF8Escaped@STRA@@QEAAJAEBVSTRU@@@Z
?CopyWToUTF8Escaped@STRA@@QEAAJPEBG@Z
?CopyWToUTF8Escaped@STRA@@QEAAJPEBGK@Z
?CopyWToUTF8Unescaped@STRA@@QEAAJAEBVSTRU@@@Z
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBG@Z
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBGK@Z
?CopyWTruncate@STRA@@QEAAJPEBG@Z
?CopyWTruncate@STRA@@QEAAJPEBGK@Z
?DeleteChain@BUFFER_CHAIN@@QEAAKXZ
?Equals@STRA@@QEBAHAEBV1@@Z
?Equals@STRA@@QEBAHPEBD@Z
?Equals@STRU@@QEBAHAEBV1@@Z
?Equals@STRU@@QEBAHPEBG@Z
?EqualsNoCase@STRA@@QEBAHAEBV1@@Z
?EqualsNoCase@STRA@@QEBAHPEBD@Z
?EqualsNoCase@STRU@@QEBAHAEBV1@@Z
?EqualsNoCase@STRU@@QEBAHPEBG@Z
?Escape@STRA@@QEAAJHH@Z
?Escape@STRU@@QEAAJXZ
?FormatString@STRA@@QEAAJKQEAPEBDPEBDK@Z
?FreeMemory@BUFFER@@QEAAXXZ
?GetDefaultSpinAdjustmentFactor@CCritSec@@SANXZ
?GetDefaultSpinAdjustmentFactor@CFakeLock@@SANXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SANXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SANXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SANXZ
?GetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SANXZ
?GetDefaultSpinAdjustmentFactor@CSpinLock@@SANXZ
?GetDefaultSpinCount@CCritSec@@SAGXZ
?GetDefaultSpinCount@CFakeLock@@SAGXZ
?GetDefaultSpinCount@CReaderWriterLock2@@SAGXZ
?GetDefaultSpinCount@CReaderWriterLock3@@SAGXZ
?GetDefaultSpinCount@CReaderWriterLock@@SAGXZ
?GetDefaultSpinCount@CSmallSpinLock@@SAGXZ
?GetDefaultSpinCount@CSpinLock@@SAGXZ
?GetNewStorage@BUFFER@@AEAAHI@Z
?GetSpinCount@CCritSec@@QEBAGXZ
?GetSpinCount@CFakeLock@@QEBAGXZ
?GetSpinCount@CReaderWriterLock2@@QEBAGXZ
?GetSpinCount@CReaderWriterLock3@@QEBAGXZ
?GetSpinCount@CReaderWriterLock@@QEBAGXZ
?GetSpinCount@CSmallSpinLock@@QEBAGXZ
?GetSpinCount@CSpinLock@@QEBAGXZ
?HTMLEncode@STRA@@QEAAJXZ
?HTMLEncode@STRU@@QEAAJXZ
?IsCurrentUnicode@STRAU@@QEAAHXZ
?IsDynAlloced@BUFFER@@AEBAHXZ
?IsEmpty@STRA@@QEBAHXZ
?IsEmpty@STRAU@@QEAAHXZ
?IsEmpty@STRU@@QEBAHXZ
?IsReadLocked@CCritSec@@QEBA_NXZ
?IsReadLocked@CFakeLock@@QEBA_NXZ
?IsReadLocked@CReaderWriterLock2@@QEBA_NXZ
?IsReadLocked@CReaderWriterLock3@@QEBA_NXZ
?IsReadLocked@CReaderWriterLock@@QEBA_NXZ
?IsReadLocked@CSmallSpinLock@@QEBA_NXZ
?IsReadLocked@CSpinLock@@QEBA_NXZ
?IsReadUnlocked@CCritSec@@QEBA_NXZ
?IsReadUnlocked@CFakeLock@@QEBA_NXZ
?IsReadUnlocked@CReaderWriterLock2@@QEBA_NXZ
?IsReadUnlocked@CReaderWriterLock3@@QEBA_NXZ
?IsReadUnlocked@CReaderWriterLock@@QEBA_NXZ
?IsReadUnlocked@CSmallSpinLock@@QEBA_NXZ
?IsReadUnlocked@CSpinLock@@QEBA_NXZ
?IsValid@BUFFER@@QEBAHXZ
?IsValid@STRA@@QEBAHXZ
?IsValid@STRAU@@QEAAHXZ
?IsWriteLocked@CCritSec@@QEBA_NXZ
?IsWriteLocked@CFakeLock@@QEBA_NXZ
?IsWriteLocked@CReaderWriterLock2@@QEBA_NXZ
?IsWriteLocked@CReaderWriterLock3@@QEBA_NXZ
?IsWriteLocked@CReaderWriterLock@@QEBA_NXZ
?IsWriteLocked@CSmallSpinLock@@QEBA_NXZ
?IsWriteLocked@CSpinLock@@QEBA_NXZ
?IsWriteUnlocked@CCritSec@@QEBA_NXZ
?IsWriteUnlocked@CFakeLock@@QEBA_NXZ
?IsWriteUnlocked@CReaderWriterLock2@@QEBA_NXZ
?IsWriteUnlocked@CReaderWriterLock3@@QEBA_NXZ
?IsWriteUnlocked@CReaderWriterLock@@QEBA_NXZ
?IsWriteUnlocked@CSmallSpinLock@@QEBA_NXZ
?IsWriteUnlocked@CSpinLock@@QEBA_NXZ
?LoadStringW@STRA@@QEAAJKPEAUHINSTANCE__@@@Z
?LoadStringW@STRA@@QEAAJKPEBDK@Z
?LockType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?LockType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_LOCKTYPE@@XZ
?MutexType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?MutexType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RW_MUTEX@@XZ
?NextBuffer@BUFFER_CHAIN@@QEAAPEAVBUFFER_CHAIN_ITEM@@PEAV2@@Z
?PerLockSpin@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PerLockSpin@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_PERLOCK_SPIN@@XZ
?PrivateQueryStr@STRAU@@AEAAPEAGH@Z
?QueryBuffer@STRU@@QEAAPEAVBUFFER@@XZ
?QueryCB@STRA@@QEBAIXZ
?QueryCB@STRAU@@QEAAIH@Z
?QueryCB@STRU@@QEBAIXZ
?QueryCBA@STRAU@@QEAAIXZ
?QueryCBW@STRAU@@QEAAIXZ
?QueryCCH@STRA@@QEBAIXZ
?QueryCCH@STRAU@@QEAAIXZ
?QueryCCH@STRU@@QEBAIXZ
?QueryPtr@BUFFER@@QEBAPEAXXZ
?QuerySize@BUFFER@@QEBAIXZ
?QuerySize@STRA@@QEBAIXZ
?QuerySizeCCH@STRA@@QEBAIXZ
?QuerySizeCCH@STRU@@QEBAIXZ
?QueryStr@STRA@@QEAAPEADXZ
?QueryStr@STRA@@QEBAPEBDXZ
?QueryStr@STRAU@@QEAAPEAGH@Z
?QueryStr@STRU@@QEAAPEAGXZ
?QueryStr@STRU@@QEBAPEBGXZ
?QueryStrA@STRAU@@QEAAPEADXZ
?QueryStrW@STRAU@@QEAAPEAGXZ
?QueryUsed@BUFFER_CHAIN_ITEM@@QEBAKXZ
?QueueType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?QueueType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_QUEUE_TYPE@@XZ
?ReadLock@CCritSec@@QEAAXXZ
?ReadLock@CFakeLock@@QEAAXXZ
?ReadLock@CReaderWriterLock2@@QEAAXXZ
?ReadLock@CReaderWriterLock3@@QEAAXXZ
?ReadLock@CReaderWriterLock@@QEAAXXZ
?ReadLock@CSmallSpinLock@@QEAAXXZ
?ReadLock@CSpinLock@@QEAAXXZ
?ReadOrWriteLock@CCritSec@@QEAA_NXZ
?ReadOrWriteLock@CFakeLock@@QEAA_NXZ
?ReadOrWriteLock@CReaderWriterLock3@@QEAA_NXZ
?ReadOrWriteLock@CSpinLock@@QEAA_NXZ
?ReadOrWriteUnlock@CCritSec@@QEAAX_N@Z
?ReadOrWriteUnlock@CFakeLock@@QEAAX_N@Z
?ReadOrWriteUnlock@CReaderWriterLock3@@QEAAX_N@Z
?ReadOrWriteUnlock@CSpinLock@@QEAAX_N@Z
?ReadUnlock@CCritSec@@QEAAXXZ
?ReadUnlock@CFakeLock@@QEAAXXZ
?ReadUnlock@CReaderWriterLock2@@QEAAXXZ
?ReadUnlock@CReaderWriterLock3@@QEAAXXZ
?ReadUnlock@CReaderWriterLock@@QEAAXXZ
?ReadUnlock@CSmallSpinLock@@QEAAXXZ
?ReadUnlock@CSpinLock@@QEAAXXZ
?ReallocStorage@BUFFER@@AEAAHI@Z
?Recursion@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Recursion@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_RECURSION@@XZ
?Reset@STRA@@QEAAXXZ
?Reset@STRAU@@QEAAXXZ
?Reset@STRU@@QEAAXXZ
?Resize@BUFFER@@QEAAHI@Z
?Resize@BUFFER@@QEAAHII@Z
?Resize@STRA@@QEAAJK@Z
?Resize@STRU@@QEAAJK@Z
?ResizeW@STRAU@@QEAAHK@Z
?SAFE_snwprintf@@YAJPEAVSTRU@@PEBGZZ
?SafeCopy@STRAU@@QEAAHPEBD@Z
?SafeCopy@STRAU@@QEAAHPEBG@Z
?SetDefaultSpinAdjustmentFactor@CCritSec@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CFakeLock@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SAXN@Z
?SetDefaultSpinAdjustmentFactor@CSpinLock@@SAXN@Z
?SetDefaultSpinCount@CCritSec@@SAXG@Z
?SetDefaultSpinCount@CFakeLock@@SAXG@Z
?SetDefaultSpinCount@CReaderWriterLock2@@SAXG@Z
?SetDefaultSpinCount@CReaderWriterLock3@@SAXG@Z
?SetDefaultSpinCount@CReaderWriterLock@@SAXG@Z
?SetDefaultSpinCount@CSmallSpinLock@@SAXG@Z
?SetDefaultSpinCount@CSpinLock@@SAXG@Z
?SetLen@STRA@@QEAAHK@Z
?SetLen@STRAU@@QEAAHK@Z
?SetLen@STRU@@QEAAHK@Z
?SetSpinCount@CCritSec@@QEAA_NG@Z
?SetSpinCount@CCritSec@@SAKPEAU_RTL_CRITICAL_SECTION@@K@Z
?SetSpinCount@CFakeLock@@QEAA_NG@Z
?SetSpinCount@CReaderWriterLock2@@QEAA_NG@Z
?SetSpinCount@CReaderWriterLock3@@QEAA_NG@Z
?SetSpinCount@CReaderWriterLock@@QEAA_NG@Z
?SetSpinCount@CSmallSpinLock@@QEAA_NG@Z
?SetSpinCount@CSpinLock@@QEAA_NG@Z
?SetUsed@BUFFER_CHAIN_ITEM@@QEAAXK@Z
?SetValid@BUFFER@@QEAAXH@Z
?SyncWithBuffer@STRA@@QEAAXXZ
?SyncWithBuffer@STRU@@QEAAXXZ
?TryConvertSharedToExclusive@CReaderWriterLock3@@QEAA_NXZ
?TryReadLock@CCritSec@@QEAA_NXZ
?TryReadLock@CFakeLock@@QEAA_NXZ
?TryReadLock@CReaderWriterLock2@@QEAA_NXZ
?TryReadLock@CReaderWriterLock3@@QEAA_NXZ
?TryReadLock@CReaderWriterLock@@QEAA_NXZ
?TryReadLock@CSmallSpinLock@@QEAA_NXZ
?TryReadLock@CSpinLock@@QEAA_NXZ
?TryReadOrWriteLock@CReaderWriterLock3@@QEAA_NAEA_N@Z
?TryWriteLock@CCritSec@@QEAA_NXZ
?TryWriteLock@CFakeLock@@QEAA_NXZ
?TryWriteLock@CReaderWriterLock2@@QEAA_NXZ
?TryWriteLock@CReaderWriterLock3@@QEAA_NXZ
?TryWriteLock@CReaderWriterLock@@QEAA_NXZ
?TryWriteLock@CSmallSpinLock@@QEAA_NXZ
?TryWriteLock@CSpinLock@@QEAA_NXZ
?Unescape@STRA@@QEAAJXZ
?Unescape@STRU@@QEAAJXZ
?VerifyState@BUFFER@@AEBAXXZ
?WaitType@?$CLockBase@$00$00$02$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$01$00$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$02$00$00$00$00$00@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$03$00$00$01$02$02@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$06$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$07$01$01$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WaitType@?$CLockBase@$08$01$00$00$02$01@@SA?AW4LOCK_WAIT_TYPE@@XZ
?WriteLock@CCritSec@@QEAAXXZ
?WriteLock@CFakeLock@@QEAAXXZ
?WriteLock@CReaderWriterLock2@@QEAAXXZ
?WriteLock@CReaderWriterLock3@@QEAAXXZ
?WriteLock@CReaderWriterLock@@QEAAXXZ
?WriteLock@CSmallSpinLock@@QEAAXXZ
?WriteLock@CSpinLock@@QEAAXXZ
?WriteUnlock@CCritSec@@QEAAXXZ
?WriteUnlock@CFakeLock@@QEAAXXZ
?WriteUnlock@CReaderWriterLock2@@QEAAXXZ
?WriteUnlock@CReaderWriterLock3@@QEAAXXZ
?WriteUnlock@CReaderWriterLock@@QEAAXXZ
?WriteUnlock@CSmallSpinLock@@QEAAXXZ
?WriteUnlock@CSpinLock@@QEAAXXZ
?_CmpExch@CReaderWriterLock2@@AEAA_NJJ@Z
?_CmpExch@CReaderWriterLock3@@AEAA_NJJ@Z
?_CmpExch@CReaderWriterLock@@AEAA_NJJ@Z
?_CurrentThreadId@CReaderWriterLock3@@CAJXZ
?_CurrentThreadId@CSmallSpinLock@@CAJXZ
?_CurrentThreadId@CSpinLock@@CAJXZ
?_IsLocked@CSpinLock@@AEBA_NXZ
?_Lock@CSpinLock@@AEAAXXZ
?_LockSpin@CReaderWriterLock2@@AEAAX_N@Z
?_LockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z
?_LockSpin@CReaderWriterLock@@AEAAX_N@Z
?_LockSpin@CSmallSpinLock@@AEAAXXZ
?_LockSpin@CSpinLock@@AEAAXXZ
?_ReadLockSpin@CReaderWriterLock2@@AEAAXXZ
?_ReadLockSpin@CReaderWriterLock3@@AEAAXW4SPIN_TYPE@1@@Z
?_ReadLockSpin@CReaderWriterLock@@AEAAXXZ
?_TryLock@CSmallSpinLock@@AEAA_NXZ
?_TryLock@CSpinLock@@AEAA_NXZ
?_TryReadLock@CReaderWriterLock2@@AEAA_NXZ
?_TryReadLock@CReaderWriterLock3@@AEAA_NXZ
?_TryReadLock@CReaderWriterLock@@AEAA_NXZ
?_TryReadLockRecursive@CReaderWriterLock3@@AEAA_NXZ
?_TryWriteLock2@CReaderWriterLock3@@AEAA_NXZ
?_TryWriteLock@CReaderWriterLock2@@AEAA_NJ@Z
?_TryWriteLock@CReaderWriterLock3@@AEAA_NJ@Z
?_TryWriteLock@CReaderWriterLock@@AEAA_NXZ
?_Unlock@CSpinLock@@AEAAXXZ
?_WriteLockSpin@CReaderWriterLock2@@AEAAXXZ
?_WriteLockSpin@CReaderWriterLock3@@AEAAXXZ
?_WriteLockSpin@CReaderWriterLock@@AEAAXXZ
?sm_dblDfltSpinAdjFctr@CCritSec@@1NA
?sm_dblDfltSpinAdjFctr@CFakeLock@@1NA
?sm_dblDfltSpinAdjFctr@CReaderWriterLock2@@1NA
?sm_dblDfltSpinAdjFctr@CReaderWriterLock3@@1NA
?sm_dblDfltSpinAdjFctr@CReaderWriterLock@@1NA
?sm_dblDfltSpinAdjFctr@CSmallSpinLock@@1NA
?sm_dblDfltSpinAdjFctr@CSpinLock@@1NA
?sm_wDefaultSpinCount@CCritSec@@1GA
?sm_wDefaultSpinCount@CFakeLock@@1GA
?sm_wDefaultSpinCount@CReaderWriterLock2@@1GA
?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA
?sm_wDefaultSpinCount@CReaderWriterLock@@1GA
?sm_wDefaultSpinCount@CSmallSpinLock@@1GA
?sm_wDefaultSpinCount@CSpinLock@@1GA
AppDomainRestart
AspCompatIsApartmentComponent
AspCompatOnPageEnd
AspCompatOnPageStart
AspCompatProcessRequest
AspNetGetExtensionVersion
AspNetHttpExtensionProc
AspNetTerminateExtension
AspnetLoadResourceDLL
AttachDebugger
AttachHandleToThreadPool
BufferPoolGetBuffer
BufferPoolGetPool
BufferPoolReleaseBuffer
CallCryptUnProtectData
CallManagedProtectedConfigAction
ChangeAccessToKeyContainer
CheckIISState
ClrQueueUserWorkItem
CookieAuthConstructTicket
CookieAuthParseTicket
CopyClientScriptFiles
CreateUserToken
DBGNDAssert
DBGNDIsTagEnabled
DBGNDIsTagPresent
DBGNDLaunchCordbg
DBGNDMessageBoxOnThread
DBGNDTrace
DbgpAssert
DbgpDisableAssertThread
DbgpIsTagEnabled
DbgpIsTagPresent
DbgpTrace
DbgpTraceError
DbgpTraceV
DetectErrorAndGetLogfileName
DirMonClose
DirMonOpen
DisplayManagementSettings
DisposeAppDomainsIndirect
DllRegisterServer
DllUnregisterServer
DoesKeyContainerExist
DrainThreadPool
EcbAppendLogParameter
EcbCallISAPI
EcbCloseConnection
EcbDoneWithSession
EcbEmitSimpleTrace
EcbEmitWebEventTrace
EcbExecuteUrlUnicode
EcbFlushCore
EcbFreeExecUrlEntityInfo
EcbGetAdditionalPostedContent
EcbGetBasics
EcbGetBasicsContentInfo
EcbGetChannelBindingToken
EcbGetClientCertificate
EcbGetExecUrlEntityInfo
EcbGetImpersonationToken
EcbGetPreloadedPostedContent
EcbGetQueryString
EcbGetQueryStringRawBytes
EcbGetServerVariable
EcbGetServerVariableByIndex
EcbGetTraceContextId
EcbGetTraceFlags
EcbGetUnicodeServerVariable
EcbGetUnicodeServerVariableByIndex
EcbGetUnicodeServerVariables
EcbGetVersion
EcbGetVirtualPathToken
EcbIsClientConnected
EcbMapUrlToPath
EcbMapUrlToPathUnicode
EcbReadClientAsync
EcbWriteBytes

Sections

.text
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/webio.dll
.dll windows:10 windows x64 arch:x64

ce1afebc544758a4cb082bf35ddd4008

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

webio.pdb

Imports

api-ms-win-crt-string-l1-1-0

strcmp
strncmp
memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__stricmp
_o__strnicmp
memmove
_o__wcsnicmp
_o_free
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_malloc
_o_memcpy_s
_o_tolower
_o_toupper
__C_specific_handler
_o__execute_onexit_table
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
__CxxFrameHandler3
__std_terminate
_o___stdio_common_vsprintf
_o___std_type_info_destroy_list
memcmp
memcpy

ntdll

RtlInitUnicodeString
NtCreateFile
NtSetInformationFile
RtlGetVersion
RtlNtStatusToDosError
RtlGetCurrentProcessorNumber
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlCompareUnicodeStrings
RtlIsCriticalSectionLockedByThread
RtlIpv6AddressToStringW
RtlIpv6StringToAddressExW
RtlIpv4StringToAddressExW
RtlFreeHeap
RtlAllocateHeap
RtlDowncaseUnicodeChar
EtwRegisterTraceGuidsW
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwGetTraceEnableFlags
EtwUnregisterTraceGuids
EtwTraceMessageVa

api-ms-win-core-synch-l1-1-0

ResetEvent
CreateEventA
InitializeCriticalSection
InitializeSRWLock
WaitForMultipleObjectsEx
EnterCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
SetEvent
CreateEventW
DeleteCriticalSection
WaitForSingleObject

api-ms-win-core-localization-l1-2-0

IdnToAscii
IdnToUnicode
IsDBCSLeadByteEx
GetCPInfo
GetCPInfoExW

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableA

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-heap-l1-1-0

HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventWrite
EventRegister
EventEnabled
EventUnregister
EventActivityIdControl

api-ms-win-core-processthreads-l1-1-0

OpenThreadToken
SetThreadToken
CreateThread
TlsGetValue
SwitchToThread
TlsAlloc
TlsFree
GetCurrentProcessId
TerminateProcess
TlsSetValue
GetCurrentThread
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleHandleExA
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleW

api-ms-win-core-file-l1-1-0

CompareFileTime
LocalFileTimeToFileTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW
GetTickCount64
GetTickCount
GetSystemTime
GetSystemTimeAsFileTime

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
QueryDepthSList
InterlockedPushEntrySList
InterlockedPopEntrySList

api-ms-win-core-memory-l1-1-0

VirtualFree
VirtualAlloc

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpA

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

api-ms-win-core-io-l1-1-0

GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort

api-ms-win-security-base-l1-1-0

GetLengthSid
GetTokenInformation
RevertToSelf

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWork
CloseThreadpoolIo
CloseThreadpoolWork
StartThreadpoolIo
CreateThreadpoolIo
SubmitThreadpoolWork
SetThreadpoolWait
CancelThreadpoolIo
CreateThreadpoolCleanupGroup
FreeLibraryWhenCallbackReturns
CloseThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolCleanupGroupMembers
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CallbackMayRunLong
CloseThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolCleanupGroup

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-0

SetFileCompletionNotificationModes

kernelbase

SubscribeWdagEnabledStateChange
GetIsWdagEnabled
UnsubscribeEdpEnabledStateChange
GetIsEdpEnabled
SubscribeEdpEnabledStateChange
UnsubscribeWdagEnabledStateChange

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wpp_sf
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/webplatstorageserver.dll
.dll regsvr32 windows:10 windows x64 arch:x64

502314299667ac1e4dcd80fc58369878

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

webplatstorageserver.pdb

Imports

msvcp_win

_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Random_device@std@@YAIXZ

api-ms-win-crt-string-l1-1-0

wcsncmp
memset
memmove_s

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__recalloc
_o__register_onexit_function
_o__seh_filter_dll
memmove
_o_ceil
_o_floor
_o_free
_o_iswdigit
_o_malloc
_o_memcpy_s
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
_o_wcstoul
_CxxThrowException
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__C_specific_handler
__std_terminate
__CxxFrameHandler3
memcmp
memcpy

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
GetProcAddress
GetModuleHandleW
LoadLibraryExW
LoadResource
FreeLibrary
SizeofResource
GetModuleFileNameW
GetModuleHandleExW
FindResourceExW

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
OpenProcessToken
CreateThread
TerminateProcess
SwitchToThread
GetCurrentThread
SetThreadPriority
OpenThreadToken

api-ms-win-core-localization-l1-2-0

FormatMessageW

oleaut32

SysStringLen
SafeArrayCopy
SafeArrayGetVartype
SafeArrayCreate
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopyInd
SafeArrayUnlock
SafeArrayDestroy
VariantClear
VariantInit
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserUnmarshal64
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize64
SysFreeString
SystemTimeToVariantTime
SysAllocStringLen
VarUI4FromStr

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient3

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
ReleaseSemaphore
OpenSemaphoreW
ResetEvent
InitializeSRWLock
WaitForMultipleObjectsEx
CreateMutexExW
ReleaseMutex
CreateSemaphoreExW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
TryAcquireSRWLockExclusive
SetEvent
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeCriticalSectionEx
CreateEventW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive

api-ms-win-core-com-l1-1-0

CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoGetApartmentType
CoRevertToSelf
CoImpersonateClient
StringFromGUID2
CreateStreamOnHGlobal
CoCreateInstance

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetLastError
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-registry-l1-1-0

RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-synch-l1-2-0

InitializeConditionVariable
Sleep
WakeAllConditionVariable
WaitOnAddress
SleepConditionVariableSRW
InitOnceExecuteOnce
WakeConditionVariable
WakeByAddressAll
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableCS

api-ms-win-security-base-l1-1-0

GetTokenInformation
CopySid
EqualSid
InitializeAcl
CreateWellKnownSid
GetLengthSid
GetSidSubAuthority
GetSidSubAuthorityCount
RevertToSelf
ImpersonateLoggedOnUser
AddAccessAllowedAce

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalFree
LocalAlloc

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventActivityIdControl
EventWriteTransfer
EventUnregister
EventRegister
EventProviderEnabled

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessageVa

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
TrySubmitThreadpoolCallback

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime
GetSystemTime
GetLocalTime

api-ms-win-core-file-l1-1-0

FindNextFileW
SetFileAttributesW
FindFirstFileW
GetFileAttributesExW
GetFileAttributesW
CreateFileW
FindClose
RemoveDirectoryW
GetDiskFreeSpaceExW
DeleteFileW
FindFirstFileExW

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-path-l1-1-0

PathAllocCombine
PathCchRemoveFileSpec
PathCchAddBackslash

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

api-ms-win-security-sddl-ansi-l1-1-0

ConvertSidToStringSidA

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindFileNameW
PathFindExtensionW
PathMatchSpecW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock
GlobalLock
GlobalSize
GlobalReAlloc

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCmpICW

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

ntdll

NtQueryInformationToken
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
RtlQueryPackageClaims
EtwUnregisterTraceGuids
ZwQueryWnfStateData
RtlFreeSid
RtlNtStatusToDosError

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 855KB - Virtual size: 854KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wpp_sf
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 359KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/webservices.dll
.dll windows:10 windows x64 arch:x64

e53bd65ccd34d92e11a41e570fe541f3

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:de:b7:44:b6:32:19:e8:92:c9:5b:76:1f:e6:14:65:d5:f1:f4:3d:d9:13:1d:89:e1:7d:19:3e:1f:ce:68:69
Signer

Actual PE Digest

84:de:b7:44:b6:32:19:e8:92:c9:5b:76:1f:e6:14:65:d5:f1:f4:3d:d9:13:1d:89:e1:7d:19:3e:1f:ce:68:69

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WebServices.pdb

Imports

ntdll

WinSqmIsOptedIn
EtwLogTraceEvent
EtwEventRegister
WinSqmAddToStreamEx
WinSqmIncrementDWORD
EtwEventActivityIdControl
EtwUnregisterTraceGuids
NtQuerySystemInformation
EtwEventWrite
RtlReportException
EtwEventWriteTransfer
_vsnwprintf
__C_specific_handler
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EtwRegisterTraceGuidsW
TpCallbackIndependent
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
memset
EtwGetTraceLoggerHandle
qsort
EtwEventUnregister
__chkstk
memcmp
memcpy
memmove
wcscmp

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GetComputerNameExW
GetSystemTimeAsFileTime
GetVersionExW
GetTickCount

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameW
GetProcAddress
LoadLibraryExW
DisableThreadLibraryCalls
FreeLibrary

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
TerminateProcess
GetCurrentThread
OpenThreadToken
GetCurrentThreadId
OpenProcessToken
GetCurrentProcessId

api-ms-win-core-errorhandling-l1-1-0

RaiseException
GetLastError
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-debug-l1-1-0

DebugBreak

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
SetWaitableTimerEx
CreateWaitableTimerExW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjectsEx
ResetEvent
CreateEventW
SetEvent
WaitForSingleObject
DeleteCriticalSection

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapReAlloc
HeapCreate
HeapAlloc
HeapDestroy
HeapFree

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-string-l1-1-0

CompareStringW

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork
CreateThreadpoolIo
CloseThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
CloseThreadpoolWork
CreateThreadpoolWork

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage
GetSystemDefaultUILanguage

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime

api-ms-win-security-base-l1-1-0

GetTokenInformation
ImpersonateLoggedOnUser
EqualSid
GetLengthSid
CopySid
RevertToSelf

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceExecuteOnce

api-ms-win-core-processthreads-l1-1-1

GetCurrentProcessorNumberEx
GetProcessMitigationPolicy

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-heap-l2-1-0

LocalAlloc
GlobalFree
LocalFree

api-ms-win-core-io-l1-1-0

CancelIoEx
GetOverlappedResult

api-ms-win-core-memory-l1-1-0

OpenFileMappingW
MapViewOfFile
CreateFileMappingW

api-ms-win-core-file-l1-1-0

CreateFileW
ReadFile
WriteFile

api-ms-win-core-namedpipe-l1-1-0

ConnectNamedPipe
CreateNamedPipeW
SetNamedPipeHandleState

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-0

SetFileCompletionNotificationModes

api-ms-win-core-localization-l1-2-2

LCIDToLocaleName

Exports

Exports

WsAbandonCall
WsAbandonMessage
WsAbortChannel
WsAbortListener
WsAbortServiceHost
WsAbortServiceProxy
WsAcceptChannel
WsAddCustomHeader
WsAddErrorString
WsAddMappedHeader
WsAddressMessage
WsAlloc
WsAsyncExecute
WsCall
WsCheckMustUnderstandHeaders
WsCloseChannel
WsCloseListener
WsCloseServiceHost
WsCloseServiceProxy
WsCombineUrl
WsCopyError
WsCopyNode
WsCreateChannel
WsCreateChannelForListener
WsCreateError
WsCreateFaultFromError
WsCreateHeap
WsCreateListener
WsCreateMessage
WsCreateMessageForChannel
WsCreateMetadata
WsCreateReader
WsCreateServiceEndpointFromTemplate
WsCreateServiceHost
WsCreateServiceProxy
WsCreateServiceProxyFromTemplate
WsCreateWriter
WsCreateXmlBuffer
WsCreateXmlSecurityToken
WsDateTimeToFileTime
WsDecodeUrl
WsEncodeUrl
WsEndReaderCanonicalization
WsEndWriterCanonicalization
WsFileTimeToDateTime
WsFillBody
WsFillReader
WsFindAttribute
WsFlushBody
WsFlushWriter
WsFreeChannel
WsFreeError
WsFreeHeap
WsFreeListener
WsFreeMessage
WsFreeMetadata
WsFreeReader
WsFreeSecurityToken
WsFreeServiceHost
WsFreeServiceProxy
WsFreeWriter
WsGetChannelProperty
WsGetCustomHeader
WsGetDictionary
WsGetErrorProperty
WsGetErrorString
WsGetFaultErrorDetail
WsGetFaultErrorProperty
WsGetHeader
WsGetHeaderAttributes
WsGetHeapProperty
WsGetListenerProperty
WsGetMappedHeader
WsGetMessageProperty
WsGetMetadataEndpoints
WsGetMetadataProperty
WsGetMissingMetadataDocumentAddress
WsGetNamespaceFromPrefix
WsGetOperationContextProperty
WsGetPolicyAlternativeCount
WsGetPolicyProperty
WsGetPrefixFromNamespace
WsGetReaderNode
WsGetReaderPosition
WsGetReaderProperty
WsGetSecurityContextProperty
WsGetSecurityTokenProperty
WsGetServiceHostProperty
WsGetServiceProxyProperty
WsGetWriterPosition
WsGetWriterProperty
WsGetXmlAttribute
WsInitializeMessage
WsMarkHeaderAsUnderstood
WsMatchPolicyAlternative
WsMoveReader
WsMoveWriter
WsOpenChannel
WsOpenListener
WsOpenServiceHost
WsOpenServiceProxy
WsPullBytes
WsPushBytes
WsReadArray
WsReadAttribute
WsReadBody
WsReadBytes
WsReadChars
WsReadCharsUtf8
WsReadElement
WsReadEndAttribute
WsReadEndElement
WsReadEndpointAddressExtension
WsReadEnvelopeEnd
WsReadEnvelopeStart
WsReadMessageEnd
WsReadMessageStart
WsReadMetadata
WsReadNode
WsReadQualifiedName
WsReadStartAttribute
WsReadStartElement
WsReadToStartElement
WsReadType
WsReadValue
WsReadXmlBuffer
WsReadXmlBufferFromBytes
WsReceiveMessage
WsRegisterOperationForCancel
WsRemoveCustomHeader
WsRemoveHeader
WsRemoveMappedHeader
WsRemoveNode
WsRequestReply
WsRequestSecurityToken
WsResetChannel
WsResetError
WsResetHeap
WsResetListener
WsResetMessage
WsResetMetadata
WsResetServiceHost
WsResetServiceProxy
WsRevokeSecurityContext
WsSendFaultMessageForError
WsSendMessage
WsSendReplyMessage
WsSetChannelProperty
WsSetErrorProperty
WsSetFaultErrorDetail
WsSetFaultErrorProperty
WsSetHeader
WsSetInput
WsSetInputToBuffer
WsSetListenerProperty
WsSetMessageProperty
WsSetOutput
WsSetOutputToBuffer
WsSetReaderPosition
WsSetWriterPosition
WsShutdownSessionChannel
WsSkipNode
WsStartReaderCanonicalization
WsStartWriterCanonicalization
WsTrimXmlWhitespace
WsVerifyXmlNCName
WsWriteArray
WsWriteAttribute
WsWriteBody
WsWriteBytes
WsWriteChars
WsWriteCharsUtf8
WsWriteElement
WsWriteEndAttribute
WsWriteEndCData
WsWriteEndElement
WsWriteEndStartElement
WsWriteEnvelopeEnd
WsWriteEnvelopeStart
WsWriteMessageEnd
WsWriteMessageStart
WsWriteNode
WsWriteQualifiedName
WsWriteStartAttribute
WsWriteStartCData
WsWriteStartElement
WsWriteText
WsWriteType
WsWriteValue
WsWriteXmlBuffer
WsWriteXmlBufferToBytes
WsWriteXmlnsAttribute
WsXmlStringEquals

Sections

.text
Size: 1014KB - Virtual size: 1013KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wer.dll
.dll windows:10 windows x64 arch:x64

c547e9cdf70975a55d571c9b45b6be7f

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:47:6d:c4:9a:a5:ee:59:7d:77:05:71:ea:b8:23:fd:ca:59:ff:28:bd:ec:73:08:33:ec:cc:c6:a4:7c:b6:f6
Signer

Actual PE Digest

04:47:6d:c4:9a:a5:ee:59:7d:77:05:71:ea:b8:23:fd:ca:59:ff:28:bd:ec:73:08:33:ec:cc:c6:a4:7c:b6:f6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Wer.pdb

Imports

msvcrt

_wcsdup
__CxxFrameHandler3
_CxxThrowException
_wfopen
fclose
fwrite
fwprintf
memset
strcmp
realloc
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
_set_errno
_unlock
_lock
__C_specific_handler
_initterm
fseek
_purecall
fread
srand
malloc
free
rand
memcmp
_amsg_exit
_XcptFilter
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
memmove
memcpy
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
memcpy_s
_vsnwprintf
wcscmp

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleFileNameA
LoadLibraryExW
FreeLibraryAndExitThread
GetModuleHandleExW
DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleW
LoadStringW
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive
WaitForMultipleObjectsEx
DeleteCriticalSection
ReleaseMutex
ReleaseSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSectionAndSpinCount
SetEvent
WaitForSingleObject
CreateEventW
InitializeCriticalSectionEx
OpenMutexW
CreateMutexW
InitializeCriticalSection
LeaveCriticalSection
WaitForSingleObjectEx
OpenSemaphoreW
ResetEvent
EnterCriticalSection
ReleaseSRWLockShared
CreateMutexExW
ReleaseSemaphore
CreateSemaphoreExW
CreateEventExW
InitializeSRWLock

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapDestroy
HeapFree
HeapCreate
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetErrorMode
SetLastError

api-ms-win-core-processthreads-l1-1-0

InitializeProcThreadAttributeList
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetExitCodeProcess
OpenThread
SetThreadPriority
GetThreadPriority
GetProcessId
GetThreadId
CreateProcessAsUserW
GetProcessTimes
UpdateProcThreadAttribute
OpenThreadToken
GetExitCodeThread
DeleteProcThreadAttributeList
GetCurrentThread
GetCurrentProcessId
CreateRemoteThread
CreateThread
CreateProcessW
OpenProcessToken

api-ms-win-core-localization-l1-2-0

IsDBCSLeadByte
GetUserDefaultLCID
GetThreadUILanguage
GetUserGeoID
GetSystemDefaultLCID
FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
OutputDebugStringA
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventUnregister
EventWriteTransfer
EventRegister

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GlobalMemoryStatusEx
GetSystemInfo
GetComputerNameExW
GetLocalTime
GetSystemDirectoryW
GetSystemTime
GetTickCount
GetSystemTimeAsFileTime
GetVersionExW
GetTickCount64

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-heap-l2-1-0

LocalFree
GlobalFree

api-ms-win-core-wow64-l1-1-1

GetSystemWow64DirectoryW
IsWow64Process2

ntdll

RtlReadThreadProfilingData
RtlEnableThreadProfiling
NtSetInformationThread
NtClose
NtDeviceIoControlFile
NtQueryLicenseValue
NtOpenEvent
NtQueryEvent
NtQueryInformationToken
RtlGUIDFromString
NtQueryInformationFile
NtSetInformationFile
RtlFreeSid
NtAlpcSendWaitReceivePort
NtAlpcConnectPort
RtlAllocateAndInitializeSid
EtwEventWriteNoRegistration
ZwUpdateWnfStateData
ZwQueryWnfStateNameInformation
ZwAlpcCancelMessage
RtlWakeAddressAll
TpAllocAlpcCompletion
ZwAlpcDisconnectPort
ZwAlpcSendWaitReceivePort
TpReleaseAlpcCompletion
ZwAlpcQueryInformation
RtlWaitOnAddress
ZwAlpcConnectPort
TpWaitForAlpcCompletion
AlpcInitializeMessageAttribute
AlpcGetMessageAttribute
ZwClose
NtPowerInformation
vDbgPrintEx
towlower
wcsncmp
_snwprintf_s
_snwscanf_s
wcsspn
wcscspn
_wcstoui64
_vsnprintf
strrchr
atoi
_strnicmp
swscanf_s
RtlGetDeviceFamilyInfoEnum
DbgPrintEx
RtlDisableThreadProfiling
RtlQueryPackageIdentityEx
RtlQueryTokenHostIdAsUlong64
qsort_s
wcstok_s
RtlQueryHeapInformation
NtReadVirtualMemory
wcstoul
RtlPublishWnfStateData
RtlGetVersion
wcsstr
qsort
wcsncpy_s
wcsrchr
wcscat_s
wcscpy_s
_wtoi64
NtUnmapViewOfSection
NtQueryVirtualMemory
NtQueryWnfStateData
RtlQueryPackageClaims
memmove_s
NtQuerySystemInformation
NtWaitForSingleObject
NtQueryMutant
NtCreateFile
NtQueryObject
RtlNtStatusToDosError
NtQueryInformationThread
RtlFreeHeap
RtlCreateQueryDebugBuffer
RtlStringFromGUID
NtAlpcQueryInformation
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlAcquireSRWLockExclusive
RtlReleaseSRWLockExclusive
RtlInitUnicodeString
RtlQueryProcessDebugInformation
RtlFreeUnicodeString
NtQueryInformationProcess
RtlDestroyQueryDebugBuffer
RtlEqualUnicodeString
RtlInitializeSRWLock
RtlAllocateHeap
_wtoi
wcspbrk
wcschr
iswspace
_wcsicmp
_wcsnicmp
_vscwprintf
EtwUnregisterTraceGuids
RtlCompareUnicodeString
RtlNtStatusToDosErrorNoTeb
RtlRbInsertNodeEx
RtlGetCompressionWorkSpaceSize
RtlCompressBuffer
RtlRbRemoveNode
RtlComputeCrc32
RtlDecompressBufferEx
strpbrk
strstr
RtlSecondsSince1970ToTime
swprintf_s
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwTraceMessage
_errno

api-ms-win-oobe-notification-l1-1-0

OOBEComplete

api-ms-win-core-windowserrorreporting-l1-1-0

GetApplicationRestartSettings
GetApplicationRecoveryCallback
WerGetFlags

api-ms-win-core-sidebyside-l1-1-0

CreateActCtxW
FindActCtxSectionStringW
QueryActCtxW
ActivateActCtx
DeactivateActCtx

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-service-management-l2-1-0

QueryServiceStatusEx

api-ms-win-service-management-l1-1-0

OpenSCManagerW
StartServiceW
CloseServiceHandle
OpenServiceW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
ReadProcessMemory
CreateFileMappingW
UnmapViewOfFile
VirtualQueryEx
VirtualAlloc
VirtualFree

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegSetValueExW
RegGetValueW
RegDeleteValueW
RegDeleteTreeW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegLoadAppKeyW
RegQueryInfoKeyW
RegDeleteKeyExW
RegCloseKey
RegOpenKeyExW

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
CloseThreadpoolTimer
CloseThreadpool
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpool

api-ms-win-core-com-l1-1-0

CoInitializeEx
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CoWaitForMultipleHandles

api-ms-win-security-base-l1-1-0

DuplicateToken
RevertToSelf
SetKernelObjectSecurity
ImpersonateLoggedOnUser
GetSidSubAuthorityCount
GetSidSubAuthority
GetKernelObjectSecurity
GetFileSecurityW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
GetSecurityDescriptorDacl
GetAce
IsValidSid
CopySid
CheckTokenMembership
FreeSid
AddAccessAllowedAceEx
AddMandatoryAce
InitializeSecurityDescriptor
CreateWellKnownSid
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
GetTokenInformation
GetSecurityDescriptorSacl

api-ms-win-core-errorhandling-l1-1-3

SetThreadErrorMode

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

api-ms-win-core-processsnapshot-l1-1-0

PssWalkSnapshot
PssQuerySnapshot
PssFreeSnapshot
PssDuplicateSnapshot
PssWalkMarkerSeekToBeginning

api-ms-win-core-file-l1-1-0

GetFileTime
FindClose
SetEndOfFile
GetDriveTypeW
FindNextFileW
SetFileInformationByHandle
GetFinalPathNameByHandleW
CreateDirectoryW
DeleteFileW
GetLongPathNameW
CompareFileTime
SetFilePointer
FindFirstFileExW
CreateFileW
GetFileSizeEx
SetFilePointerEx
GetDiskFreeSpaceExW
FlushFileBuffers
SetFileTime
GetFileAttributesW
ReadFile
CreateFileA
WriteFile
SetFileAttributesW
GetTempFileNameW
GetFullPathNameW
FindFirstFileW

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx
MoveFileExW
CopyFileExW

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo
GetNativeSystemInfo

rpcrt4

UuidToStringW
UuidCreate
UuidCreateSequential
RpcStringFreeW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW
K32GetMappedFileNameW
QueryFullProcessImageNameW
K32GetProcessMemoryInfo

api-ms-win-core-realtime-l1-1-0

QueryThreadCycleTime

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation

api-ms-win-core-winrt-l1-1-0

RoUninitialize
RoGetActivationFactory
RoActivateInstance
RoInitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsIsStringEmpty
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer

api-ms-win-eventing-controller-l1-1-0

StartTraceW
StopTraceW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetEnvironmentVariableW

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec
PathCchRemoveBackslash

api-ms-win-core-kernel32-legacy-l1-1-0

GetSystemPowerStatus

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW

api-ms-win-core-registry-l2-1-0

RegDeleteKeyA
RegDeleteKeyW

api-ms-win-eventlog-legacy-l1-1-0

ReportEventW
DeregisterEventSource
RegisterEventSourceW

api-ms-win-core-toolhelp-l1-1-0

Module32NextW
CreateToolhelp32Snapshot
Module32FirstW

api-ms-win-core-processtopology-obsolete-l1-1-0

GetProcessIoCounters

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-eventing-legacy-l1-1-0

QueryTraceW

Exports

Exports

CloseThreadWaitChainSession
GetThreadWaitChain
OpenThreadWaitChainSession
RegisterWaitChainCOMCallback
WerAddExcludedApplication
WerFreeString
WerRemoveExcludedApplication
WerReportAddDump
WerReportAddFile
WerReportCloseHandle
WerReportCreate
WerReportSetParameter
WerReportSetUIOption
WerReportSubmit
WerStoreClose
WerStoreGetFirstReportKey
WerStoreGetNextReportKey
WerStoreGetReportCount
WerStoreGetSizeOnDisk
WerStoreOpen
WerStorePurge
WerStoreQueryReportMetadataV1
WerStoreQueryReportMetadataV2
WerStoreQueryReportMetadataV3
WerStoreUploadReport
WerSysprepCleanup
WerSysprepGeneralize
WerUnattendedSetup
WerpAddAppCompatData
WerpAddFile
WerpAddFileBuffer
WerpAddFileCallback
WerpAddIfRegisteredForAppLocalDump
WerpAddMemoryBlock
WerpAddRegisteredDataToReport
WerpAddRegisteredDumpsToReport
WerpAddRegisteredMetadataToReport
WerpAddTerminationReason
WerpArchiveReport
WerpAuxmdDumpProcessImages
WerpAuxmdDumpRegisteredBlocks
WerpAuxmdFree
WerpAuxmdFreeCopyBuffer
WerpAuxmdHashVaRanges
WerpAuxmdInitialize
WerpAuxmdMapFile
WerpCancelUpload
WerpCleanWer
WerpCloseStore
WerpCreateIntegratorReportId
WerpCreateMachineStore
WerpDeleteReport
WerpDestroyWerString
WerpEnumerateStoreNext
WerpEnumerateStoreStart
WerpExtractReportFiles
WerpFlushImageCache
WerpForceDeferredCollection
WerpFreeString
WerpFreeUnmappedVaRanges
WerpGetBucketId
WerpGetDynamicParameter
WerpGetEventType
WerpGetExtendedDiagData
WerpGetFileByIndex
WerpGetFilePathByIndex
WerpGetIntegratorReportId
WerpGetLegacyBucketId
WerpGetLoadedModuleByIndex
WerpGetNumFiles
WerpGetNumLoadedModules
WerpGetNumSigParams
WerpGetPathOfWERTempDirectory
WerpGetReportConsent
WerpGetReportCount
WerpGetReportFinalConsent
WerpGetReportFlags
WerpGetReportId
WerpGetReportInformation
WerpGetReportSettings
WerpGetReportTime
WerpGetReportType
WerpGetResponseId
WerpGetSigParamByIndex
WerpGetStoreLocation
WerpGetStorePath
WerpGetStoreType
WerpGetTextFromReport
WerpGetUIParamByIndex
WerpGetUploadTime
WerpGetWerStringData
WerpGetWow64Process
WerpHashApplicationParameters
WerpInitializeImageCache
WerpIsDisabled
WerpIsOnBattery
WerpIsTransportAvailable
WerpLoadReport
WerpLoadReportFromBuffer
WerpOpenMachineArchive
WerpOpenMachineQueue
WerpPromptUser
WerpPruneStore
WerpQueueHasBypassPowerReports
WerpReportCancel
WerpReportSprintfParameter
WerpReserveMachineQueueReportDir
WerpResetTransientImageCacheStatistics
WerpRestartApplication
WerpSetAuxiliaryArchivePath
WerpSetCallBack
WerpSetDefaultUserConsent
WerpSetDynamicParameter
WerpSetEventName
WerpSetIntegratorReportId
WerpSetIptEnabled
WerpSetProcessTimelines
WerpSetQuickDumpType
WerpSetReportApplicationIdentity
WerpSetReportFlags
WerpSetReportInformation
WerpSetReportIsFatal
WerpSetReportNamespaceParameter
WerpSetReportOption
WerpSetReportTime
WerpSetReportUploadContextToken
WerpSetTelemetryAppParams
WerpSetTelemetryKernelParams
WerpSetTelemetryServiceParams
WerpSetTimedTask
WerpShowUpsellUI
WerpStitchedMinidumpVmPostReadCallback
WerpStitchedMinidumpVmPreReadCallback
WerpStitchedMinidumpVmQueryCallback
WerpSubmitReportFromStore
WerpTraceAuxMemDumpStatistics
WerpTraceDuration
WerpTraceImageCacheStatistics
WerpTraceSnapshotStatistics
WerpTraceStitchedDumpWriterStatistics
WerpTraceUnmappedVaRangesStatistics
WerpUnmapProcessViews
WerpValidateReportKey
WerpWalkGatherBlocks

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/werconcpl.dll
.dll windows:10 windows x64 arch:x64

22ac8c8ec81f8cfc9569b6209171729c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

werconcpl.pdb

Imports

msvcrt

bsearch
_vscwprintf
_wtoi
_itow_s
_wcstoi64
_ui64tow_s
_callnewh
memmove_s
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
_errno
realloc
memmove
memcpy
memcmp
floorf
ceilf
_CxxThrowException
memset
_wcsicmp
swprintf_s
wcsncmp
wcstol
wcstok_s
wcsrchr
_purecall
wcschr
tolower
free
malloc
wcsncpy_s
__C_specific_handler
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
memcpy_s
_vsnwprintf
__CxxFrameHandler3

cryptsp

CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW

devobj

DevObjDestroyDeviceInfoList
DevObjEnumDeviceInfo
DevObjGetClassDevs
DevObjGetDeviceRegistryProperty
DevObjCreateDeviceInfoList

api-ms-win-core-url-l1-1-0

UrlUnescapeW

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
GetModuleHandleW
FreeLibrary
GetModuleHandleExW
FreeLibraryAndExitThread
GetProcAddress
LoadLibraryExW
LoadLibraryExA
SizeofResource
GetModuleFileNameA
DisableThreadLibraryCalls
GetModuleFileNameW
LoadResource
FindResourceExW

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore
ResetEvent
CreateMutexExW
WaitForSingleObjectEx
CreateEventW
WaitForSingleObject
ReleaseMutex
SetEvent
EnterCriticalSection
CreateSemaphoreExW
ReleaseSRWLockExclusive
InitializeCriticalSectionAndSpinCount
CreateMutexW
AcquireSRWLockExclusive
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OpenSemaphoreW
OpenEventW

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetLastError
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
GetCurrentThread
GetCurrentProcess
OpenProcessToken
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetThreadPriority
TerminateProcess
CreateThread

api-ms-win-core-localization-l1-2-0

GetLocaleInfoW
FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

oleaut32

SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocStringLen
VariantInit
VariantClear
SysStringByteLen
LoadTypeLi
VarUI4FromStr
SysFreeString
LoadRegTypeLi
SysStringLen
SysAllocString
OleCreateFontIndirect
VarBstrCmp
SafeArrayUnaccessData

api-ms-win-core-com-l1-1-0

CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemRealloc
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoDisconnectObject
CoUninitialize
CLSIDFromString
CLSIDFromProgID
StringFromCLSID
PropVariantClear

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegNotifyChangeKeyValue

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
CompareStringW
MultiByteToWideChar

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventRegister
EventActivityIdControl
EventSetInformation
EventUnregister

api-ms-win-core-heap-l2-1-0

GlobalFree
GlobalAlloc

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime
GetLocalTime
GetTickCount64
GetSystemDirectoryW

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW
GetDateFormatW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-core-file-l1-1-0

DeleteFileW
ReadFile
FileTimeToLocalFileTime
CompareFileTime
GetDriveTypeW
SetFilePointer
FlushFileBuffers
WriteFile
GetFileSize
CreateFileW
GetLongPathNameW
GetFileAttributesW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
Sleep
SleepConditionVariableCS
InitOnceComplete
InitializeConditionVariable
WakeAllConditionVariable

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWaitCallbacks
IsThreadpoolTimerSet
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
WaitForThreadpoolWorkCallbacks
CreateThreadpoolTimer
CloseThreadpoolWork
CreateThreadpoolWait
SubmitThreadpoolWork
SetThreadpoolWait
CloseThreadpoolWait
CreateThreadpoolWork

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile
VirtualFree
VirtualAlloc

api-ms-win-core-io-l1-1-0

CancelIoEx
GetOverlappedResult

api-ms-win-core-file-l2-1-0

ReadDirectoryChangesW

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-processthreads-l1-1-1

FlushInstructionCache

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InterlockedPopEntrySList

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-kernel32-legacy-l1-1-0

MulDiv

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW
PathStripPathW
PathRemoveFileSpecW

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW
lstrcmpiW
lstrcmpW

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
GlobalUnlock

api-ms-win-core-shlwapi-obsolete-l1-1-0

QISearch
StrCmpCW
StrCmpICW

ntdll

EtwTraceMessage
DbgPrint
EtwGetTraceLoggerHandle
wcspbrk
iswspace
_wcsnicmp
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
EtwUnregisterTraceGuids
WinSqmIncrementDWORD
WinSqmIsOptedInEx
RtlSecondsSince1970ToTime
WinSqmSetDWORD
WinSqmAddToStreamEx
WinSqmAddToStream
WinSqmSetIfMaxDWORD
NtQueryLicenseValue
EtwLogTraceEvent
EtwRegisterTraceGuidsW
RtlImageNtHeaderEx

api-ms-win-downlevel-shlwapi-l2-1-1

IUnknown_GetSite
IUnknown_QueryService
IUnknown_SetSite
IUnknown_Set

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject
DeleteDC
GetStockObject
CreateSolidBrush
GetObjectW
TextOutW
GetDeviceCaps
CreateFontIndirectW
GetObjectA
GetTextExtentPoint32W
SetBkColor
SetBkMode
SetTextColor
DeleteObject

kernel32

LocalAlloc
ReadProcessMemory
FindClose
FindNextFileW
FindFirstFileW
SetFileInformationByHandle
GetFinalPathNameByHandleW
SetFileAttributesW
CreateDirectoryW
GetTempPathW
GetTempFileNameW
LocalFree
InitializeCriticalSectionEx
ReleaseSRWLockShared
AcquireSRWLockShared

advapi32

GetKernelObjectSecurity
RegGetValueW
GetSidSubAuthority
GetSidSubAuthorityCount
OpenThreadToken
GetTokenInformation
SetEntriesInAclW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetKernelObjectSecurity
GetSecurityDescriptorDacl
RegEnumValueW

shlwapi

ord172
ord24
ord514
ord538
ord204
ord618

shell32

SHGetStockIconInfo
ExtractIconExW
ord155
SHCreateItemInKnownFolder
ShellExecuteExW
ord18
SHBindToObject
ord25
SHParseDisplayName

ole32

OleDuplicateData
OleCreateStaticFromData
CoGetObject
OleLockRunning

gdiplus

GdipDrawLines
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipMeasureString
GdipDeleteFont
GdipReleaseDC
GdipGetDC
GdipDrawLineI
GdipDrawLine
GdipFillRectangle
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDrawImageI
GdipGraphicsClear
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipGetImageGraphicsContext
GdipDisposeImage
GdiplusShutdown
GdipCloneImage
GdipCreateBitmapFromGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipDeleteGraphics
GdipCreateFromHWND
GdipFree
GdipAlloc
GdiplusStartup

user32

InvalidateRect
ReleaseDC
SetMenuItemInfoW
DrawFocusRect
AppendMenuW
GetDC
GetSysColor
EndPaint
BeginPaint
LoadCursorW
SetCursor
DrawTextW
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetSystemMetrics
LoadMenuW
GetSubMenu
TrackPopupMenuEx
DestroyMenu
InvalidateRgn
ReleaseCapture
SetCapture
RedrawWindow
CreateMenu
RemoveMenu
SetProcessDPIAware

uxtheme

GetThemeColor

wevtapi

EvtClose
EvtSubscribe

framedynos

?GetSYSTEMTIME@WBEMTime@@QEBAHPEAU_SYSTEMTIME@@@Z
??4WBEMTime@@QEAAAEBV0@QEAG@Z

wer

WerpOpenMachineQueue
WerpOpenMachineArchive
WerpDestroyWerString
WerpIsTransportAvailable
WerpEnumerateStoreStart
WerReportCloseHandle
WerReportSubmit
WerReportCreate
WerpGetStorePath
WerpIsDisabled
WerpEnumerateStoreNext
WerpGetWerStringData
WerpCloseStore
WerReportSetParameter

api-ms-win-core-sidebyside-l1-1-0

DeactivateActCtx
ReleaseActCtx
CreateActCtxW
ActivateActCtx

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetClassObject
LaunchErcAppW
ShowCEIPDialogW
WerpIsResponseApplicable

Sections

.text
Size: 609KB - Virtual size: 609KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/werui.dll
.dll windows:10 windows x64 arch:x64

78f86948834dbfb7b57c8b571a19cdf6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WerUi.pdb

Imports

msvcrt

_onexit
__dllonexit
memcpy_s
_callnewh
__CxxFrameHandler3
_unlock
_lock
?terminate@@YAXXZ
__C_specific_handler
_initterm
malloc
_CxxThrowException
printf
memcmp
_amsg_exit
??1type_info@@UEAA@XZ
_purecall
??0exception@@QEAA@AEBV0@@Z
_XcptFilter
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
realloc
memcpy
memmove
free
memset
wcscmp

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
DisableThreadLibraryCalls
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryExW

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventWriteTransfer
EventWrite
EventRegister

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
Sleep
WaitOnAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThread
GetProcessTimes
SetThreadPriority
GetThreadPriority
OpenThreadToken
GetProcessId
CreateThread
OpenThread
GetThreadId
OpenProcessToken
CreateProcessW
GetCurrentThreadId
GetExitCodeThread
SetPriorityClass
GetPriorityClass
GetCurrentProcess
TerminateProcess

api-ms-win-core-sysinfo-l1-1-0

GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetTickCount64
GetVersionExW
GlobalMemoryStatusEx
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
SetErrorMode
GetLastError

ntdll

RtlCompareUnicodeString
RtlNtStatusToDosErrorNoTeb
NtQueryInformationToken
NtQueryLicenseValue
EtwGetTraceLoggerHandle
RtlImageNtHeaderEx
RtlGetVersion
_snwscanf_s
NtQueryEvent
_vscwprintf
iswspace
wcspbrk
_vsnprintf_s
memmove_s
RtlSecondsSince1970ToTime
swprintf_s
wcscat_s
wcsncpy_s
wcsncmp
DbgPrintEx
wcscpy_s
NtCreateFile
NtDeviceIoControlFile
NtAllocateVirtualMemory
NtFreeVirtualMemory
NtSetSystemInformation
RtlAdjustPrivilege
RtlGetUnloadEventTraceEx
towlower
DbgPrint
isspace
RtlSetThreadErrorMode
tolower
NtQueryObject
NtQueryInformationThread
RtlAllocateHeap
NtAlpcSendWaitReceivePort
NtWaitForSingleObject
RtlFreeHeap
EtwEventWriteNoRegistration
RtlFreeSid
NtClose
RtlAllocateAndInitializeSid
RtlInitUnicodeString
NtAlpcConnectPort
NtOpenEvent
ZwQueryWnfStateNameInformation
ZwUpdateWnfStateData
RtlCreateProcessReflection
WinSqmSetDWORD
NtPowerInformation
RtlCompareMemory
RtlNtStatusToDosError
NtSystemDebugControl
NtResumeProcess
NtSuspendProcess
NtQueryInformationProcess
_wtoi
NtQuerySystemInformation
_wcsicmp
wcsrchr
_wcstoui64
wcschr
_wcsnicmp
wcsstr
ShipAssert
_vsnwprintf
EtwTraceMessage
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids

wer

WerpGetSigParamByIndex
WerpGetEventType
WerpGetNumSigParams
WerpIsDisabled
WerpGetReportType
WerpGetReportInformation
WerpGetReportSettings
WerpGetUIParamByIndex
WerpSetReportApplicationIdentity
WerpHashApplicationParameters
WerpSetEventName
WerReportSetParameter
WerpSetDynamicParameter
WerReportCloseHandle
WerpAddMemoryBlock
WerpGetExtendedDiagData
WerpAddRegisteredDataToReport
WerReportAddDump
WerpAddAppCompatData
WerpGetFileByIndex
WerpGetNumFiles
WerReportSubmit
WerpSetReportIsFatal
WerpSetCallBack
WerReportCreate
WerpSetProcessTimelines
WerpSetTelemetryAppParams
WerpFreeString
WerpSetIntegratorReportId
WerpCreateIntegratorReportId
WerpGetDynamicParameter
WerpSetReportNamespaceParameter
WerpAddFile
WerpUnmapProcessViews
WerpInitializeImageCache
WerpAuxmdMapFile
WerpAuxmdHashVaRanges
WerpAuxmdFreeCopyBuffer
WerpAuxmdDumpRegisteredBlocks
WerpAuxmdDumpProcessImages
WerpAuxmdInitialize
WerpRestartApplication
WerpIsTransportAvailable
WerReportSetUIOption
WerpSetReportFlags
WerpGetReportFlags
WerpStitchedMinidumpVmPostReadCallback
WerpStitchedMinidumpVmPreReadCallback
WerpStitchedMinidumpVmQueryCallback
WerpResetTransientImageCacheStatistics
WerpTraceImageCacheStatistics
WerpTraceUnmappedVaRangesStatistics
WerpTraceAuxMemDumpStatistics
WerpTraceSnapshotStatistics
WerpForceDeferredCollection
WerpFlushImageCache
WerpFreeUnmappedVaRanges
WerpAuxmdFree
CloseThreadWaitChainSession
GetThreadWaitChain
OpenThreadWaitChainSession
RegisterWaitChainCOMCallback
WerpReportCancel
WerpAddTerminationReason
WerpValidateReportKey
WerpGetStorePath
WerpPromptUser
WerReportAddFile
WerpReserveMachineQueueReportDir

comctl32

ord412
ord410
ord345
ord413

dbghelp

MiniDumpWriteDump

shell32

SHCreateDirectoryExW
ShellExecuteExW
ExtractIconExW
Shell_NotifyIconW
CommandLineToArgvW
SHGetFolderPathW

dui70

??1CritSecLock@DirectUI@@QEAA@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
??0CCBase@DirectUI@@QEAA@KPEBG@Z
??1CCBase@DirectUI@@UEAA@XZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?DirectionProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?OnPropertyChanged@CCBase@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnInput@Element@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnInput@CCBase@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnDestroy@HWNDHost@DirectUI@@UEAAXXZ
?OnEvent@HWNDHost@DirectUI@@UEAAXPEAUEvent@2@@Z
?Paint@HWNDHost@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?SetKeyFocus@HWNDHost@DirectUI@@UEAAXXZ
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?MessageCallback@HWNDHost@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?OnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?OnUnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?GetKeyFocused@HWNDHost@DirectUI@@UEAA_NXZ
?GetAccessibleImpl@HWNDHost@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ
?GetHWND@HWNDHost@DirectUI@@UEAAPEAUHWND__@@XZ
?OnNotify@CCBase@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnMessage@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnSysChar@HWNDHost@DirectUI@@UEAA_NG@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UEAAX_KPEBUtagSTYLESTRUCT@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UEAAHHHI@Z
?SetWindowDirection@HWNDHost@DirectUI@@UEAAXPEAUHWND__@@@Z
?CreateAccNameLabel@HWNDHost@DirectUI@@IEAAPEAUHWND__@@PEAU3@@Z
?CreateHWND@CCBase@DirectUI@@UEAAPEAUHWND__@@PEAU3@@Z
?EraseBkgnd@HWNDHost@DirectUI@@MEAA_NPEAUHDC__@@PEA_J@Z
?OnCustomDraw@CCBase@DirectUI@@UEAA_NPEAUtagNMCUSTOMDRAWINFO@@PEA_J@Z
?OnLostDialogFocus@CCBase@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z
?OnReceivedDialogFocus@CCBase@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z
?PostCreate@CCBase@DirectUI@@MEAAXPEAUHWND__@@@Z
?Initialize@CCBase@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetClassInfoPtr@CCBase@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
??1ClassInfoBase@DirectUI@@UEAA@XZ
InitThread
InitProcessPriv
?Register@CCBase@DirectUI@@SAJXZ
?SetFontSize@Element@DirectUI@@QEAAJH@Z
?SetWidth@Element@DirectUI@@QEAAJH@Z
?SetHeight@Element@DirectUI@@QEAAJH@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
CreateDUIWrapper
UnInitThread
UnInitProcessPriv
?DefaultAction@CCBase@DirectUI@@UEAAJXZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z

user32

DispatchMessageW
LoadMenuW
TranslateMessage
IsHungAppWindow
GetSubMenu
GetCursorPos
SetMenuDefaultItem
GetMonitorInfoW
MonitorFromRect
SetParent
SetWindowPos
GetWindowLongW
SetForegroundWindow
DrawAnimatedRects
FindWindowExW
FindWindowW
ChangeDisplaySettingsW
EnumWindows
TrackPopupMenuEx
DestroyMenu
LoadIconW
SetWindowLongW
GetClassNameW
ChangeWindowMessageFilter
CheckWindowThreadDesktop
GetWindowThreadProcessId
IsWindowVisible
DestroyIcon
EnableMenuItem
GetWindowTextLengthW
GetSysColor
SetWindowLongPtrW
GetWindowLongPtrW
GetWindowInfo
GetWindowRect
PostMessageW
EndDialog
ShowWindow
IsWindow
LoadStringW
FlashWindowEx
GetWindowBand
SendMessageW
RegisterWindowMessageW
ChangeWindowMessageFilterEx
ord2521
GetWindow
IsWindowEnabled
GetShellWindow
GetMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW

api-ms-win-core-com-private-l1-1-0

CoGetCallState
CoGetActivationState

api-ms-win-core-windowserrorreporting-l1-1-0

WerGetFlags
GetApplicationRestartSettings

api-ms-win-core-sidebyside-l1-1-0

ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx

api-ms-win-core-registry-l1-1-0

RegEnumValueW
RegGetValueW
RegQueryValueExW
RegCloseKey
RegSetKeySecurity
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegGetKeySecurity
RegOpenKeyExW

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-memory-l1-1-0

OpenFileMappingW
MapViewOfFile
ReadProcessMemory
VirtualQueryEx
VirtualFree
CreateFileMappingW
UnmapViewOfFile
VirtualAlloc
VirtualQuery

api-ms-win-core-processthreads-l1-1-1

GetThreadTimes
GetThreadContext
OpenProcess

api-ms-win-core-debug-l1-1-1

CheckRemoteDebuggerPresent

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
SearchPathW

api-ms-win-core-string-l1-1-0

CompareStringW
MultiByteToWideChar
GetStringTypeExW

api-ms-win-core-synch-l1-1-0

ReleaseMutex
CreateEventW
CreateMutexW
AcquireSRWLockShared
ReleaseSRWLockShared
CreateSemaphoreExW
AcquireSRWLockExclusive
SetEvent
InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
ReleaseSRWLockExclusive
DeleteCriticalSection
InitializeCriticalSectionEx
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
ResetEvent
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
WaitForMultipleObjectsEx
OpenMutexW
OpenEventW
InitializeCriticalSection

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-security-base-l1-1-0

AllocateAndInitializeSid
CheckTokenMembership
FreeSid
CreateWellKnownSid
GetKernelObjectSecurity
GetLengthSid
GetSidSubAuthorityCount
GetSidSubAuthority
IsValidSid
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
EqualSid
GetTokenInformation
CopySid
SetKernelObjectSecurity

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW
K32EnumProcessModules
QueryFullProcessImageNameW

api-ms-win-core-wow64-l1-1-1

GetSystemWow64DirectoryW
IsWow64Process2

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l1-1-0

FindFirstFileW
DeleteFileW
CreateDirectoryW
GetTempFileNameW
GetFileAttributesW
SetFileAttributesW
GetFinalPathNameByHandleW
GetDriveTypeW
QueryDosDeviceW
GetLogicalDriveStringsW
WriteFile
SetFileInformationByHandle
FindFirstFileExW
FindClose
FindNextFileW
CompareFileTime
CreateFileW
GetLongPathNameW

api-ms-win-core-processsnapshot-l1-1-0

PssWalkMarkerFree
PssQuerySnapshot
PssWalkMarkerCreate

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolWait
WaitForThreadpoolTimerCallbacks
CloseThreadpoolWait
SetThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolWaitCallbacks

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification
PowerSettingRegisterNotification

api-ms-win-core-com-l1-1-0

CoSetProxyBlanket
CoUnmarshalInterface
CoInitializeEx
CoUninitialize
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
ProgIDFromCLSID

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-console-l1-2-0

FreeConsole
AttachConsole

api-ms-win-core-console-l3-2-0

GetConsoleWindow

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-localization-l1-2-0

FormatMessageW
GetThreadUILanguage
LCMapStringW
GetUserGeoID

api-ms-win-core-wow64-l1-1-0

IsWow64Process

oleaut32

SysAllocStringLen
SysFreeString

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

bcrypt

BCryptHashData
BCryptFinishHash
BCryptCreateHash
BCryptDestroyHash

api-ms-win-eventing-controller-l1-1-0

StartTraceW

api-ms-win-core-debug-l1-1-0

DebugBreak
OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW
RegDeleteKeyA

api-ms-win-core-toolhelp-l1-1-0

Process32FirstW
Thread32First
Process32NextW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
Thread32Next

api-ms-win-core-processtopology-obsolete-l1-1-0

GetProcessIoCounters

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIW

api-ms-win-security-trustee-l1-1-0

BuildSecurityDescriptorW

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo
GetNativeSystemInfo

api-ms-win-service-management-l1-1-0

OpenServiceW
CloseServiceHandle
OpenSCManagerW
StartServiceW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-eventlog-legacy-l1-1-0

DeregisterEventSource
ReportEventW
RegisterEventSourceW

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

Exports

Exports

WerUICreate
WerUIDelete
WerUIGetUserSelection
WerUIPromptForSecondLevel
WerUIPromptUser
WerUIReportHang
WerUIReportSilentProcessExit
WerUIShowUpsell
WerUIStart
WerUITerminate
WerUIUpdateStateProgress
WerUIUpdateUIForState
WerUIWaitForUserAction

Sections

.text
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wevtsvc.dll
.dll windows:10 windows x64 arch:x64

9a13710cfd416f32047dfaf8c0a67170

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wevtsvc.pdb

Imports

msvcp_win

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-string-l1-1-0

strncmp
wcsncmp
memset
wcscmp
strnlen
wcsnlen
wcspbrk

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__itow_s
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__strnicmp
_o__ui64tow_s
_o__ultow_s
_o__wcsicmp
_o__wcsnicmp
_o__wcstoi64
_o__wcstoui64
_o__wfopen
memmove
_o__wtof
_o__wtoi
_o__wtoi64
_o__wtol
_o_bsearch
_o_calloc
_o_fclose
_o_fgetws
_o_floor
_o_free
_o_iswalnum
_o_iswalpha
_o_iswdigit
_o_iswspace
_o_malloc
_o_qsort
_o_terminate
_o_toupper
_o_towupper
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstod
_o_wcstok_s
_o_wcstol
_o_wcstoul
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__i64tow_s
wcsrchr
wcsstr
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
wcschr
__C_specific_handler
__std_terminate
__CxxFrameHandler3
_CxxThrowException
memcmp
memcpy

ntdll

RtlLeaveCriticalSection
RtlEnterCriticalSection
RtlUnicodeStringToAnsiString
NtClose
RtlFreeUnicodeString
RtlCopyUnicodeString
RtlInitUnicodeString
NtOpenKey
RtlDosPathNameToNtPathName_U
NtEnumerateKey
RtlReleaseSRWLockExclusive
NtDeleteFile
RtlAcquireSRWLockExclusive
RtlAcquireSRWLockShared
RtlReleaseSRWLockShared
RtlDeleteCriticalSection
RtlFreeAnsiString
RtlIpv4AddressToStringExW
RtlIpv6AddressToStringExW
RtlEthernetAddressToStringW
RtlIpv6AddressToStringW
RtlGetPersistedStateLocation
RtlAnsiStringToUnicodeString
NtOpenProcess
NtDuplicateObject
NtQueryKey
RtlGetVersion
RtlLookupElementGenericTableAvl
RtlInsertElementGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlEnumerateGenericTableAvl
NtQueryVolumeInformationFile
RtlTimeToSecondsSince1970
RtlInitializeGenericTableAvl
RtlSetLastWin32Error
NtReadFile
NtWriteFile
RtlComputeCrc32
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
RtlGetLastNtStatus
NtSetInformationFile
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
RtlSecondsSince1970ToTime
RtlNtStatusToDosError
NtQueryAttributesFile
RtlDeleteSecurityObject
RtlNtStatusToDosErrorNoTeb
NtQuerySystemTime
RtlLengthSid
RtlInitializeCriticalSection
RtlCopySecurityDescriptor
NtQuerySystemInformation
NtCreateFile

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
GetModuleHandleW
GetModuleHandleExW
SizeofResource
LoadResource
FindResourceExW
GetProcAddress
FreeResource
GetModuleFileNameA
LockResource
GetModuleFileNameW
LoadLibraryExW

rpcrt4

RpcServerInqBindings
NdrAsyncServerCall
RpcServerInqCallAttributesW
RpcEpRegisterW
RpcEpUnregister
UuidCreate
RpcServerRegisterAuthInfoW
RpcBindingToStringBindingW
RpcServerUnregisterIfEx
I_RpcBindingInqLocalClientPID
RpcServerSubscribeForNotification
RpcServerUnsubscribeForNotification
I_RpcMapWin32Status
RpcRevertToSelfEx
I_RpcBindingIsClientLocal
RpcRevertToSelf
RpcImpersonateClient
NdrServerCall2
Ndr64AsyncServerCallAll
RpcServerRegisterIfEx
RpcStringBindingParseW
RpcStringFreeW
RpcAsyncCompleteCall
RpcBindingVectorFree
RpcServerUseProtseqExW
NdrServerCallAll
RpcServerUseProtseqEpW
RpcServerRegisterIf3

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceBeginInitialize
InitializeConditionVariable
WakeAllConditionVariable
InitOnceComplete
SleepConditionVariableSRW
SleepConditionVariableCS

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
AcquireSRWLockShared
OpenSemaphoreW
CreateWaitableTimerExW
ReleaseMutex
ReleaseSRWLockShared
ResetEvent
TryAcquireSRWLockExclusive
LeaveCriticalSection
ReleaseSRWLockExclusive
InitializeCriticalSectionAndSpinCount
SetEvent
InitializeCriticalSectionEx
InitializeSRWLock
InitializeCriticalSection
ReleaseSemaphore
EnterCriticalSection
CreateMutexExW
SetWaitableTimer
CreateSemaphoreExW
WaitForMultipleObjectsEx
WaitForSingleObjectEx
AcquireSRWLockExclusive
CreateEventW
CancelWaitableTimer
DeleteCriticalSection
OpenEventW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapDestroy
HeapReAlloc
HeapAlloc
HeapFree
HeapSize

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetLastError
GetLastError
UnhandledExceptionFilter

api-ms-win-security-base-l1-2-0

CheckTokenMembershipEx

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventProviderEnabled
EventRegister
EventWriteTransfer
EventUnregister

api-ms-win-core-registry-l1-1-0

RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegGetValueW
RegQueryValueExW
RegNotifyChangeKeyValue
RegDeleteKeyExW
RegGetKeySecurity
RegOpenKeyExW

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle

api-ms-win-security-base-l1-1-0

GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
AddAce
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
GetSecurityDescriptorLength
MakeSelfRelativeSD
SetSecurityDescriptorDacl
AccessCheck
GetSecurityDescriptorSacl
AllocateAndInitializeSid
PrivilegeCheck
GetTokenInformation
CreateWellKnownSid
IsValidSid
IsValidSecurityDescriptor
FreeSid
GetAclInformation
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
InitializeAcl
GetAce
SetSecurityDescriptorGroup
GetLengthSid
AdjustTokenPrivileges
AccessCheckAndAuditAlarmW
IsWellKnownSid
MapGenericMask

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
FreeLibraryWhenCallbackReturns
CreateThreadpoolWait
CreateThreadpoolCleanupGroup
CloseThreadpoolCleanupGroup
WaitForThreadpoolWaitCallbacks
CloseThreadpoolIo
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWait
WaitForThreadpoolTimerCallbacks
CancelThreadpoolIo
CloseThreadpoolTimer
SetThreadpoolWait
StartThreadpoolIo
CreateThreadpoolIo

api-ms-win-core-processthreads-l1-1-0

OpenThreadToken
GetCurrentThread
SetThreadToken
TlsAlloc
CreateThread
TlsFree
TerminateProcess
TlsSetValue
OpenProcessToken
GetCurrentProcess
TlsGetValue
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

SetThreadPreferredUILanguages
GetThreadUILanguage
GetSystemDefaultLangID
GetThreadPreferredUILanguages
SetThreadUILanguage
FormatMessageW
GetThreadLocale

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-service-core-l1-1-0

SetServiceStatus
RegisterServiceCtrlHandlerExW

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-kernel32-legacy-l1-1-0

GetComputerNameW
PulseEvent

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetVersionExW
GetTickCount
GetSystemInfo
GlobalMemoryStatusEx
GetTickCount64
GetComputerNameExW
GetLocalTime
GetSystemTimeAsFileTime

api-ms-win-core-file-l1-1-0

SetFilePointer
SetEndOfFile
GetDiskFreeSpaceExW
LocalFileTimeToFileTime
GetFileSize
DeleteFileW
GetFileAttributesExW
CompareFileTime
CreateFileW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileInformationByHandle
GetTempFileNameW
CreateDirectoryW
SetFilePointerEx
WriteFile
ReadFile
GetFileAttributesW
FlushFileBuffers

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
UnmapViewOfFile
MapViewOfFile

api-ms-win-eventing-consumer-l1-1-0

OpenTraceW
CloseTrace
ProcessTrace

api-ms-win-core-file-l1-2-0

GetTempPathW

userenv

UnregisterGPNotification
LeaveCriticalPolicySection
RegisterGPNotification
EnterCriticalPolicySection

api-ms-win-security-isolatedcontainer-l1-1-0

IsProcessInIsolatedContainer

api-ms-win-service-core-l1-1-3

GetServiceRegistryStateKey

api-ms-win-eventing-controller-l1-1-0

StartTraceW
ControlTraceW
EnableTraceEx2

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

ws2_32

WSAIoctl
WSAAddressToStringW
ntohs
WSAStartup
ntohl
bind
WSACleanup
WSAStringToAddressW
WSASocketW
setsockopt
listen
getpeername
WSASend
WSARecv
WSAGetLastError
closesocket

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime

api-ms-win-core-processenvironment-l1-1-0

SearchPathW
GetCurrentDirectoryW
GetEnvironmentVariableW
ExpandEnvironmentStringsW

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

bcrypt

BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptHashData
BCryptGetProperty
BCryptCreateHash
BCryptCloseAlgorithmProvider

api-ms-win-core-version-l1-1-0

VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW

api-ms-win-core-atoms-l1-1-0

FindAtomA
AddAtomA
InitAtomTable
DeleteAtom

api-ms-win-core-datetime-l1-1-1

GetTimeFormatEx
GetDateFormatEx

api-ms-win-service-core-l1-1-4

GetServiceDirectory

api-ms-win-core-sysinfo-l1-2-0

GetOsSafeBootMode

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW
GetDateFormatW

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-state-helpers-l1-1-0

GetRegistryValueWithFallbackW

api-ms-win-crt-math-l1-1-0

floorf

Exports

Exports

ServiceMain
SvchostPushServiceGlobals

Sections

.text
Size: 911KB - Virtual size: 910KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wfascim.dll
.dll regsvr32 windows:10 windows x64 arch:x64

b0b4ebb9552dc13135405e64309d417e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wfascim.pdb

Imports

msvcrt

_wcslwr_s
wcsstr
wcsncmp
wcsncpy_s
wcschr
_wcstoui64
wcstok_s
wcstoul
iswdigit
_vsnwprintf
toupper
_wcsicmp
memcmp
memcpy
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
free
swprintf_s
malloc
_wcsnicmp
memset

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
DisableThreadLibraryCalls

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemDirectoryW
GetTickCount

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetLastError

ntdll

RtlIpv6AddressToStringW
RtlIpv6StringToAddressW
RtlIpv4StringToAddressW
EtwUnregisterTraceGuids
RtlIpv4AddressToStringW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
RtlIpv6StringToAddressExW
EtwTraceMessage
EtwRegisterTraceGuidsW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
OpenThreadToken
GetCurrentThread

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

firewallapi

FWFreeCryptoSets
FWOpenPolicyStore
FWClosePolicyStore
FwAlloc
FWStatusMessageFromStatusCode
FWSetGlobalConfig2
FWGetGlobalConfig3
FwCopyMainModeRule
FWVerifyCryptoSet
FWEnumCryptoSets
FWAddMainModeRule
FWVerifyMainModeRule
FWQueryMainModeRules
FWEnumMainModeRules
FWFreeMainModeRules
FWCopyFirewallRule
FWDeleteFirewallRule
FWSetFirewallRule
FWAddFirewallRule
FWSetConfig
FWGetConfig2
FWSetMainModeRule
FWDeleteMainModeRule
FWAddAuthenticationSet
FWCopyAuthenticationSet
FWVerifyFirewallRule
FWAddCryptoSet
FWQueryFirewallRules
FWEnumFirewallRules
FWFreeFirewallRules
FWCopyCryptoSet
FWQueryCryptoSets
FWDeleteCryptoSet
FWSetCryptoSet
FWQueryIsolationType
FwFree
FWSetConnectionSecurityRule
FWFreeConnectionSecurityRules
FWEnumConnectionSecurityRules
FWQueryConnectionSecurityRules
FWVerifyConnectionSecurityRule
FWAddConnectionSecurityRule
FWDeleteConnectionSecurityRule
FWCopyConnectionSecurityRule
FwFreeAddresses
FWSelectConSecRule
FWFreeAuthenticationSets
FWEnumAuthenticationSets
FWVerifyAuthenticationSet
FWQueryAuthenticationSets
FWSetAuthenticationSet
FWDeleteAuthenticationSet

nsi

NsiGetAllParameters

api-ms-win-core-localization-l1-2-0

SetThreadPreferredUILanguages
GetThreadPreferredUILanguages
LocaleNameToLCID
SetThreadLocale
FormatMessageW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

ws2_32

WSACleanup
GetAddrInfoW
WSAStartup
FreeAddrInfoW
ntohl
htonl

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
ReleaseSRWLockExclusive
LeaveCriticalSection
AcquireSRWLockExclusive
InitializeSRWLock
ReleaseSRWLockShared
InitializeCriticalSectionAndSpinCount
AcquireSRWLockShared
EnterCriticalSection

dnsapi

DnsFree
DnsQueryEx

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-security-activedirectoryclient-l1-1-0

DsGetDomainControllerInfoW
DsFreeDomainControllerInfoW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

rpcrt4

UuidToStringW
UuidCreate
UuidFromStringW
RpcStringFreeW

iphlpapi

GetAdaptersAddresses
ConvertRemoteInterfaceIndexToLuid
ConvertRemoteInterfaceLuidToGuid
ConvertRemoteInterfaceGuidToLuid

crypt32

CertGetNameStringW
CertFreeCertificateContext
CertCreateCertificateContext

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

logoncli

DsGetDcNameW

wldap32

ord13
ord301
ord224
ord41
ord145
ord18
ord14
ord88
ord73
ord27
ord208
ord36
ord26
ord127
ord140
ord97

netutils

NetApiBufferFree

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

ntdsapi

DsBindW

fwpuclnt

FwpmFilterAdd0
IPsecSaContextEnum1
IPsecSaContextCreateEnumHandle0
FwpmProviderContextDeleteByKey0
IkeextSaDeleteById0
IkeextSaGetById2
FwpmProviderContextAdd3
FwpmEngineOpen0
FwpmTransactionBegin0
FwpmTransactionCommit0
FwpmTransactionAbort0
FwpmEngineClose0
IkeextSaCreateEnumHandle0
FwpmFilterCreateEnumHandle0
FwpmFilterEnum0
FwpmFilterDestroyEnumHandle0
IPsecSaContextDeleteById0
IPsecSaContextDestroyEnumHandle0
FwpmFreeMemory0
FwpmProviderContextCreateEnumHandle0
FwpmProviderContextEnum3
IkeextSaEnum2
IPsecSaContextGetById1
FwpmFilterDeleteByKey0

mi

MI_Application_InitializeV1

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetProviderClassID
MI_Main

Sections

.text
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wiaaut.dll
.dll regsvr32 windows:10 windows x64 arch:x64

7e9f08dfc37d132dce1fd128f2d48d24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wiaaut.pdb

Imports

msvcrt

_vsnwprintf
_resetstkoflw
wcscpy_s
_purecall
free
malloc
_vscwprintf
calloc
swprintf_s
wcsncpy_s
_callnewh
_XcptFilter
_amsg_exit
_lock
_unlock
__dllonexit
_onexit
_errno
realloc
memcpy
__CxxFrameHandler3
memcpy_s
_vsnprintf
_initterm
memcmp
_splitpath_s
__C_specific_handler
memset

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister

gdi32

DeleteObject
CreateDIBSection
SelectClipRgn
Rectangle
GetDeviceCaps
CreateRectRgnIndirect
CreateMetaFileW
DeleteMetaFile
SetMapMode
LPtoDP
RestoreDC
SetViewportOrgEx
DeleteDC
SetWindowExtEx
SetWindowOrgEx
CreateDCW
CloseMetaFile
SaveDC

kernel32

CreateSemaphoreExW
HeapFree
SetLastError
EnterCriticalSection
ReleaseSemaphore
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetTempPathW
WaitForSingleObject
CreateFileW
GetCurrentThreadId
ReleaseMutex
MultiByteToWideChar
FormatMessageW
GetLastError
OutputDebugStringW
FileTimeToSystemTime
InitOnceComplete
WaitForSingleObjectEx
GlobalAlloc
DeleteFileW
OpenSemaphoreW
GlobalFree
CloseHandle
RaiseException
HeapAlloc
GetLocalTime
GlobalLock
CreateMutexExW
GetFileSize
GetCurrentProcessId
GetProcessHeap
GetModuleFileNameA
GetModuleHandleW
WideCharToMultiByte
GetTempFileNameW
DebugBreak
GlobalUnlock
IsDebuggerPresent
CopyFileW
WriteFile
MulDiv
SizeofResource
InitializeCriticalSection
DisableThreadLibraryCalls
FindResourceExW
LoadResource
DeleteCriticalSection
FreeLibrary
lstrcmpiW
LoadLibraryExW
VirtualFree
GetCurrentProcess
VirtualAlloc
LoadLibraryExA
EncodePointer
DecodePointer
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
OutputDebugStringA
FormatMessageA
LocalFree
LocalAlloc
lstrlenW
ReadFile
InitOnceBeginInitialize
GetSystemDirectoryA
GetFileInformationByHandle
GetModuleHandleA
lstrcmpA
lstrlenA
RemoveDirectoryW
ExpandEnvironmentStringsW
CreateDirectoryW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateMutexW
UnmapViewOfFile
SystemTimeToFileTime
CreateActCtxW
InitializeCriticalSectionAndSpinCount
GetProcAddress

user32

SetWindowPos
GetKeyState
CharUpperA
GetFocus
CallWindowProcW
UnregisterClassA
EqualRect
CharNextA
SetCursor
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
TranslateMessage
LoadStringW
ReleaseDC
GetDesktopWindow
GetDC
LoadIconW
GetActiveWindow
DrawIcon
DestroyWindow
DefWindowProcW
GetWindowThreadProcessId
EndPaint
BeginPaint
InvalidateRect
PtInRect
GetClassInfoExW
GetClientRect
LoadCursorW
CharNextW
SetFocus
IntersectRect
IsChild
OffsetRect
IsWindow
ShowWindow
RegisterClassExW
GetWindowLongPtrW
UnionRect
CreateWindowExW
SetWindowRgn
SetWindowLongPtrW

oleaut32

LoadRegTypeLi
OleCreatePropertyFrame
VarUI4FromStr
VarBstrCmp
SafeArrayGetDim
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
OleCreatePictureIndirect
SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayAccessData
VariantClear
VariantChangeType
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
VariantCopy
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
LoadTypeLi
VariantInit
SystemTimeToVariantTime
CreateErrorInfo
SetErrorInfo

ole32

CoTaskMemRealloc
OleLoadFromStream
OleRegEnumVerbs
OleRegGetMiscStatus
CreateDataAdviseHolder
WriteClassStm
CreateOleAdviseHolder
OleSaveToStream
ProgIDFromCLSID
CLSIDFromString
OleRegGetUserType
CoTaskMemFree
CoCreateInstance
PropVariantCopy
CoTaskMemAlloc
PropVariantClear
CoAllowSetForegroundWindow
StringFromCLSID
CreateStreamOnHGlobal

gdiplus

GdipGetImageRawFormat
GdipImageGetFrameCount
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageDecodersSize
GdipGetImageEncodersSize
GdipGetImageDecoders
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipBitmapSetResolution
GdipRemovePropertyItem
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCloneBitmapAreaI
GdipImageRotateFlip
GdipSaveAddImage
GdipSetPropertyItem
GdipBitmapLockBits
GdipImageSelectActiveFrame
GdipFree
GdipGetImageVerticalResolution
GdipGetImagePixelFormat
GdipGetAllPropertyItems
GdipGetPropertySize
GdipGetImageHorizontalResolution
GdipGetImageWidth
GdipDisposeImage
GdipAlloc
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipCloneImage
GdipGetImageFlags
GdipGetImageHeight
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromGdiDib
GdipCreateHBITMAPFromBitmap

shell32

ord28
ord18
ord155

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/wiaservc.dll
.dll regsvr32 windows:10 windows x64 arch:x64

59f407bc9e045cbdb3db3d7e015859b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

wiaservc.pdb

Imports

msvcrt

wcschr
_vscwprintf
_purecall
_XcptFilter
_initterm
_wcsicmp
_unlock
__dllonexit
_splitpath_s
??1type_info@@UEAA@XZ
memset
__CxxFrameHandler3
_vsnwprintf
toupper
_wsplitpath_s
wcsstr
_vsnprintf
malloc
_callnewh
_onexit
__C_specific_handler
__RTDynamicCast
memcpy
memmove
free
_lock
memcpy_s
_amsg_exit
wcscmp

advapi32

SetSecurityDescriptorGroup
EventProviderEnabled
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegQueryValueW
LookupAccountSidW
GetTokenInformation
GetSecurityDescriptorDacl
GetAclInformation
AccessCheck
SetSecurityDescriptorOwner
GetAce
GetSidSubAuthorityCount
GetSidSubAuthority
DestroyPrivateObjectSecurity
GetSidLengthRequired
CreatePrivateObjectSecurity
CopySid
OpenServiceW
EventUnregister
StartServiceW
OpenSCManagerW
EventRegister
CloseServiceHandle
QueryServiceStatus
EventWriteTransfer
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegCloseKey
InitializeSid
SetSecurityDescriptorSacl
AddAce
OpenProcessToken
GetKernelObjectSecurity
SetKernelObjectSecurity
OpenThreadToken
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
InitializeAcl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
AddAccessAllowedAce
EventSetInformation
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegDeleteKeyExW
RegDeleteValueW

kernel32

HeapAlloc
GetProcAddress
CreateMutexExW
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
GetTickCount
IsDebuggerPresent
GetSystemDirectoryW
FreeLibrary
LoadLibraryExW
lstrlenW
LocalAlloc
LocalFree
SystemTimeToFileTime
GetSystemTime
lstrcmpiW
lstrcmpW
WriteFile
lstrlenA
MultiByteToWideChar
GetLocalTime
MulDiv
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
RemoveDirectoryW
CreateDirectoryW
SetCommMask
ClearCommError
EscapeCommFunction
PurgeComm
FlushFileBuffers
GetDateFormatW
GetFileInformationByHandle
GetModuleFileNameW
WideCharToMultiByte
ReadFile
GetFileSize
SetEndOfFile
GetFileType
SetFilePointer
MapViewOfFileEx
CreateFileMappingW
GetTempFileNameW
DeleteFileW
UnmapViewOfFile
GetTempPathW
OpenProcess
DuplicateHandle
GetCurrentThread
ResetEvent
PowerClearRequest
InitOnceComplete
PowerCreateRequest
InitOnceBeginInitialize
PowerSetRequest
OpenSemaphoreW
WaitForSingleObjectEx
DisableThreadLibraryCalls
OutputDebugStringW
GetLastError
FormatMessageW
Sleep
CreateEventW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetThreadId
GetModuleHandleExW
ReleaseSemaphore
EnterCriticalSection
SetLastError
HeapFree
CreateSemaphoreExW
CompareStringW
GetModuleFileNameA
CloseHandle
CreateFileW
CreateThread
WaitForMultipleObjects
ExpandEnvironmentStringsW
SetEvent
CreateMutexW
lstrcmpA
GetModuleHandleA
GetSystemDirectoryA
FormatMessageA
VirtualQuery
GetSystemInfo
RaiseException
VirtualProtect
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryExA

user32

CharUpperA
CharNextA
CharNextW
PostMessageW
IsWindow
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
UnregisterDeviceNotification
RegisterDeviceNotificationW

oleaut32

BSTR_UserFree
BSTR_UserUnmarshal64
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserFree64
BSTR_UserSize64
BSTR_UserMarshal64
SysAllocString
SysFreeString
SysStringLen
BSTR_UserSize

ole32

CoGetCallContext
CreateStreamOnHGlobal
StgCreatePropStg
StgOpenPropStg
CoRevertToSelf
CoRevokeClassObject
CoRegisterClassObject
FreePropVariantArray
CoImpersonateClient
CoSuspendClassObjects
CoDisconnectObject
PropVariantCopy
CoTaskMemAlloc
PropVariantClear
CLSIDFromString
CoTaskMemFree
StringFromGUID2
StringFromCLSID
CoInitializeSecurity
CoCreateInstance
CoInitializeEx
CoUninitialize
CoResumeClassObjects

rpcrt4

RpcImpersonateClient
RpcServerRegisterAuthInfoW
RpcServerListen
RpcServerRegisterIfEx
RpcStringBindingParseW
UuidCreateNil
UuidToStringA
NdrServerCallAll
UuidCreate
RpcAsyncCompleteCall
RpcServerUnsubscribeForNotification
RpcServerTestCancel
RpcRevertToSelf
UuidToStringW
RpcStringFreeW
RpcBindingInqAuthClientW
RpcAsyncAbortCall
NdrAsyncServerCall
Ndr64AsyncServerCallAll
NdrServerCall2
RpcServerSubscribeForNotification
RpcServerUseProtseqEpW
RpcBindingToStringBindingW
RpcServerInqDefaultPrincNameW
RpcStringFreeA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Exports

Exports

DllRegisterServer
DllUnregisterServer
ServiceMain
wiasCreateChildAppItem
wiasCreateDrvItem
wiasCreateLogInstance
wiasCreatePropContext
wiasDebugError
wiasDebugTrace
wiasDownSampleBuffer
wiasFormatArgs
wiasFreePropContext
wiasGetChangedValueFloat
wiasGetChangedValueGuid
wiasGetChangedValueLong
wiasGetChangedValueStr
wiasGetChildrenContexts
wiasGetContextFromName
wiasGetDrvItem
wiasGetImageInformation
wiasGetItemType
wiasGetPropertyAttributes
wiasGetRootItem
wiasIsPropChanged
wiasParseEndorserString
wiasPrintDebugHResult
wiasQueueEvent
wiasReadMultiple
wiasReadPropBin
wiasReadPropFloat
wiasReadPropGuid
wiasReadPropLong
wiasReadPropStr
wiasSendEndOfPage
wiasSetItemPropAttribs
wiasSetItemPropNames
wiasSetPropChanged
wiasSetPropertyAttributes
wiasSetValidFlag
wiasSetValidListFloat
wiasSetValidListGuid
wiasSetValidListLong
wiasSetValidListStr
wiasSetValidRangeFloat
wiasSetValidRangeLong
wiasUpdateScanRect
wiasUpdateValidFormat
wiasValidateItemProperties
wiasWriteBufToFile
wiasWriteMultiple
wiasWritePageBufToFile
wiasWritePageBufToStream
wiasWritePropBin
wiasWritePropFloat
wiasWritePropGuid
wiasWritePropLong
wiasWritePropStr

Sections

.text
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/DAC/widevinecdm.dll
.dll windows:5 windows x64 arch:x64

5d3aa908e334e626a5c0f84098f52e62

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02/07/2021, 00:00

Not After

10/07/2024, 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ea:40:18:9d:40:dc:37:f6:3e:dd:fd:97:1a:7f:b9:38:73:d2:9f:5b:4c:1a:da:48:25:18:a3:04:5b:f8:0b:09
Signer

Actual PE Digest

ea:40:18:9d:40:dc:37:f6:3e:dd:fd:97:1a:7f:b9:38:73:d2:9f:5b:4c:1a:da:48:25:18:a3:04:5b:f8:0b:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

widevinecdm.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateSemaphoreW
CreateThread
DecodePointer
DeleteCriticalSection
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetExitCodeThread
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDriveStringsW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetProductInfo
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadGroupAffinity
GetThreadId
GetThreadPriority
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

CharUpperW
EnumDisplayMonitors
GetMonitorInfoW
UnregisterClassW

ole32

CoTaskMemFree

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
SystemFunction036

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

Exports

Exports

CreateCdmInstance
DeinitializeCdmModule
GetCdmVersion
GetHandleVerifier
InitializeCdmModule_4
VerifyCdmHost_0

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 51.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 92B

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 70B

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/KeyFile/1033/sharedmanagementobjects_keyfile.dll
.dll windows:6 windows x86 arch:x86

7ccb9c5f3f9fc1eda5b1015ecdb98e95

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Signer

Actual PE Digest

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9

Digest Algorithm

sha256

PE Digest Matches

true

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Signer

Actual PE Digest

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

KeyFile.pdb

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt

kernel32

EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/KeyFile/1033/sqlsysclrtypes_keyfile.dll
.dll windows:6 windows x86 arch:x86

7ccb9c5f3f9fc1eda5b1015ecdb98e95

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Signer

Actual PE Digest

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9

Digest Algorithm

sha256

PE Digest Matches

true

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Signer

Actual PE Digest

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

KeyFile.pdb

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt

kernel32

EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/KeyFile/1049/sharedmanagementobjects_keyfile.dll
.dll windows:6 windows x86 arch:x86

7ccb9c5f3f9fc1eda5b1015ecdb98e95

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Signer

Actual PE Digest

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9

Digest Algorithm

sha256

PE Digest Matches

true

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Signer

Actual PE Digest

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

KeyFile.pdb

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt

kernel32

EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/KeyFile/1049/sqlsysclrtypes_keyfile.dll
.dll windows:6 windows x86 arch:x86

7ccb9c5f3f9fc1eda5b1015ecdb98e95

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Signer

Actual PE Digest

dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9

Digest Algorithm

sha256

PE Digest Matches

true

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Signer

Actual PE Digest

eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

KeyFile.pdb

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt

kernel32

EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/SqlUserInstance.rll
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:16:03:9c:04:ee:13:e5:75:08:18:40:6d:70:85:86:7e:2f:53:25:5a:95:ad:7b:48:e8:bc:10:88:f1:07:e0
Signer

Actual PE Digest

9b:16:03:9c:04:ee:13:e5:75:08:18:40:6d:70:85:86:7e:2f:53:25:5a:95:ad:7b:48:e8:bc:10:88:f1:07:e0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\sh\s19c\0719_152503\cmd\k\obj\x86retail\sql\ntdbms\userinstance\res\sqluserinstance.vcxproj\SqlUserInstance.pdb

Sections

.rdata
Size: 4KB - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/de-DE/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:cf:19:ff:6c:0b:7d:25:00:6c:f7:f9:9a:1c:af:24:74:4c:8c:d4:ce:4b:51:cc:ce:9f:1e:f3:f5:b7:25:4f
Signer

Actual PE Digest

97:cf:19:ff:6c:0b:7d:25:00:6c:f7:f9:9a:1c:af:24:74:4c:8c:d4:ce:4b:51:cc:ce:9f:1e:f3:f5:b7:25:4f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b5:d5:23:c5:ae:fe:92:9f:7e:80:90:b8:53:98:50:b5:e0:9a:6c:f4:50:b1:2a:e9:c0:1e:93:b1:41:c8:38:22
Signer

Actual PE Digest

b5:d5:23:c5:ae:fe:92:9f:7e:80:90:b8:53:98:50:b5:e0:9a:6c:f4:50:b1:2a:e9:c0:1e:93:b1:41:c8:38:22

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/es-ES/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8d:d2:f5:8b:03:1f:94:8e:50:25:56:fa:4e:8b:a4:eb:53:8c:0a:74:0f:75:3b:88:78:9b:49:ac:2d:b0:71:aa
Signer

Actual PE Digest

8d:d2:f5:8b:03:1f:94:8e:50:25:56:fa:4e:8b:a4:eb:53:8c:0a:74:0f:75:3b:88:78:9b:49:ac:2d:b0:71:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/fr-FR/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:66:58:e8:f2:f8:ea:7e:ee:34:3c:84:02:29:f4:7b:04:2f:02:6e:17:0b:ec:55:ff:f8:92:98:7c:b6:dd:83
Signer

Actual PE Digest

7b:66:58:e8:f2:f8:ea:7e:ee:34:3c:84:02:29:f4:7b:04:2f:02:6e:17:0b:ec:55:ff:f8:92:98:7c:b6:dd:83

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/it-IT/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:12:2c:dd:ff:4d:7a:26:2b:72:66:f1:0d:e4:e5:ab:83:2d:2c:b9:48:58:49:ec:c7:6a:21:bf:fe:12:a2:5f
Signer

Actual PE Digest

a0:12:2c:dd:ff:4d:7a:26:2b:72:66:f1:0d:e4:e5:ab:83:2d:2c:b9:48:58:49:ec:c7:6a:21:bf:fe:12:a2:5f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/ja-JP/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:a1:94:13:82:63:d5:d1:ee:5e:e0:8b:da:69:43:14:cf:bd:6d:c7:bf:57:fa:74:ff:f1:45:d0:bf:e9:a7:db
Signer

Actual PE Digest

f6:a1:94:13:82:63:d5:d1:ee:5e:e0:8b:da:69:43:14:cf:bd:6d:c7:bf:57:fa:74:ff:f1:45:d0:bf:e9:a7:db

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/ko-KR/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:46:c6:30:7b:da:06:55:eb:10:30:95:ea:15:ee:07:2d:54:d9:2e:fd:f3:d1:c4:e3:92:d0:1d:81:22:2b:fb
Signer

Actual PE Digest

6d:46:c6:30:7b:da:06:55:eb:10:30:95:ea:15:ee:07:2d:54:d9:2e:fd:f3:d1:c4:e3:92:d0:1d:81:22:2b:fb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/pt-BR/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:49:aa:00:77:f3:c2:07:15:19:38:db:b7:a3:3f:62:12:1c:5e:f9:c8:a3:a4:4e:31:b4:b0:a1:44:19:d8:9c
Signer

Actual PE Digest

ae:49:aa:00:77:f3:c2:07:15:19:38:db:b7:a3:3f:62:12:1c:5e:f9:c8:a3:a4:4e:31:b4:b0:a1:44:19:d8:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:59:70:85:72:bc:1e:34:0f:d0:d0:77:49:df:f9:b3:2d:47:cf:fa:f3:6a:3d:e3:db:5a:99:01:a7:4d:25:c7
Signer

Actual PE Digest

78:59:70:85:72:bc:1e:34:0f:d0:d0:77:49:df:f9:b3:2d:47:cf:fa:f3:6a:3d:e3:db:5a:99:01:a7:4d:25:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/zh-CN/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:6d:71:e4:55:1e:26:15:25:de:03:8f:28:33:2a:d4:f4:c9:59:cb:e3:f4:18:4d:e5:33:f0:a6:61:78:9b:b1
Signer

Actual PE Digest

39:6d:71:e4:55:1e:26:15:25:de:03:8f:28:33:2a:d4:f4:c9:59:cb:e3:f4:18:4d:e5:33:f0:a6:61:78:9b:b1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/Resources/zh-TW/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f2:b2:cc:93:41:50:a0:8b:48:66:49:f9:7f:de:aa:41:d2:31:f9:1b:ab:a7:ed:05:c3:38:75:26:10:9d:1c:26
Signer

Actual PE Digest

f2:b2:cc:93:41:50:a0:8b:48:66:49:f9:7f:de:aa:41:d2:31:f9:1b:ab:a7:ed:05:c3:38:75:26:10:9d:1c:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/SqlUserInstance.dll
.dll windows:6 windows x86 arch:x86

b0547bab9ed2aabbbfc847c2d4a998fe

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:97:7a:44:d3:6b:8b:ea:fd:1b:65:08:75:fd:a3:08:a1:92:ba:c6:44:13:97:91:88:95:a6:c4:b1:f8:42:1a
Signer

Actual PE Digest

64:97:7a:44:d3:6b:8b:ea:fd:1b:65:08:75:fd:a3:08:a1:92:ba:c6:44:13:97:91:88:95:a6:c4:b1:f8:42:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\sh\s19c\0719_152503\cmd\19\obj\x86retail\sql\ntdbms\userinstance\dll\sqluserinstance.vcxproj\SqlUserInstance.pdb

Imports

vcruntime140

__std_type_info_destroy_list
memset
_purecall
wcsrchr
_except_handler4_common
__std_exception_copy
__CxxFrameHandler3
__std_exception_destroy
_CxxThrowException
wcschr
memcpy

api-ms-win-crt-string-l1-1-0

wcsncmp
_wcsnicmp
_wcsnicmp_l
towlower
_wcsicmp
_wcsicmp_l

api-ms-win-crt-convert-l1-1-0

_ultow_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_configure_narrow_argv
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment

shlwapi

SHDeleteKeyW

odbc32

ord24
ord31
ord241
ord75
ord111
ord136

bcrypt

BCryptGenRandom

kernel32

SetLastError
HeapFree
ExpandEnvironmentStringsW
GetEnvironmentVariableW
GetPrivateProfileStringW
CreateDirectoryW
EnterCriticalSection
HeapAlloc
GetModuleHandleExW
TerminateProcess
GetFinalPathNameByHandleW
GetModuleFileNameW
CreateNamedPipeW
WaitForMultipleObjects
CompareStringOrdinal
LeaveCriticalSection
InitializeCriticalSection
CreateMutexW
WaitForSingleObject
LocalAlloc
CreateFileW
GetFileAttributesW
FreeLibraryAndExitThread
ReleaseMutex
DisconnectNamedPipe
OpenProcess
CreateEventW
GetExitCodeThread
FormatMessageW
GetLastError
DeleteFileW
CloseHandle
CompareStringEx
LoadLibraryW
CreateThread
LocalFree
FreeLibrary
CopyFileW
IsWow64Process
GetProcessTimes
LoadLibraryExW
GetProcAddress
Sleep
CreateToolhelp32Snapshot
GetModuleHandleW
Module32NextW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
IsDebuggerPresent
DebugBreak
VirtualQuery
CompareStringW
GetCurrentProcess
IsProcessorFeaturePresent

user32

CharLowerBuffW
CharUpperBuffW

advapi32

ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
RegGetKeySecurity
RegCloseKey
RegDeleteKeyExW
SetSecurityDescriptorOwner
SetTokenInformation
RegQueryValueExW
AddAccessAllowedAce
GetLengthSid
ConvertSidToStringSidW
CreateProcessAsUserW
GetTokenInformation
RegGetValueW
RegOpenKeyExW
InitializeAcl
InitializeSecurityDescriptor
RegCopyTreeW
CreateRestrictedToken
OpenProcessToken
RegSetValueExW
RegDeleteTreeW
RegSetKeySecurity
SetEntriesInAclW
CreateWellKnownSid
RegCreateKeyExW
ConvertStringSidToSidW
RegEnumKeyExW

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree
CoInitializeEx
CoCreateGuid
CoCreateInstance
StringFromGUID2

oleaut32

VariantInit
SysFreeString
SysStringLen
SysStringByteLen
VariantClear
SysAllocString
VariantChangeType

Exports

Exports

LOCALDB_PRODUCT_NAME
LocalDBCreateInstance
LocalDBDeleteInstance
LocalDBFormatMessage
LocalDBGetInstanceInfo
LocalDBGetInstances
LocalDBGetVersionInfo
LocalDBGetVersions
LocalDBShareInstance
LocalDBStartInstance
LocalDBStartTracing
LocalDBStopInstance
LocalDBStopTracing
LocalDBUnshareInstance

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/150/LocalDB/Binn/localdbxeventconfig.xml
ZrSoft_/License Terms/150/Shared/xe.dll
.dll windows:6 windows x86 arch:x86

a717c506893e6eb4a4cd9bdf05e01b92

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:94:fb:b5:1d:d4:a1:73:82:01:c3:fe:01:54:f7:d5:a7:48:e8:22:9b:b5:cb:f9:70:b5:6a:a0:29:90:09:97
Signer

Actual PE Digest

7f:94:fb:b5:1d:d4:a1:73:82:01:c3:fe:01:54:f7:d5:a7:48:e8:22:9b:b5:cb:f9:70:b5:6a:a0:29:90:09:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\dbs\sh\s19c\0719_152503\cmd\y\obj\x86retail\sql\common\xecommon\dll\xe.vcxproj\xe.pdb

Imports

vcruntime140

__CxxFrameHandler3
_purecall
wcschr
_CxxThrowException
memcpy
memmove
_except_handler4_common
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
abort
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm_e
_errno
_invalid_parameter_noinfo
_initterm
_cexit
terminate
_wassert

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vswprintf

kernel32

lstrcmpW
CreateThread
LoadLibraryW
Module32NextW
CreateToolhelp32Snapshot
SetNamedPipeHandleState
ReadFile
TransactNamedPipe
FlushFileBuffers
DisconnectNamedPipe
GetCurrentThreadId
GetCurrentProcessId
DebugBreak
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
CreateNamedPipeW
IsDebuggerPresent
GetModuleHandleW
InitializeCriticalSection
QueryPerformanceFrequency
HeapFree
GetProcessHeap
HeapAlloc
TlsFree
TlsAlloc
GetUserDefaultLCID
VerifyVersionInfoW
VerSetConditionMask
GetSystemInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexW
UnmapViewOfFile
MapViewOfFileEx
OpenThread
TlsGetValue
GetProcessTimes
ConnectNamedPipe
WaitForMultipleObjects
CancelIo
InitializeSListHead
GetVolumePathNameW
WaitForSingleObjectEx
VirtualQuery
CreateIoCompletionPort
CreateFileMappingW
CreateSemaphoreW
HeapDestroy
HeapCompact
HeapReAlloc
GetExitCodeThread
HeapSize
OpenFileMappingW
GetQueuedCompletionStatus
ReleaseSemaphore
HeapCreate
SystemTimeToTzSpecificLocalTime
SetFileValidData
LocalFree
FormatMessageW
lstrcmpiW
SystemTimeToFileTime
GetDiskFreeSpaceW
SetEndOfFile
GetModuleFileNameW
GetProcAddress
FreeLibrary
LoadLibraryExW
RtlCaptureStackBackTrace
GetLastError
FileTimeToSystemTime
GetNumaHighestNodeNumber
GetProcessAffinityMask
GetTimeZoneInformation
CreateDirectoryW
GetTickCount
VirtualFree
VirtualAlloc
GetSystemTime
DeleteFileW
FindFirstFileW
CreateFileW
FindNextFileW
DeleteCriticalSection
GetDiskFreeSpaceExW
WriteFile
GetOverlappedResult
FindClose
CloseHandle
Sleep
GetTempPathW
SetLastError
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
CreateEventW
SetFilePointerEx

user32

MessageBoxW

rpcrt4

UuidCreate

shlwapi

PathCanonicalizeW
PathIsRelativeW
PathFindFileNameW
PathRemoveBackslashW
PathIsURLW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFindExtensionW
PathCombineW
UrlCombineW

api-ms-win-crt-string-l1-1-0

_strnicmp_l
_iswprint_l
isxdigit
isalnum
_wcsnicmp_l
iswalnum
iswspace
_towlower_l
isdigit
_wcsicmp
_wcsicmp_l
_wcsnicmp
strncmp
wcsncmp

api-ms-win-crt-filesystem-l1-1-0

_wfullpath

api-ms-win-crt-convert-l1-1-0

wcstoll

api-ms-win-crt-locale-l1-1-0

__pctype_func

advapi32

TraceEvent
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
EnableTrace
RegisterTraceGuidsW
QueryAllTracesW
UnregisterTraceGuids
StartTraceW
ControlTraceW

ole32

CoCreateGuid
CoCreateInstance

oleaut32

VariantClear
SysFreeString
SysStringLen
SysAllocString
VariantInit
VariantChangeType

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

SetAssertHandler
XEGetEngine

Sections

.text
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/License Terms/License_SQLNCLI_ENU.txt
ZrSoft_/License Terms/SqlUserInstance.dll
.dll windows:6 windows x86 arch:x86

f2b222e5b77bb5e02c203c041a4e8c66

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:0b:c2:36:d6:5f:e4:98:4c:e1:d9:34:1e:ac:93:34:85:80:73:24:7b:ab:cd:e1:78:6b:1e:63:fb:e1:e5:c1
Signer

Actual PE Digest

9a:0b:c2:36:d6:5f:e4:98:4c:e1:d9:34:1e:ac:93:34:85:80:73:24:7b:ab:cd:e1:78:6b:1e:63:fb:e1:e5:c1

Digest Algorithm

sha256

PE Digest Matches

true

b4:c2:d6:ad:f1:7d:f0:e2:01:67:a9:54:16:61:48:9a:cd:d1:c0:e1
Signer

Actual PE Digest

b4:c2:d6:ad:f1:7d:f0:e2:01:67:a9:54:16:61:48:9a:cd:d1:c0:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SqlUserInstance.pdb

Imports

kernel32

GetPrivateProfileStringW
ExpandEnvironmentStringsW
DebugBreak
GetProcessHeap
HeapFree
HeapAlloc
VirtualQuery
GetModuleHandleW
GetProcAddress
CompareStringW
SetLastError
CreateThread
LocalFree
DeleteFileW
CloseHandle
ReleaseMutex
GetFinalPathNameByHandleW
WaitForMultipleObjects
CreateEventW
GetExitCodeThread
IsWow64Process
LocalAlloc
EnterCriticalSection
GetLongPathNameW
GetLastError
FreeLibraryAndExitThread
DisconnectNamedPipe
CreateFileW
GetModuleFileNameW
TerminateProcess
GetFileAttributesW
LeaveCriticalSection
FormatMessageW
CopyFileW
CompareStringOrdinal
LoadLibraryW
OpenProcess
GetProcessTimes
InitializeCriticalSection
CompareStringEx
CreateNamedPipeW
WaitForSingleObject
CreateMutexW
CreateDirectoryW
GetModuleHandleExW
GetCurrentProcess
LoadLibraryExW
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
Module32NextW
CreateToolhelp32Snapshot
Sleep

advapi32

RegQueryValueExW
RegOpenKeyW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegSetValueExW
RegCloseKey
ConvertSidToStringSidW
RegEnumKeyExW
GetLengthSid
ReportEventW
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
AddAccessAllowedAce
SetSecurityDescriptorOwner
RegGetValueW
RegDeleteTreeW
InitializeAcl
CryptGenRandom
RegGetKeySecurity
SetSecurityDescriptorDacl
ConvertStringSidToSidW
SetTokenInformation
InitializeSecurityDescriptor
DeregisterEventSource
CreateProcessAsUserW
CryptReleaseContext
RegCreateKeyExW
CreateRestrictedToken
GetTokenInformation
RegDeleteKeyExW
CryptAcquireContextW
OpenProcessToken
RegCopyTreeW
RegisterEventSourceW

user32

CharUpperBuffW
CharLowerBuffW

shlwapi

SHDeleteKeyW

odbc32

ord75
ord24
ord31
ord241
ord111
ord136

ole32

CoCreateInstance
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CoInitializeEx

shell32

SHGetKnownFolderPath

msvcr100

__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
towlower
free
malloc
_ultow
wcsrchr
_vsnwprintf
_vsnprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
wcslen
_purecall
_wcsicmp_l
_wcsicmp
swprintf_s
wcschr
_swscanf_s_l
memcpy
_wcsnicmp
swscanf_s
wcsncmp
_vsnwprintf_l
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_unlock
__CxxFrameHandler3
_lock
_onexit
?terminate@@YAXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
_CxxThrowException

oleaut32

SysFreeString
SysStringLen
SysStringByteLen
VariantChangeType
VariantInit
SysAllocString
VariantClear

Exports

Exports

LOCALDB_PRODUCT_NAME
LocalDBCreateInstance
LocalDBDeleteInstance
LocalDBFormatMessage
LocalDBGetInstanceInfo
LocalDBGetInstances
LocalDBGetVersionInfo
LocalDBGetVersions
LocalDBShareInstance
LocalDBStartInstance
LocalDBStartTracing
LocalDBStopInstance
LocalDBStopTracing
LocalDBUnshareInstance

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/LocalDB/Binn/Resources/SqlUserInstance.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:16:9b:4e:69:80:e0:40:32:15:13:97:6d:d3:5c:85:10:29:ec:c1:8e:32:c0:a3:a2:62:82:56:a5:25:5a:10
Signer

Actual PE Digest

9b:16:9b:4e:69:80:e0:40:32:15:13:97:6d:d3:5c:85:10:29:ec:c1:8e:32:c0:a3:a2:62:82:56:a5:25:5a:10

Digest Algorithm

sha256

PE Digest Matches

true

c9:33:e1:a8:35:44:e9:cc:07:16:d4:64:67:b8:aa:67:cb:3d:94:68
Signer

Actual PE Digest

c9:33:e1:a8:35:44:e9:cc:07:16:d4:64:67:b8:aa:67:cb:3d:94:68

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:e0:2a:1c:0d:63:54:10:5d:30:3e:23:27:cb:f9:10:67:da:21:fa:7d:a8:36:d4:4d:ee:02:cd:f9:02:a2:4e
Signer

Actual PE Digest

e1:e0:2a:1c:0d:63:54:10:5d:30:3e:23:27:cb:f9:10:67:da:21:fa:7d:a8:36:d4:4d:ee:02:cd:f9:02:a2:4e

Digest Algorithm

sha256

PE Digest Matches

true

e2:7d:10:d9:92:1b:50:5f:93:a9:15:db:3b:05:fe:b5:b3:c7:72:e9
Signer

Actual PE Digest

e2:7d:10:d9:92:1b:50:5f:93:a9:15:db:3b:05:fe:b5:b3:c7:72:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui
.dll windows:5 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e0:09:e9:f0:06:6e:48:76:7e:03:dd:92:63:49:fb:22:43:6d:5e:22:4c:a7:7c:98:0a:fb:2b:b6:e0:d0:f7:10
Signer

Actual PE Digest

e0:09:e9:f0:06:6e:48:76:7e:03:dd:92:63:49:fb:22:43:6d:5e:22:4c:a7:7c:98:0a:fb:2b:b6:e0:d0:f7:10

Digest Algorithm

sha256

PE Digest Matches

true

60:58:75:36:d9:8a:a1:46:db:41:8e:6e:2b:2a:6a:ab:db:be:32:f2
Signer

Actual PE Digest

60:58:75:36:d9:8a:a1:46:db:41:8e:6e:2b:2a:6a:ab:db:be:32:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/LocalDB/Binn/SqlUserInstance.dll
.dll windows:6 windows x86 arch:x86

f2b222e5b77bb5e02c203c041a4e8c66

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:0b:c2:36:d6:5f:e4:98:4c:e1:d9:34:1e:ac:93:34:85:80:73:24:7b:ab:cd:e1:78:6b:1e:63:fb:e1:e5:c1
Signer

Actual PE Digest

9a:0b:c2:36:d6:5f:e4:98:4c:e1:d9:34:1e:ac:93:34:85:80:73:24:7b:ab:cd:e1:78:6b:1e:63:fb:e1:e5:c1

Digest Algorithm

sha256

PE Digest Matches

true

b4:c2:d6:ad:f1:7d:f0:e2:01:67:a9:54:16:61:48:9a:cd:d1:c0:e1
Signer

Actual PE Digest

b4:c2:d6:ad:f1:7d:f0:e2:01:67:a9:54:16:61:48:9a:cd:d1:c0:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SqlUserInstance.pdb

Imports

kernel32

GetPrivateProfileStringW
ExpandEnvironmentStringsW
DebugBreak
GetProcessHeap
HeapFree
HeapAlloc
VirtualQuery
GetModuleHandleW
GetProcAddress
CompareStringW
SetLastError
CreateThread
LocalFree
DeleteFileW
CloseHandle
ReleaseMutex
GetFinalPathNameByHandleW
WaitForMultipleObjects
CreateEventW
GetExitCodeThread
IsWow64Process
LocalAlloc
EnterCriticalSection
GetLongPathNameW
GetLastError
FreeLibraryAndExitThread
DisconnectNamedPipe
CreateFileW
GetModuleFileNameW
TerminateProcess
GetFileAttributesW
LeaveCriticalSection
FormatMessageW
CopyFileW
CompareStringOrdinal
LoadLibraryW
OpenProcess
GetProcessTimes
InitializeCriticalSection
CompareStringEx
CreateNamedPipeW
WaitForSingleObject
CreateMutexW
CreateDirectoryW
GetModuleHandleExW
GetCurrentProcess
LoadLibraryExW
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
Module32NextW
CreateToolhelp32Snapshot
Sleep

advapi32

RegQueryValueExW
RegOpenKeyW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegSetValueExW
RegCloseKey
ConvertSidToStringSidW
RegEnumKeyExW
GetLengthSid
ReportEventW
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
AddAccessAllowedAce
SetSecurityDescriptorOwner
RegGetValueW
RegDeleteTreeW
InitializeAcl
CryptGenRandom
RegGetKeySecurity
SetSecurityDescriptorDacl
ConvertStringSidToSidW
SetTokenInformation
InitializeSecurityDescriptor
DeregisterEventSource
CreateProcessAsUserW
CryptReleaseContext
RegCreateKeyExW
CreateRestrictedToken
GetTokenInformation
RegDeleteKeyExW
CryptAcquireContextW
OpenProcessToken
RegCopyTreeW
RegisterEventSourceW

user32

CharUpperBuffW
CharLowerBuffW

shlwapi

SHDeleteKeyW

odbc32

ord75
ord24
ord31
ord241
ord111
ord136

ole32

CoCreateInstance
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CoInitializeEx

shell32

SHGetKnownFolderPath

msvcr100

__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
towlower
free
malloc
_ultow
wcsrchr
_vsnwprintf
_vsnprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
wcslen
_purecall
_wcsicmp_l
_wcsicmp
swprintf_s
wcschr
_swscanf_s_l
memcpy
_wcsnicmp
swscanf_s
wcsncmp
_vsnwprintf_l
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_unlock
__CxxFrameHandler3
_lock
_onexit
?terminate@@YAXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
_CxxThrowException

oleaut32

SysFreeString
SysStringLen
SysStringByteLen
VariantChangeType
VariantInit
SysAllocString
VariantClear

Exports

Exports

LOCALDB_PRODUCT_NAME
LocalDBCreateInstance
LocalDBDeleteInstance
LocalDBFormatMessage
LocalDBGetInstanceInfo
LocalDBGetInstances
LocalDBGetVersionInfo
LocalDBGetVersions
LocalDBShareInstance
LocalDBStartInstance
LocalDBStartTracing
LocalDBStopInstance
LocalDBStopTracing
LocalDBUnshareInstance

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/LocalDB/Binn/localdbxeventconfig.xml
ZrSoft_/SDK/100/KeyFile/1033/sqlsysclrtypes_keyfile.dll
.dll windows:6 windows x86 arch:x86

dd949f9c2ea8d8f2d9dbd7c28c3ed8dd

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

24:0d:f8:e2:37:3b:15:c9:8e:61:45:06:5e:4b:6a:70:6a:a6:b3:6a
Signer

Actual PE Digest

24:0d:f8:e2:37:3b:15:c9:8e:61:45:06:5e:4b:6a:70:6a:a6:b3:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

KeyFile.pdb

Imports

msvcr80

_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/100/KeyFile/1049/sqlsysclrtypes_keyfile.dll
.dll windows:6 windows x86 arch:x86

dd949f9c2ea8d8f2d9dbd7c28c3ed8dd

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

24:0d:f8:e2:37:3b:15:c9:8e:61:45:06:5e:4b:6a:70:6a:a6:b3:6a
Signer

Actual PE Digest

24:0d:f8:e2:37:3b:15:c9:8e:61:45:06:5e:4b:6a:70:6a:a6:b3:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

KeyFile.pdb

Imports

msvcr80

_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/100/SDK/Assemblies/Microsoft.SqlServer.Types.dll
.dll windows:6 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

32:71:0b:07:1e:0a:38:31:e9:79:bf:fd:12:c5:9b:9b:b2:a0:e3:4a
Signer

Actual PE Digest

32:71:0b:07:1e:0a:38:31:e9:79:bf:fd:12:c5:9b:9b:b2:a0:e3:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Types.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/100/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

19:ae:c2:0a:1f:39:f4:3f:98:d8:70:ae:77:0a:f4:ed:63:11:f1:c9
Signer

Actual PE Digest

19:ae:c2:0a:1f:39:f4:3f:98:d8:70:ae:77:0a:f4:ed:63:11:f1:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.ConnectionInfo.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:5a:1b:c6:00:4b:32:70:c9:50:3f:fc:78:ee:a9:10:7a:2c:f2:a1:26:a7:2c:9f:f0:f6:34:af:1a:a4:bf:ed
Signer

Actual PE Digest

6c:5a:1b:c6:00:4b:32:70:c9:50:3f:fc:78:ee:a9:10:7a:2c:f2:a1:26:a7:2c:9f:f0:f6:34:af:1a:a4:bf:ed

Digest Algorithm

sha256

PE Digest Matches

true

db:de:d4:14:b0:81:bf:f6:5c:c2:f1:f3:3a:f4:fb:2f:5c:d0:a0:02
Signer

Actual PE Digest

db:de:d4:14:b0:81:bf:f6:5c:c2:f1:f3:3a:f4:fb:2f:5c:d0:a0:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.ConnectionInfo.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.ConnectionInfoExtended.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:28:dd:c6:34:10:85:cc:c0:f9:1a:82:b4:46:31:37:ed:5f:ff:4e:aa:eb:ad:b5:3e:b4:c4:c1:4b:c3:44:da
Signer

Actual PE Digest

47:28:dd:c6:34:10:85:cc:c0:f9:1a:82:b4:46:31:37:ed:5f:ff:4e:aa:eb:ad:b5:3e:b4:c4:c1:4b:c3:44:da

Digest Algorithm

sha256

PE Digest Matches

true

ae:25:b5:17:99:db:1b:21:5f:36:40:06:1c:bb:6d:bc:07:cd:69:a9
Signer

Actual PE Digest

ae:25:b5:17:99:db:1b:21:5f:36:40:06:1c:bb:6d:bc:07:cd:69:a9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.ConnectionInfoExtended.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Dmf.Adapters.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:4f:b8:f0:b5:e5:cd:66:c6:46:eb:65:d9:a2:37:91:92:ba:d6:78:4b:2a:6d:f9:4e:d3:46:77:29:70:08:ee
Signer

Actual PE Digest

23:4f:b8:f0:b5:e5:cd:66:c6:46:eb:65:d9:a2:37:91:92:ba:d6:78:4b:2a:6d:f9:4e:d3:46:77:29:70:08:ee

Digest Algorithm

sha256

PE Digest Matches

true

61:4d:39:a6:55:25:1b:d8:40:5a:9c:88:06:02:dc:00:d9:82:67:4f
Signer

Actual PE Digest

61:4d:39:a6:55:25:1b:d8:40:5a:9c:88:06:02:dc:00:d9:82:67:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Dmf.Adapters.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Dmf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

28:2c:e5:16:1b:34:b4:d6:2f:76:89:b9:09:0d:93:c5:e3:14:54:d4:a3:bc:05:45:ab:c9:bd:99:d4:6c:ad:fc
Signer

Actual PE Digest

28:2c:e5:16:1b:34:b4:d6:2f:76:89:b9:09:0d:93:c5:e3:14:54:d4:a3:bc:05:45:ab:c9:bd:99:d4:6c:ad:fc

Digest Algorithm

sha256

PE Digest Matches

true

1f:2f:02:c9:1f:97:17:3e:3e:4d:bd:70:6d:99:3a:88:42:ed:a2:7c
Signer

Actual PE Digest

1f:2f:02:c9:1f:97:17:3e:3e:4d:bd:70:6d:99:3a:88:42:ed:a2:7c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Dmf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 328KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.DmfSqlClrWrapper.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:67:76:52:78:23:23:f0:09:ed:5d:a1:1b:50:fd:ea:d2:4f:53:69:61:3e:5a:0d:b0:e2:ab:7b:2b:49:68:05
Signer

Actual PE Digest

21:67:76:52:78:23:23:f0:09:ed:5d:a1:1b:50:fd:ea:d2:4f:53:69:61:3e:5a:0d:b0:e2:ab:7b:2b:49:68:05

Digest Algorithm

sha256

PE Digest Matches

true

ca:cf:14:b9:12:5c:60:94:1d:d3:52:5b:ae:c2:db:7f:98:06:05:d3
Signer

Actual PE Digest

ca:cf:14:b9:12:5c:60:94:1d:d3:52:5b:ae:c2:db:7f:98:06:05:d3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.DmfSqlClrWrapper.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.Collector.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:df:5a:fa:ff:58:35:9a:60:30:3d:dd:b4:ab:43:d6:05:ae:10:25:c0:3d:41:08:b2:38:ce:9a:a4:10:3f:9f
Signer

Actual PE Digest

d7:df:5a:fa:ff:58:35:9a:60:30:3d:dd:b4:ab:43:d6:05:ae:10:25:c0:3d:41:08:b2:38:ce:9a:a4:10:3f:9f

Digest Algorithm

sha256

PE Digest Matches

true

4a:9e:4d:31:e8:1c:b0:5f:b9:33:c4:72:d3:6a:9c:61:e4:9f:1f:c2
Signer

Actual PE Digest

4a:9e:4d:31:e8:1c:b0:5f:b9:33:c4:72:d3:6a:9c:61:e4:9f:1f:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.Collector.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.CollectorEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:5e:7b:0c:14:bb:97:50:59:22:b5:d6:c1:eb:51:cd:1b:17:18:5e:80:b0:44:2b:8a:24:40:64:49:e5:c2:04
Signer

Actual PE Digest

c0:5e:7b:0c:14:bb:97:50:59:22:b5:d6:c1:eb:51:cd:1b:17:18:5e:80:b0:44:2b:8a:24:40:64:49:e5:c2:04

Digest Algorithm

sha256

PE Digest Matches

true

34:1e:14:88:40:6e:03:17:06:44:a3:bc:52:44:e5:52:3c:11:fb:4f
Signer

Actual PE Digest

34:1e:14:88:40:6e:03:17:06:44:a3:bc:52:44:e5:52:3c:11:fb:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.CollectorEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.RegisteredServers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:bf:4b:0b:73:43:c7:f6:ee:fc:aa:88:91:c8:7b:ac:cd:ae:ee:fa:f4:21:d6:14:5d:c9:36:ca:c4:1b:e8:5c
Signer

Actual PE Digest

49:bf:4b:0b:73:43:c7:f6:ee:fc:aa:88:91:c8:7b:ac:cd:ae:ee:fa:f4:21:d6:14:5d:c9:36:ca:c4:1b:e8:5c

Digest Algorithm

sha256

PE Digest Matches

true

00:56:dd:61:cc:47:21:a1:a7:74:1d:56:de:aa:9e:4f:1c:5e:e3:2e
Signer

Actual PE Digest

00:56:dd:61:cc:47:21:a1:a7:74:1d:56:de:aa:9e:4f:1c:5e:e3:2e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.RegisteredServers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.Sdk.Sfc.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:04:12:e3:d2:0e:1f:47:20:28:19:96:2c:0d:ab:84:65:10:13:0f:33:5b:d5:de:c2:16:94:62:2f:84:27:03
Signer

Actual PE Digest

e4:04:12:e3:d2:0e:1f:47:20:28:19:96:2c:0d:ab:84:65:10:13:0f:33:5b:d5:de:c2:16:94:62:2f:84:27:03

Digest Algorithm

sha256

PE Digest Matches

true

8c:6e:bc:d9:05:cb:f2:ac:68:48:b9:18:e0:00:82:cb:ac:a9:0c:a2
Signer

Actual PE Digest

8c:6e:bc:d9:05:cb:f2:ac:68:48:b9:18:e0:00:82:cb:ac:a9:0c:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.Sdk.Sfc.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 468KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.Utility.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:58:23:50:2b:01:5e:c2:88:e0:13:3d:73:1e:f6:21:24:6b:5e:52:51:e7:ca:52:0b:b9:c6:1a:85:c1:ac:ea
Signer

Actual PE Digest

4b:58:23:50:2b:01:5e:c2:88:e0:13:3d:73:1e:f6:21:24:6b:5e:52:51:e7:ca:52:0b:b9:c6:1a:85:c1:ac:ea

Digest Algorithm

sha256

PE Digest Matches

true

8d:df:b5:5d:38:63:02:c1:1e:82:86:c3:13:b1:85:1e:96:01:f4:38
Signer

Actual PE Digest

8d:df:b5:5d:38:63:02:c1:1e:82:86:c3:13:b1:85:1e:96:01:f4:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.Utility.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 296KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.UtilityEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

67:0a:0b:1c:aa:ab:20:4b:1c:d8:87:38:a0:4f:48:b9:2c:48:44:64:1d:9e:38:19:76:ae:0e:12:0d:0f:a6:66
Signer

Actual PE Digest

67:0a:0b:1c:aa:ab:20:4b:1c:d8:87:38:a0:4f:48:b9:2c:48:44:64:1d:9e:38:19:76:ae:0e:12:0d:0f:a6:66

Digest Algorithm

sha256

PE Digest Matches

true

10:aa:fa:9e:0e:e2:79:f5:e9:13:90:08:5f:1b:6e:96:a9:6e:52:95
Signer

Actual PE Digest

10:aa:fa:9e:0e:e2:79:f5:e9:13:90:08:5f:1b:6e:96:a9:6e:52:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.UtilityEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.XEvent.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:a1:dd:81:bb:89:82:51:64:23:3f:0d:79:87:08:70:23:4b:23:bb:ae:e8:1e:20:c4:f9:07:6d:9b:e4:98:aa
Signer

Actual PE Digest

b1:a1:dd:81:bb:89:82:51:64:23:3f:0d:79:87:08:70:23:4b:23:bb:ae:e8:1e:20:c4:f9:07:6d:9b:e4:98:aa

Digest Algorithm

sha256

PE Digest Matches

true

d5:65:55:9d:95:e7:55:ae:cf:be:48:96:6c:50:29:0a:69:a8:4f:71
Signer

Actual PE Digest

d5:65:55:9d:95:e7:55:ae:cf:be:48:96:6c:50:29:0a:69:a8:4f:71

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.XEvent.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Management.XEventEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:cc:d5:23:e9:a5:29:8f:63:be:02:f1:bb:c8:42:de:a9:83:bd:da:bc:d3:4d:f5:7b:77:60:f3:18:c7:93:61
Signer

Actual PE Digest

57:cc:d5:23:e9:a5:29:8f:63:be:02:f1:bb:c8:42:de:a9:83:bd:da:bc:d3:4d:f5:7b:77:60:f3:18:c7:93:61

Digest Algorithm

sha256

PE Digest Matches

true

db:7f:28:f6:20:f6:8c:81:6c:f5:c5:2a:10:c0:1f:ea:33:da:a5:96
Signer

Actual PE Digest

db:7f:28:f6:20:f6:8c:81:6c:f5:c5:2a:10:c0:1f:ea:33:da:a5:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Management.XEventEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.PolicyEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:0b:82:01:52:12:7f:b9:70:0e:8d:2f:74:08:fb:84:a9:a1:82:9a:b2:41:aa:f1:20:dc:08:65:a5:03:01:0e
Signer

Actual PE Digest

3f:0b:82:01:52:12:7f:b9:70:0e:8d:2f:74:08:fb:84:a9:a1:82:9a:b2:41:aa:f1:20:dc:08:65:a5:03:01:0e

Digest Algorithm

sha256

PE Digest Matches

true

bd:0a:f3:53:e2:65:38:72:a7:57:14:90:06:84:d2:34:d1:a4:05:39
Signer

Actual PE Digest

bd:0a:f3:53:e2:65:38:72:a7:57:14:90:06:84:d2:34:d1:a4:05:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.PolicyEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.RegSvrEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:ea:cf:72:81:37:ff:2b:b6:06:16:36:b7:ea:f6:9e:c7:cd:c3:98:cc:2a:74:b7:56:1c:64:d5:44:f8:e0:f6
Signer

Actual PE Digest

dc:ea:cf:72:81:37:ff:2b:b6:06:16:36:b7:ea:f6:9e:c7:cd:c3:98:cc:2a:74:b7:56:1c:64:d5:44:f8:e0:f6

Digest Algorithm

sha256

PE Digest Matches

true

ed:09:31:c0:9e:25:a6:83:92:db:06:f9:b8:d6:47:cf:a2:aa:69:3c
Signer

Actual PE Digest

ed:09:31:c0:9e:25:a6:83:92:db:06:f9:b8:d6:47:cf:a2:aa:69:3c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.RegSvrEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.SString.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:c1:04:5c:6d:80:84:b0:9a:ff:24:17:96:90:08:e1:85:2a:cd:21:cd:81:38:a5:c0:bb:4e:5f:68:0f:6a:bc
Signer

Actual PE Digest

9e:c1:04:5c:6d:80:84:b0:9a:ff:24:17:96:90:08:e1:85:2a:cd:21:cd:81:38:a5:c0:bb:4e:5f:68:0f:6a:bc

Digest Algorithm

sha256

PE Digest Matches

true

bb:41:d3:7e:ec:74:f6:56:8c:1b:0c:d2:76:f8:3c:92:be:b3:f7:f4
Signer

Actual PE Digest

bb:41:d3:7e:ec:74:f6:56:8c:1b:0c:d2:76:f8:3c:92:be:b3:f7:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.SString.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.ServiceBrokerEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:4c:23:a8:a8:2e:11:74:b6:0c:cd:94:fc:2b:97:a9:cd:45:27:a8:7b:05:c5:47:df:33:e5:95:22:c9:15:67
Signer

Actual PE Digest

a4:4c:23:a8:a8:2e:11:74:b6:0c:cd:94:fc:2b:97:a9:cd:45:27:a8:7b:05:c5:47:df:33:e5:95:22:c9:15:67

Digest Algorithm

sha256

PE Digest Matches

true

c6:c6:15:8c:9d:ad:46:69:a4:93:40:1a:fb:d2:68:33:dd:90:ad:48
Signer

Actual PE Digest

c6:c6:15:8c:9d:ad:46:69:a4:93:40:1a:fb:d2:68:33:dd:90:ad:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.ServiceBrokerEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Smo.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:fd:69:43:a5:ad:3f:1e:87:5c:08:e7:a6:74:2a:1a:17:bd:c5:68:64:de:37:71:26:b0:89:a2:a7:13:dc:7a
Signer

Actual PE Digest

4a:fd:69:43:a5:ad:3f:1e:87:5c:08:e7:a6:74:2a:1a:17:bd:c5:68:64:de:37:71:26:b0:89:a2:a7:13:dc:7a

Digest Algorithm

sha256

PE Digest Matches

true

57:94:1a:79:e9:db:23:59:ea:63:3d:ed:f7:80:ea:7a:54:f9:b8:65
Signer

Actual PE Digest

57:94:1a:79:e9:db:23:59:ea:63:3d:ed:f7:80:ea:7a:54:f9:b8:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Smo.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.SmoExtended.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:90:8e:dd:aa:5a:be:64:33:27:fb:41:f4:ce:95:4b:0d:93:7f:f4:a7:72:85:b5:15:40:56:e6:c5:d0:27:54
Signer

Actual PE Digest

07:90:8e:dd:aa:5a:be:64:33:27:fb:41:f4:ce:95:4b:0d:93:7f:f4:a7:72:85:b5:15:40:56:e6:c5:d0:27:54

Digest Algorithm

sha256

PE Digest Matches

true

ab:a8:01:e3:6e:e1:77:cf:fe:e9:61:ba:11:c8:13:d6:8e:48:8a:f2
Signer

Actual PE Digest

ab:a8:01:e3:6e:e1:77:cf:fe:e9:61:ba:11:c8:13:d6:8e:48:8a:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.SmoExtended.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.SqlEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:c1:5a:e7:37:1b:1e:48:7d:e0:89:17:9c:b0:66:9b:02:9a:35:e7:d4:7b:be:1f:fe:95:3d:f8:31:8a:28:82
Signer

Actual PE Digest

bc:c1:5a:e7:37:1b:1e:48:7d:e0:89:17:9c:b0:66:9b:02:9a:35:e7:d4:7b:be:1f:fe:95:3d:f8:31:8a:28:82

Digest Algorithm

sha256

PE Digest Matches

true

fd:36:d8:ea:08:79:ce:ab:26:e5:a3:db:09:d1:05:00:53:bb:b4:9f
Signer

Actual PE Digest

fd:36:d8:ea:08:79:ce:ab:26:e5:a3:db:09:d1:05:00:53:bb:b4:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.SqlEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.SqlWmiManagement.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:73:6a:04:a8:ba:df:bd:4d:68:10:60:0a:0c:6c:c4:e3:5f:a5:48:96:4f:a7:0f:46:11:e4:e6:8a:1d:67:6a
Signer

Actual PE Digest

59:73:6a:04:a8:ba:df:bd:4d:68:10:60:0a:0c:6c:c4:e3:5f:a5:48:96:4f:a7:0f:46:11:e4:e6:8a:1d:67:6a

Digest Algorithm

sha256

PE Digest Matches

true

6c:3c:27:d6:b9:42:29:8b:68:61:96:55:f6:e4:5b:7c:c2:de:c1:ba
Signer

Actual PE Digest

6c:3c:27:d6:b9:42:29:8b:68:61:96:55:f6:e4:5b:7c:c2:de:c1:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.SqlWmiManagement.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.TransactSql.ScriptDom.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:35:e6:cb:38:81:4f:27:ce:43:ef:ea:a3:18:ec:e5:e3:aa:71:0f:dc:7a:d9:8c:e5:ac:b6:80:ab:65:f9:f7
Signer

Actual PE Digest

76:35:e6:cb:38:81:4f:27:ce:43:ef:ea:a3:18:ec:e5:e3:aa:71:0f:dc:7a:d9:8c:e5:ac:b6:80:ab:65:f9:f7

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:17:f7:b3:9d:d9:1f:23:d6:3c:02:84:80:b0:87:88:91:1f:06
Signer

Actual PE Digest

b2:c8:17:f7:b3:9d:d9:1f:23:d6:3c:02:84:80:b0:87:88:91:1f:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.TransactSql.ScriptDom.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.Types.dll
.dll windows:6 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:09:ec:f7:3e:6f:98:00:88:b7:5f:6f:fb:c2:67:df:80:c8:78:ad:48:a7:ca:dc:15:19:39:fc:c5:ab:4b:7d
Signer

Actual PE Digest

fa:09:ec:f7:3e:6f:98:00:88:b7:5f:6f:fb:c2:67:df:80:c8:78:ad:48:a7:ca:dc:15:19:39:fc:c5:ab:4b:7d

Digest Algorithm

sha256

PE Digest Matches

true

40:df:31:d6:b2:52:e4:f9:2e:53:05:32:01:d3:f5:da:70:6e:22:f4
Signer

Actual PE Digest

40:df:31:d6:b2:52:e4:f9:2e:53:05:32:01:d3:f5:da:70:6e:22:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Types.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Microsoft.SqlServer.WmiEnum.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6e:7d:16:92:57:34:cf:58:e3:f1:cc:d3:ea:dd:a0:e9:65:1a:3c:81:a4:10:5e:17:75:6e:16:ee:40:0a:0d:db
Signer

Actual PE Digest

6e:7d:16:92:57:34:cf:58:e3:f1:cc:d3:ea:dd:a0:e9:65:1a:3c:81:a4:10:5e:17:75:6e:16:ee:40:0a:0d:db

Digest Algorithm

sha256

PE Digest Matches

true

d3:97:69:35:1d:f4:ba:97:a6:57:85:91:bb:15:ee:4c:15:c2:64:bf
Signer

Actual PE Digest

d3:97:69:35:1d:f4:ba:97:a6:57:85:91:bb:15:ee:4c:15:c2:64:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.WmiEnum.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/Redist_TSqlLanguageService.txt
ZrSoft_/SDK/Assemblies/ru/License_SMO.txt
ZrSoft_/SDK/Assemblies/ru/License_TSqlLangSvc.txt
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.ConnectionInfo.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.ConnectionInfoExtended.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.Adapters.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:c2:29:cd:38:63:3a:04:16:61:6f:f2:e3:2d:3e:b9:15:bb:34:b2:cb:f2:93:fe:9e:97:68:95:26:53:25:fe
Signer

Actual PE Digest

4d:c2:29:cd:38:63:3a:04:16:61:6f:f2:e3:2d:3e:b9:15:bb:34:b2:cb:f2:93:fe:9e:97:68:95:26:53:25:fe

Digest Algorithm

sha256

PE Digest Matches

true

d4:a7:7c:f6:99:e5:30:65:81:38:ef:fe:d6:4f:e0:d2:6a:82:20:49
Signer

Actual PE Digest

d4:a7:7c:f6:99:e5:30:65:81:38:ef:fe:d6:4f:e0:d2:6a:82:20:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

95:5b:cd:7c:5b:1e:d7:8d:55:f4:0e:9d:08:44:30:e1:4c:94:84:9f:a8:5b:83:17:12:38:2b:a5:88:88:84:c6
Signer

Actual PE Digest

95:5b:cd:7c:5b:1e:d7:8d:55:f4:0e:9d:08:44:30:e1:4c:94:84:9f:a8:5b:83:17:12:38:2b:a5:88:88:84:c6

Digest Algorithm

sha256

PE Digest Matches

true

76:ae:3a:fb:9c:94:12:55:4f:75:ef:8a:af:a5:3d:93:37:98:d7:81
Signer

Actual PE Digest

76:ae:3a:fb:9c:94:12:55:4f:75:ef:8a:af:a5:3d:93:37:98:d7:81

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.DmfSqlClrWrapper.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Collector.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:95:4a:97:ce:f0:2d:22:ba:74:3e:ec:cf:77:e7:75:a4:98:d5:fc:e1:5b:5c:28:2b:79:1d:e5:88:a9:5f:d7
Signer

Actual PE Digest

7d:95:4a:97:ce:f0:2d:22:ba:74:3e:ec:cf:77:e7:75:a4:98:d5:fc:e1:5b:5c:28:2b:79:1d:e5:88:a9:5f:d7

Digest Algorithm

sha256

PE Digest Matches

true

4d:6b:5f:c3:e0:11:57:68:6c:a6:ec:f3:4f:e5:9c:ae:0d:91:a6:08
Signer

Actual PE Digest

4d:6b:5f:c3:e0:11:57:68:6c:a6:ec:f3:4f:e5:9c:ae:0d:91:a6:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Collector.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.CollectorEnum.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:ac:bf:4c:7f:a5:d0:75:bf:3a:35:f9:50:1e:32:8e:40:cc:50:2e:79:6a:06:60:b6:64:f5:f0:ff:06:90:72
Signer

Actual PE Digest

b1:ac:bf:4c:7f:a5:d0:75:bf:3a:35:f9:50:1e:32:8e:40:cc:50:2e:79:6a:06:60:b6:64:f5:f0:ff:06:90:72

Digest Algorithm

sha256

PE Digest Matches

true

81:f0:ec:c9:d8:cb:2c:28:f1:ac:c4:04:a0:89:68:c7:74:60:d1:1b
Signer

Actual PE Digest

81:f0:ec:c9:d8:cb:2c:28:f1:ac:c4:04:a0:89:68:c7:74:60:d1:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Sdk.Sfc.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:96:a0:a8:35:39:f7:76:2a:29:de:5b:4c:58:43:8b:79:3a:7a:67:c7:9b:61:a3:16:fd:5e:46:1a:f4:79:6d
Signer

Actual PE Digest

c0:96:a0:a8:35:39:f7:76:2a:29:de:5b:4c:58:43:8b:79:3a:7a:67:c7:9b:61:a3:16:fd:5e:46:1a:f4:79:6d

Digest Algorithm

sha256

PE Digest Matches

true

a1:03:92:e4:33:64:a2:2d:a8:fe:9e:6b:55:26:d6:a6:e1:45:50:fa
Signer

Actual PE Digest

a1:03:92:e4:33:64:a2:2d:a8:fe:9e:6b:55:26:d6:a6:e1:45:50:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Sdk.Sfc.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Utility.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:da:4d:2b:6c:21:a2:f9:0c:df:ed:d3:bd:b1:7b:91:92:d3:f2:65:0b:a5:19:c6:18:5f:e3:da:b9:af:e4:ab
Signer

Actual PE Digest

ae:da:4d:2b:6c:21:a2:f9:0c:df:ed:d3:bd:b1:7b:91:92:d3:f2:65:0b:a5:19:c6:18:5f:e3:da:b9:af:e4:ab

Digest Algorithm

sha256

PE Digest Matches

true

b3:14:48:68:9e:70:7f:33:0a:03:fd:06:b4:c4:ad:57:7a:1d:79:cd
Signer

Actual PE Digest

b3:14:48:68:9e:70:7f:33:0a:03:fd:06:b4:c4:ad:57:7a:1d:79:cd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Utility.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.UtilityEnum.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Management.XEvent.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:70:e4:0a:5a:09:f5:c0:97:7f:7e:df:6e:4a:f9:98:ce:76:ed:17:a7:62:1b:89:5c:d4:75:0f:a1:5c:82:8c
Signer

Actual PE Digest

58:70:e4:0a:5a:09:f5:c0:97:7f:7e:df:6e:4a:f9:98:ce:76:ed:17:a7:62:1b:89:5c:d4:75:0f:a1:5c:82:8c

Digest Algorithm

sha256

PE Digest Matches

true

e5:3c:b0:23:9a:a0:20:d8:bb:c3:a0:71:3d:25:77:a6:b0:3d:21:8a
Signer

Actual PE Digest

e5:3c:b0:23:9a:a0:20:d8:bb:c3:a0:71:3d:25:77:a6:b0:3d:21:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.RegSvrEnum.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:d0:9e:a1:63:98:33:4e:37:c5:79:b1:ac:90:f0:d7:14:8c:f1:2c:c9:d6:93:27:09:30:f9:19:2c:33:60:49
Signer

Actual PE Digest

c2:d0:9e:a1:63:98:33:4e:37:c5:79:b1:ac:90:f0:d7:14:8c:f1:2c:c9:d6:93:27:09:30:f9:19:2c:33:60:49

Digest Algorithm

sha256

PE Digest Matches

true

1f:7f:d0:a5:e9:9c:a0:3b:04:41:10:5e:e8:c8:38:4e:ce:23:21:c9
Signer

Actual PE Digest

1f:7f:d0:a5:e9:9c:a0:3b:04:41:10:5e:e8:c8:38:4e:ce:23:21:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.RegSvrEnum.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.ServiceBrokerEnum.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Smo.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.SmoExtended.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.SqlEnum.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.SqlWmiManagement.xml
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.TransactSql.ScriptDom.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

85:a4:95:01:50:ff:33:35:0b:87:2c:65:50:49:e9:f3:6a:db:5b:6c:a5:01:9c:23:d0:85:7a:8c:85:23:13:05
Signer

Actual PE Digest

85:a4:95:01:50:ff:33:35:0b:87:2c:65:50:49:e9:f3:6a:db:5b:6c:a5:01:9c:23:d0:85:7a:8c:85:23:13:05

Digest Algorithm

sha256

PE Digest Matches

true

49:6f:1d:43:90:e8:e8:9e:d7:e0:30:a2:86:08:2e:b7:8c:ef:12:8c
Signer

Actual PE Digest

49:6f:1d:43:90:e8:e8:9e:d7:e0:30:a2:86:08:2e:b7:8c:ef:12:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:f5:97:53:87:6f:9c:37:80:91:3e:35:ee:f4:ab:07:ca:31:91:e8:8e:a8:5a:bd:2c:2d:4a:fc:21:ff:a7:14
Signer

Actual PE Digest

e3:f5:97:53:87:6f:9c:37:80:91:3e:35:ee:f4:ab:07:ca:31:91:e8:8e:a8:5a:bd:2c:2d:4a:fc:21:ff:a7:14

Digest Algorithm

sha256

PE Digest Matches

true

37:01:85:4b:7a:64:06:64:28:a0:58:08:39:4e:70:60:2f:cd:0b:0e
Signer

Actual PE Digest

37:01:85:4b:7a:64:06:64:28:a0:58:08:39:4e:70:60:2f:cd:0b:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/SDK/Assemblies/ru/Microsoft.SqlServer.WmiEnum.xml
ZrSoft_/SDK/Include/sqlncli.h
ZrSoft_/SDK/Lib/x64/sqlncli11.lib
ZrSoft_/SDK/Lib/x86/sqlncli11.lib
ZrSoft_/Shared/Microsoft.SqlServer.Types.dll
.dll windows:6 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:09:ec:f7:3e:6f:98:00:88:b7:5f:6f:fb:c2:67:df:80:c8:78:ad:48:a7:ca:dc:15:19:39:fc:c5:ab:4b:7d
Signer

Actual PE Digest

fa:09:ec:f7:3e:6f:98:00:88:b7:5f:6f:fb:c2:67:df:80:c8:78:ad:48:a7:ca:dc:15:19:39:fc:c5:ab:4b:7d

Digest Algorithm

sha256

PE Digest Matches

true

40:df:31:d6:b2:52:e4:f9:2e:53:05:32:01:d3:f5:da:70:6e:22:f4
Signer

Actual PE Digest

40:df:31:d6:b2:52:e4:f9:2e:53:05:32:01:d3:f5:da:70:6e:22:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.SqlServer.Types.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/Resources/1033/sqlevn70.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:95:30:7d:ce:9d:1a:9b:bb:d9:4b:23:7e:11:9d:3d:b4:fd:61:03:c9:1f:f1:93:d9:2d:07:49:f0:ce:39:ca
Signer

Actual PE Digest

ac:95:30:7d:ce:9d:1a:9b:bb:d9:4b:23:7e:11:9d:3d:b4:fd:61:03:c9:1f:f1:93:d9:2d:07:49:f0:ce:39:ca

Digest Algorithm

sha256

PE Digest Matches

true

09:04:c5:ba:d8:d8:61:20:7e:8c:96:65:57:98:28:ad:40:1d:4a:f6
Signer

Actual PE Digest

09:04:c5:ba:d8:d8:61:20:7e:8c:96:65:57:98:28:ad:40:1d:4a:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/Resources/1049/sqlevn70.rll
.dll windows:6 windows x86 arch:x86

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:92:ad:50:36:26:4b:9a:09:95:f0:2b:2c:fc:cc:17:c8:ae:e3:0a:a1:85:9e:7b:e8:2f:ec:b7:d0:1c:03:06
Signer

Actual PE Digest

9c:92:ad:50:36:26:4b:9a:09:95:f0:2b:2c:fc:cc:17:c8:ae:e3:0a:a1:85:9e:7b:e8:2f:ec:b7:d0:1c:03:06

Digest Algorithm

sha256

PE Digest Matches

true

f1:d4:ca:84:8f:57:ab:06:5e:99:5b:39:ff:80:a4:4f:a0:1a:7b:33
Signer

Actual PE Digest

f1:d4:ca:84:8f:57:ab:06:5e:99:5b:39:ff:80:a4:4f:a0:1a:7b:33

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/instapi110.dll
.dll windows:6 windows x86 arch:x86

5527b371750fc6d80eaa5449ea813923

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:5c:8d:e0:e1:7e:89:10:e0:74:f6:4b:42:36:23:49:63:8e:eb:73:10:e9:33:bd:b2:4b:74:6b:be:3c:ce:c4
Signer

Actual PE Digest

f8:5c:8d:e0:e1:7e:89:10:e0:74:f6:4b:42:36:23:49:63:8e:eb:73:10:e9:33:bd:b2:4b:74:6b:be:3c:ce:c4

Digest Algorithm

sha256

PE Digest Matches

true

d4:6d:37:76:ff:39:92:b9:72:4f:67:9a:66:5e:cd:2c:76:bb:20:14
Signer

Actual PE Digest

d4:6d:37:76:ff:39:92:b9:72:4f:67:9a:66:5e:cd:2c:76:bb:20:14

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

instapi110.pdb

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
memcpy
_swscanf_s_l
_snwprintf_s
swprintf_s
_vsnwprintf
wcsncpy_s
wcslen
memset

kernel32

lstrlenW
CompareStringW
GetProcAddress
GetCurrentProcess
SetLastError
GetComputerNameExW
VirtualQuery
HeapAlloc
HeapFree
GetProcessHeap
DebugBreak
GetModuleFileNameW
ExpandEnvironmentStringsW
GetPrivateProfileStringW
GetFileAttributesW
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegCloseKey

Exports

Exports

GetCOMPath
GetInstRegKeyAccessMask
GetInstRegPathByID
GetInstRegPathByName
GetInstRootDirPathByID
GetInstRootRegPathByID
GetInstanceIDFromFTSApp
GetInstanceIDFromService
GetInstanceNameFromFTSApp
GetInstanceNameFromID
GetInstanceNameFromService
GetInstancePipeByID
GetInstancePipeByName
GetRegKeyAccessMask
GetSQLBinPathByInstID
GetSQLDataRootByInstID
GetSQLDataRootByInstName
GetSQLInstanceRegStringByID
GetSQLReplicationRegPath
GetSQLRootRegPath
GetSQLServerByID
GetSQLServerByName
GetSQLServiceByID
GetSQLServiceByName
GetSQLServiceTypeByName
GetSQLToolsDirPath
GetSQLToolsRegPath
GetSQLVerSpecificRegString
GetSvcBinPathByID
GetSvcBinPathByInstName
GetSvcBinPathByName
GetSvcInstRootDirPathByName
GetSvcInstRootRegPathByName
GetSvcInstanceIDFromName
GetSvcInstanceIDFromName2
GetSvcInstanceRegStringByName
GetVerSpecificRootDirPath
GetVerSpecificRootRegPath
IsDefaultInstanceID
IsDefaultInstanceName
IsNameAgentService
IsNameSQLService

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/lssyscat.dat
ZrSoft_/Shared/sqldk.dll
.dll windows:6 windows x86 arch:x86

b0e1af33febb4cf653d41034da247b81

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:44:ea:1d:8a:dd:7b:d4:a3:49:83:55:90:6c:f9:b2:bf:ab:11:fe:ac:32:15:91:d8:22:e1:75:9a:0b:29:52
Signer

Actual PE Digest

5a:44:ea:1d:8a:dd:7b:d4:a3:49:83:55:90:6c:f9:b2:bf:ab:11:fe:ac:32:15:91:d8:22:e1:75:9a:0b:29:52

Digest Algorithm

sha256

PE Digest Matches

true

00:f6:a0:29:a8:1e:2c:c7:3e:72:17:fb:c6:89:ac:df:50:df:a0:64
Signer

Actual PE Digest

00:f6:a0:29:a8:1e:2c:c7:3e:72:17:fb:c6:89:ac:df:50:df:a0:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqldk.pdb

Imports

msvcr100

?terminate@@YAXXZ
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_vsnprintf_l
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
bsearch
free
_wcstod_l
_wcstol_l
_errno
isspace
strncmp
wcsncmp
_strnicmp_l
_wcsnicmp_l
_iswprint_l
_wtoi64_l
_wfullpath
memmove
_vsnwprintf_s_l
_printf_l
qsort
wcschr
wcsrchr
_snwprintf_l
wcscpy_s
malloc
_resetstkoflw
signal
_set_invalid_parameter_handler
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
rand
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_clearfp
_fpreset
_controlfp
__pctype_func
_isctype_l
_vsnwprintf_l
strncpy_s
_beginthreadex
_wcsicmp_l
_purecall
_vsnwprintf
memcpy
__CxxFrameHandler3
_CxxThrowException
_CIsqrt
_CIexp
setlocale
_get_current_locale

msvcp100

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?exceptions@ios_base@std@@QAEXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ

sqlos

GetTlsSlotInfo

kernel32

LoadLibraryA
GetProcessHeap
LocalAlloc
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
DeleteCriticalSection
TlsAlloc
GetUserDefaultLCID
ReleaseSemaphore
CreateSemaphoreW
MultiByteToWideChar
GetFileSize
GetCurrentProcessId
RtlCaptureStackBackTrace
GetDiskFreeSpaceExW
DeleteFileW
SetLastError
GetTempPathW
FindClose
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceW
GetVolumePathNameW
SetEndOfFile
SetFilePointerEx
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
Module32NextW
CreateToolhelp32Snapshot
LocalFree
TlsSetValue
DuplicateHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReadFile
WriteFile
SwitchToThread
ResumeThread
GetNumaNodeProcessorMask
GetProcessAffinityMask
SetThreadIdealProcessor
GetNumaHighestNodeNumber
PostQueuedCompletionStatus
OpenFileMappingW
CreateFileMappingW
SetProcessWorkingSetSize
VirtualQueryEx
IsDebuggerPresent
GetOverlappedResult
SignalObjectAndWait
InterlockedFlushSList
WaitForMultipleObjects
GetLocalTime
FormatMessageW
SetThreadAffinityMask
GetSystemInfo
GetProcessTimes
GetThreadContext
GetThreadTimes
OpenThread
RaiseException
DebugBreak
SuspendThread
GetThreadPriority
ExitProcess
CreateMutexW
LoadLibraryW
GetVersionExW
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemTimeAsFileTime
GetCurrentThreadId
WaitForSingleObject
CloseHandle
CreateFiber
DeleteFiber
SetThreadPriority
GetCurrentThread
ConvertThreadToFiber
SwitchToFiber
WaitForSingleObjectEx
QueryDepthSList
MapUserPhysicalPages
ResetEvent
UnmapViewOfFile
MapViewOfFileEx
VirtualQuery
VirtualProtect
VirtualFree
GlobalMemoryStatusEx
GetModuleHandleW
CreateEventW
GetLastError
FreeUserPhysicalPages
AllocateUserPhysicalPages
VirtualAlloc
QueryPerformanceCounter
GetTickCount
TlsGetValue
CreateFileW
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetProcAddress
QueryPerformanceFrequency
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
InitializeSListHead
InterlockedPushEntrySList
SetEvent
Sleep
HeapAlloc
IsProcessorFeaturePresent
HeapFree
InterlockedPopEntrySList
OutputDebugStringA

advapi32

TraceEvent
RevertToSelf
ImpersonateSelf
ControlTraceW
StartTraceW
UnregisterTraceGuids
RegisterTraceGuidsW
EnableTrace
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
QueryAllTracesW
SetThreadToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetLengthSid
GetTokenInformation
OpenThreadToken
OpenProcessToken

rpcrt4

UuidCreate

psapi

GetProcessMemoryInfo

winmm

timeGetDevCaps
timeBeginPeriod
timeEndPeriod

Exports

Exports

?NotifyShutdown@SOS_OS@@SGXXZ
XEGetEngine
memMgrInfo

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AssertDa
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 9B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CONSTSEC
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/sqllang.dll
.dll windows:6 windows x86 arch:x86

16a8bdf7eba9c8eeff2c4a1eeede524d

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:27:c2:dc:73:a4:c5:c7:2b:e4:5c:88:e2:e9:4e:00:81:6b:af:ff:0d:46:d4:07:18:ac:53:ba:92:40:39:92
Signer

Actual PE Digest

9c:27:c2:dc:73:a4:c5:c7:2b:e4:5c:88:e2:e9:4e:00:81:6b:af:ff:0d:46:d4:07:18:ac:53:ba:92:40:39:92

Digest Algorithm

sha256

PE Digest Matches

true

79:2b:e2:6c:4d:66:fc:3f:3b:8d:54:54:b6:5f:35:35:15:71:fe:bf
Signer

Actual PE Digest

79:2b:e2:6c:4d:66:fc:3f:3b:8d:54:54:b6:5f:35:35:15:71:fe:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqllang.pdb

Imports

msvcr100

?set_terminate@@YAP6AXXZP6AXXZ@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
modf
_atof_l
strtok
strstr
_scwprintf_l
_snprintf_s_l
_fpclass
_vsnwprintf_s_l
_wcslwr_l
_wcstol_l
_wgetenv
_strtime
_strdate
_iswcntrl_l
_iswprint_l
_splitpath_s
_swscanf_l
wcscspn
_ltow_s
malloc
_iswalpha_l
_wprintf_l
__iob_func
fputws
wcstol
_ui64tow_s
getenv
wmemcpy_s
_itow
_ltoa
_itoa
__pctype_func
_isctype_l
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_ultow_s
_snwprintf_s_l
_iswdigit_l
?set_unexpected@@YAP6AXXZP6AXXZ@Z
wcsrchr
_itow_s
_ultow
_snwscanf_l
_i64tow
_isnan
_wtol_l
ceil
??8type_info@@QBE_NABV0@@Z
_wmakepath_s
wcsncat_s
wcsnlen
_controlfp
_statusfp
_clearfp
_fpreset
qsort
_wcstoul_l
bsearch
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_wcsicmp
_wtoi
_errno
wcscat_s
_wsplitpath_s
_vscwprintf_l
wcsncmp
wcscpy_s
_CxxThrowException
_recalloc
memcmp
_iswspace_l
_wtoi_l
wcstok_s
wcsstr
_wcsupr_l
_ltow
_swprintf_s_l
_vsnwprintf
_time64
rand
_snprintf_l
_snwprintf_l
_sprintf_l
_printf_l
memcpy_s
memmove
wcsspn
wcsncpy_s
memmove_s
_vsnwprintf_l
_atoi_l
_stricmp_l
_vsnprintf_l
_wcsicmp_l
_ultoa_s
strcat_s
_strtoul_l
strncpy_s
calloc
_sprintf_s_l
strchr
_iswxdigit_l
_stricmp
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_CIexp
_CIlog
_CIlog10
_CIpow
_CIsqrt
floor
__CxxFrameHandler3
_wtoi64_l
_wfullpath
_wstrtime
_wstrdate
memcpy
_swscanf_s_l
strcpy_s
free
_wcsnicmp_l
_strnicmp_l
wcschr
wcspbrk
_towupper_l
_purecall

msvcp100

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?setf@ios_base@std@@QAEHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?exceptions@ios_base@std@@QAEXH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z

kernel32

lstrlenA
lstrlenW
HeapReAlloc
GetProcessAffinityMask
GetSystemDefaultLCID
SetFilePointerEx
GetPrivateProfileStringW
DebugBreak
SetProcessAffinityMask
GetProcessId
TransactNamedPipe
CreateNamedPipeW
GetSystemDefaultLangID
GetDiskFreeSpaceW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
WaitNamedPipeW
DecodePointer
EncodePointer
InterlockedExchange
OutputDebugStringW
SearchPathW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
TlsGetValue
QueryPerformanceCounter
GetLastError
GetProcAddress
FreeLibrary
CloseHandle
PostQueuedCompletionStatus
LoadLibraryA
GetSystemDirectoryA
GetVersionExW
MultiByteToWideChar
CompareStringA
FormatMessageW
GetCurrentThread
LocalFree
CreateEventW
CreateFileA
CreateNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
GetTickCount
WaitNamedPipeA
SetNamedPipeHandleState
PeekNamedPipe
ReadFile
GetOverlappedResult
WaitForSingleObject
WriteFile
Sleep
WideCharToMultiByte
ResetEvent
SetEvent
GetSystemTimeAsFileTime
CreateIoCompletionPort
VerSetConditionMask
VerifyVersionInfoW
GetComputerNameA
LCMapStringA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetLastError
GetComputerNameExW
GetComputerNameExA
GetModuleFileNameW
SetHandleInformation
GetSystemTime
WaitForMultipleObjects
CompareFileTime
GetModuleHandleW
GetSystemInfo
QueryPerformanceFrequency
GetCurrentThreadId
LoadLibraryExW
GetStringTypeW
FreeResource
FindResourceW
LoadResource
LoadLibraryW
SizeofResource
LockResource
GlobalMemoryStatusEx
VirtualQuery
VirtualProtect
GetModuleHandleExW
SwitchToThread
HeapAlloc
GetProcessHeap
HeapFree
CreateFileW
GetFileAttributesW
GetFileType
GetFileSize
lstrcmpW
GetEnvironmentVariableW
SetEnvironmentVariableW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
DuplicateHandle
GetModuleHandleA
FindFirstFileW
DeleteFileW
FindNextFileW
SetFilePointer
GetFileTime
MoveFileExW
GetSystemDirectoryW
ExpandEnvironmentStringsW
SetEndOfFile
DeviceIoControl
SetErrorMode
GetDriveTypeW
CreateDirectoryW
FindClose
CopyFileW
MoveFileW
LocalAlloc
IsDBCSLeadByteEx
GetPriorityClass
SetThreadPriority
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
CreateEventA
InitializeCriticalSection
GetThreadTimes
GetProcessTimes
LocalFileTimeToFileTime
GetFileSizeEx
GetLocalTime
SystemTimeToFileTime
GetVolumePathNameW
GetDiskFreeSpaceExW
GetSystemDefaultUILanguage
GetTempPathW
GetTempFileNameW
GetComputerNameW
FileTimeToLocalFileTime
OpenProcess
CreatePipe
CreateProcessW
GetExitCodeProcess
GetLongPathNameW
GetFileAttributesExW
OpenEventW
ResumeThread
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueEx
GlobalSize
QueueUserWorkItem
GetCurrentProcessId
lstrcmpiW
IsDebuggerPresent
GetThreadPriority
CreateToolhelp32Snapshot
Module32NextW
Module32FirstW
GetLocaleInfoW
WriteConsoleW
GetStdHandle
GetConsoleMode
GetModuleFileNameA
GetDateFormatW
GetTimeFormatW
GetVersionExA
RaiseException
GetStartupInfoW
GetThreadContext
GetCPInfo
DeleteCriticalSection
ReleaseMutex
CreateMutexW
InterlockedCompareExchange
ReadProcessMemory
GetVolumeNameForVolumeMountPointW
QueryDosDeviceW
CompareStringW
GetConsoleScreenBufferInfo
GetCurrentProcessorNumber
TlsSetValue
GetFullPathNameW
IsProcessorFeaturePresent

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW

secur32

GetUserNameExW
InitSecurityInterfaceW
QueryContextAttributesW
FreeContextBuffer
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaFreeReturnBuffer
LsaLogonUser
LsaLookupAuthenticationPackage

userenv

CreateEnvironmentBlock
LoadUserProfileW
DestroyEnvironmentBlock

advapi32

AllocateLocallyUniqueId
QueryServiceStatus
ControlService
GetTokenInformation
GetLengthSid
LogonUserW
FreeSid
AllocateAndInitializeSid
InitializeAcl
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueW
RegOpenKeyW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueExA
RegSetValueExA
RegSetValueExW
GetSecurityDescriptorLength
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenThreadToken
OpenProcessToken
EqualSid
GetSecurityInfo
ImpersonateNamedPipeClient
RevertToSelf
GetSidLengthRequired
GetAclInformation
AddAce
GetAce
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
TraceEvent
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsW
DeregisterEventSource
RegisterEventSourceW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
SetSecurityInfo
CreateWellKnownSid
LsaAddAccountRights
CreateProcessAsUserW
LogonUserExW
QueryServiceStatusEx
AdjustTokenPrivileges
ConvertStringSidToSidW
DuplicateTokenEx
InitializeSid
LookupPrivilegeValueW
LsaClose
LsaNtStatusToWinError
LsaOpenPolicy
ReportEventW
ImpersonateLoggedOnUser
ImpersonateSelf
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
ConvertSecurityDescriptorToStringSecurityDescriptorW
AddAccessAllowedAceEx
LookupAccountNameW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
AddAccessDeniedAce
DuplicateToken
SetThreadToken
CryptGetUserKey
CryptDuplicateHash
CryptGetHashParam
CryptVerifySignatureW
CryptSignHashW
CryptHashData
CryptSetHashParam
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptSetKeyParam
CryptDeriveKey
CryptGenKey
CryptGetKeyParam
CryptExportKey
CryptImportKey
CryptSetProvParam
SetEntriesInAclW
GetSecurityDescriptorDacl
CryptGetProvParam
CryptAcquireContextW
CryptGenRandom
CryptDestroyHash
LookupAccountSidW
CryptReleaseContext
CryptDestroyKey
GetUserNameW
ConvertSidToStringSidW
CopySid
IsValidSid

netapi32

DsGetDcNameW
NetApiBufferFree
NetLocalGroupGetMembers
NetGroupGetUsers
NetWkstaGetInfo
NetUserModalsGet

sqldk

ord926
ord927
ord916
ord915
ord914
ord913
ord923
ord924
ord922
ord1020
ord1022
ord917
ord1021
ord1001
ord1016
ord936
ord1004
ord1003
ord938
ord934
ord1005
ord937
ord974
ord1006
ord997
ord996
ord964
ord930
ord994
ord374
ord954
ord953
ord988
ord982
ord965
ord961
ord973
ord951
ord935
ord970
ord963
ord1013
ord983
ord928
ord758
ord1009
ord975
ord978
ord979
ord959
ord931
ord992
ord966
ord608
ord607
ord751
ord750
ord732
ord1010
ord1011
ord1012
ord737
ord710
ord727
ord716
ord730
ord721
ord746
ord740
ord718
ord734
ord739
ord728
ord717
ord748
ord714
ord715
ord753
ord986
ord990
ord1002
ord976
ord493
ord640
ord147
ord103
ord50
ord51
ord507
ord52
ord706
ord822
ord230
ord829
ord830
ord241
ord889
ord100
ord45
ord627
ord628
ord191
ord620
ord800
ord465
ord277
ord623
ord813
ord833
ord219
ord802
ord79
ord436
ord427
ord418
ord624
ord492
ord491
ord782
ord234
ord895
ord426
ord318
ord901
ord265
ord781
ord156
ord278
ord429
ord78
ord268
ord424
ord445
ord435
ord447
ord446
ord577
ord376
ord511
ord379
ord510
ord378
ord463
ord480
ord518
ord57
ord56
ord96
ord41
ord344
ord399
ord67
ord407
ord403
ord893
ord894
ord275
ord77
ord459
ord131
ord76
ord501
ord411
ord788
ord293
ord805
ord134
ord274
ord865
ord112
ord74
ord705
ord291
ord809
ord264
ord284
ord256
ord300
ord584
ord882
ord801
ord615
ord141
ord240
ord248
ord280
ord258
ord138
ord137
ord282
ord461
ord62
ord161
ord113
ord75
ord772
ord266
ord163
ord785
ord210
ord133
ord70
ord471
ord457
ord331
ord573
ord670
ord864
ord167
ord333
ord238
ord276
ord213
ord832
ord776
ord777
ord382
ord328
ord892
ord531
ord102
ord47
ord290
ord704
ord757
ord394
ord553
ord551
ord803
ord512
ord752
ord823
ord519
ord888
ord816
ord756
ord815
ord617
ord814
ord116
ord80
ord218
ord631
ord190
ord622
ord251
ord410
ord425
ord431
ord301
ord53
ord355
ord316
ord193
ord648
ord158
ord302
ord904
ord676
ord682
ord128
ord556
ord541
ord127
ord125
ord135
ord243
ord405
ord400
ord396
ord397
ord433
ord215
ord357
ord863
ord65
ord365
ord762
ord299
ord698
ord252
ord853
ord858
ord876
ord598
ord242
ord114
ord866
ord878
ord690
ord46
ord101
ord535
ord884
ord249
ord387
ord687
ord681
ord267
ord292
ord151
ord259
ord808
ord581
ord296
ord244
ord298
ord289
ord890
ord783
ord881
ord658
ord136
ord129
ord85
ord880
ord879
ord189
ord372
ord774
ord754
ord920
ord311
ord664
ord877
ord644
ord599
ord146
ord346
ord675
ord911
ord295
ord178
ord793
ord247
ord444
ord838
ord239
ord362
ord306
ord443
ord666
ord366
ord48
ord755
ord257
ord246
ord283
ord250
ord696
ord594
ord22
ord887
ord524
ord697
ord621
ord152
ord654
ord767
ord886
ord388
ord555
ord885
ord273
ord297
ord574
ord245
ord657
ord192
ord647
ord415
ord157
ord395
ord831
ord559
ord852
ord458
ord254
ord408
ord656
ord212
ord629
ord840
ord626
ord159
ord614
ord841
ord824
ord348
ord373
ord21
ord305
ord110
ord63
ord919
ord358
ord473
ord188
ord363
ord636
ord625
ord232
ord585
ord1018
ord7
ord905
ord896
ord468
ord578
ord579
ord385
ord907
ord775
ord441
ord386
ord912
ord490
ord653
ord908
ord217
ord520
ord768
ord61
ord109
ord350
ord548
ord160
ord49
ord1019
ord925
ord470
ord375
ord115
ord304
ord910

sqltses

ord338
ord593
ord594
ord646
ord422
ord167
ord503
ord175
ord331
ord339
ord592
ord340
ord151
ord484
ord482
ord483
ord218
ord192
ord438
ord583
ord586
ord534
ord535
ord600
ord464
ord548
ord100
ord554
ord620
ord95
ord94
ord565
ord254
ord536
ord456
ord366
ord281
ord196
ord355
ord152
ord308
ord437
ord435
ord436
ord500
ord499
ord501
ord498
ord160
ord266
ord544
ord523
ord358
ord357
ord249
ord117
ord307
ord425
ord283
ord118
ord284
ord329
ord271
ord264
ord636
ord502
ord645
ord513
ord279
ord336
ord335
ord261
ord677
ord634
ord230
ord667
ord184
ord658
ord655
ord662
ord660
ord121
ord123
ord294
ord353
ord470
ord112
ord91
ord111
ord90
ord182
ord392
ord393
ord394
ord398
ord397
ord396
ord317
ord316
ord570
ord568
ord60
ord315
ord58
ord170
ord59
ord527
ord661
ord632
ord69
ord515
ord68
ord75
ord528
ord145
ord478
ord524
ord512
ord333
ord614
ord476
ord285
ord641
ord71
ord161
ord659
ord138
ord269
ord386
ord215
ord213
ord210
ord208
ord187
ord212
ord199
ord380
ord223
ord150
ord53
ord48
ord43
ord38
ord407
ord65
ord66
ord477
ord475
ord273
ord578
ord579
ord580
ord581
ord589
ord587
ord588
ord585
ord590
ord582
ord330
ord323
ord669
ord428
ord572
ord521
ord466
ord127
ord561
ord555
ord622
ord162
ord191
ord259
ord542
ord543
ord390
ord36
ord341
ord225
ord630
ord638
ord631
ord244
ord227
ord207
ord663
ord349
ord441
ord54
ord49
ord44
ord39
ord408
ord83
ord84
ord86
ord545
ord114
ord547
ord416
ord418
ord575
ord474
ord559
ord626
ord166
ord557
ord624
ord164
ord201
ord468
ord556
ord623
ord163
ord666
ord427
ord430
ord195
ord639
ord270
ord372
ord122
ord74
ord451
ord450
ord345
ord233
ord34
ord650
ord139
ord674
ord552
ord551
ord643
ord141
ord134
ord656
ord672
ord538
ord383
ord301
ord314
ord371
ord676
ord133
ord671
ord348
ord596
ord143
ord147
ord146
ord148
ord144
ord509
ord541
ord274
ord321
ord319
ord651
ord302
ord362
ord102
ord529
ord72
ord414
ord73
ord105
ord505
ord379
ord381
ord70
ord106
ord566
ord389
ord571
ord104
ord120
ord564
ord644
ord563
ord567
ord678
ord268
ord194
ord193
ord673
ord429
ord186
ord185
ord135
ord530
ord657
ord569
ord256
ord257
ord359
ord606
ord378
ord232
ord202
ord109
ord85
ord129
ord169
ord540
ord410
ord87
ord149
ord653
ord110
ord533
ord532
ord115
ord80
ord253
ord312
ord347
ord313
ord518
ord303
ord132
ord251
ord517
ord250
ord446
ord402
ord400
ord387
ord79
ord89
ord395
ord88
ord391
ord78
ord246
ord81
ord467
ord108
ord82
ord156
ord142
ord369
ord178
ord299
ord252
ord56
ord51
ord46
ord41
ord411
ord497
ord137
ord197
ord229
ord228
ord239
ord238
ord237
ord236
ord222
ord220
ord219
ord224
ord531
ord496
ord221
ord136
ord455
ord457
ord611
ord613
ord595
ord119
ord604
ord384
ord332
ord403
ord368
ord374
ord665
ord306
ord231
ord131
ord277
ord324
ord463
ord612
ord286
ord522
ord558
ord625
ord165
ord471
ord382
ord485
ord35
ord320
ord519
ord610
ord200
ord174
ord360
ord318
ord420
ord168
ord480
ord157
ord265
ord267
ord101
ord235
ord240
ord598
ord431
ord442
ord439
ord621
ord560
ord126
ord549
ord243
ord440
ord546
ord278
ord618
ord245
ord461
ord247
ord453
ord573
ord159
ord217
ord190
ord537
ord37
ord96
ord404
ord481
ord675
ord305
ord304
ord413
ord405
ord494
ord493
ord399
ord409
ord55
ord50
ord45
ord40
ord385
ord460
ord158
ord642
ord103
ord465
ord605
ord370
ord113
ord97
ord282
ord679
ord140
ord495
ord262
ord507
ord297
ord458
ord520
ord346
ord296
ord388
ord664
ord681
ord504
ord242
ord334
ord574
ord421
ord255
ord298
ord234
ord652
ord506

authz

AuthzFreeResourceManager
AuthzInitializeResourceManager
AuthzInitializeContextFromSid
AuthzInitializeContextFromToken
AuthzGetInformationFromContext
AuthzFreeContext

wintrust

CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext

Sections

.text
Size: 22.8MB - Virtual size: 22.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 682KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AssertDa
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CONSTSEC
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdbid
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/sqllangsvc.dll
.dll windows:6 windows x86 arch:x86

8581aee75ffbe7fb63801df171450a33

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:ba:4d:c7:82:63:cf:21:bd:25:aa:d2:5f:d2:19:69:a1:e3:ca:e7:80:25:b2:e1:ab:67:c0:0f:2c:d3:8e:11
Signer

Actual PE Digest

fd:ba:4d:c7:82:63:cf:21:bd:25:aa:d2:5f:d2:19:69:a1:e3:ca:e7:80:25:b2:e1:ab:67:c0:0f:2c:d3:8e:11

Digest Algorithm

sha256

PE Digest Matches

true

7c:9e:f2:7e:32:98:f7:fc:49:11:75:c7:a1:05:d1:c6:7c:1c:68:b9
Signer

Actual PE Digest

7c:9e:f2:7e:32:98:f7:fc:49:11:75:c7:a1:05:d1:c6:7c:1c:68:b9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqllangsvc.pdb

Imports

msvcr100

_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_purecall
__CxxFrameHandler3
memset

kernel32

TlsGetValue
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

sqldk

ord896
ord976
ord1002
ord990
ord986
ord1011
ord471
ord48
ord22
ord1018
ord188
ord49
ord331
ord905
ord473
ord358
ord363
ord7
ord457

sqltses

ord101
ord78
ord508
ord35

sqllang

ord6
ord13
ord7
ord8
ord5
ord12
ord9
ord10
ord11

Exports

Exports

CompareStrings
CreateProject
GetStringHashCode
InitializeSqlLangSvc
ReleaseProject
SignalMetadata
SqlCompileText

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AssertDa
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/sqlos.dll
.dll windows:6 windows x86 arch:x86

0bc8dfc0b9221d71b827dbb163cd86f9

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:19:96:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:b2:8c:72:aa:74:3f:cc:4d:52:56:1a:fb:aa:c1:51:a7:d3:46:f3:77:a0:e7:da:7c:ce:0b:e5:12:ac:d8:8d
Signer

Actual PE Digest

d3:b2:8c:72:aa:74:3f:cc:4d:52:56:1a:fb:aa:c1:51:a7:d3:46:f3:77:a0:e7:da:7c:ce:0b:e5:12:ac:d8:8d

Digest Algorithm

sha256

PE Digest Matches

true

7c:5e:a5:37:3e:27:af:72:8a:58:3f:52:7b:29:c9:c3:e9:86:cf:25
Signer

Actual PE Digest

7c:5e:a5:37:3e:27:af:72:8a:58:3f:52:7b:29:c9:c3:e9:86:cf:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SQLOS.pdb

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
memset

kernel32

EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
TlsAlloc
TlsFree

Exports

Exports

CreateVersionedSOSHostObject
GetTlsSlotInfo
IsHardwareSupported
SetCreateSOSHostObjectCallback
SetDllMainCallback

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/sqltses.dll
.dll windows:6 windows x86 arch:x86

22c59a5d4dc0a08dd9bb21e7123d5ba9

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e9:fa:e6:dd:93:7a:a1:ec:d3:5f:7d:0a:9c:65:a3:9d:93:d5:30:2c:fd:bf:1a:bb:cc:ff:0e:f5:38:af:8c:6b
Signer

Actual PE Digest

e9:fa:e6:dd:93:7a:a1:ec:d3:5f:7d:0a:9c:65:a3:9d:93:d5:30:2c:fd:bf:1a:bb:cc:ff:0e:f5:38:af:8c:6b

Digest Algorithm

sha256

PE Digest Matches

true

c6:84:bb:a4:57:57:f8:44:d1:1c:c4:45:99:41:27:58:69:0b:d3:d7
Signer

Actual PE Digest

c6:84:bb:a4:57:57:f8:44:d1:1c:c4:45:99:41:27:58:69:0b:d3:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqltses.pdb

Imports

msvcr100

__pctype_func
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_isctype_l
_initterm_e
_amsg_exit
_sprintf_s_l
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
strchr
strspn
strncpy_s
pow
_set_SSE2_enable
atan2
sqrt
qsort
log10
log
exp
sin
cos
atan
asin
acos
ceil
tan
memmove_s
free
malloc
_vsnwprintf_s_l
_snwprintf_s_l
_initterm
memset
memcpy
floor
__CxxFrameHandler3
_CIpow
_CIlog10
_CIfmod
wmemcpy_s
_wcstod_l
fmod
_snprintf_s_l
_iswspace_l
qsort_s
modf
_fpclass
memcpy_s
_statusfp
_clearfp
_fpreset
_controlfp
wcsncmp
_iswalpha_l
_wcstol_l
_iswdigit_l
memmove
_vsnwprintf_l
_wcstoul_l
bsearch
__CppXcptFilter
_purecall

msvcp100

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

sqldk

ord53
ord976
ord1002
ord990
ord986
ord626
ord1011
ord983
ord355
ord22
ord840
ord629
ord696
ord136
ord129
ord363
ord473
ord358
ord188
ord85
ord305
ord362
ord306
ord110
ord63
ord46
ord101
ord25
ord21
ord24
ord373
ord48
ord316
ord476
ord474
ord245
ord621
ord697
ord386
ord49
ord925
ord1019
ord1018
ord7
ord905
ord896

kernel32

IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
TlsGetValue
IsDBCSLeadByteEx
FileTimeToSystemTime
GetTimeZoneInformation
GetSystemTimeAsFileTime
WideCharToMultiByte
GetTickCount
GetLastError
MultiByteToWideChar
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter

rpcrt4

UuidCreateSequential

ole32

CLSIDFromString
StringFromGUID2
CoCreateGuid

oleaut32

SysStringLen

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AssertDa
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/Shared/xe.dll
.dll windows:6 windows x86 arch:x86

e6501edb409e29f49e6545f67c74dd4f

Code Sign

61:1a:f5:ea:00:00:00:00:00:6a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2011, 22:39

Not After

01/02/2013, 22:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:13:36:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2011, 20:42

Not After

25/10/2012, 20:42

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:49:55:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:45

Not After

10/01/2013, 20:55

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:38:ea:66:d6:52:48:7c:f2:20:d1:07:87:93:89:7d:25:c9:f6:72:04:11:0f:26:f3:d9:f3:93:56:f4:9a:db
Signer

Actual PE Digest

77:38:ea:66:d6:52:48:7c:f2:20:d1:07:87:93:89:7d:25:c9:f6:72:04:11:0f:26:f3:d9:f3:93:56:f4:9a:db

Digest Algorithm

sha256

PE Digest Matches

true

ab:d3:5a:68:e5:7a:c1:44:ad:56:ae:f2:c1:1e:73:7c:18:6a:19:2a
Signer

Actual PE Digest

ab:d3:5a:68:e5:7a:c1:44:ad:56:ae:f2:c1:1e:73:7c:18:6a:19:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

xe.pdb

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
wcschr
_iswprint_l
__pctype_func
_wfullpath
_wtoi64_l
_vsnprintf_l
memmove
_wcsicmp_l
_purecall
strncmp
wcsncmp
_strnicmp_l
_wcsnicmp_l
abort
_vsnwprintf_l
_vsnwprintf
memset
memcpy
__CxxFrameHandler3
_vsnprintf

kernel32

CreateEventW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetTickCount
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
HeapCompact
HeapSize
HeapReAlloc
CreateIoCompletionPort
HeapCreate
HeapDestroy
OpenFileMappingW
CreateFileMappingW
ReleaseSemaphore
CreateSemaphoreW
VirtualQuery
GetCurrentProcess
GetProcessAffinityMask
GetCurrentProcessId
GetCurrentThreadId
DebugBreak
Sleep
LoadLibraryExW
GetProcAddress
FreeLibrary
GetModuleFileNameW
GetTempPathW
SetLastError
GetLastError
DeleteFileW
WriteFile
GetOverlappedResult
FindFirstFileW
CreateFileW
FindNextFileW
GetVolumePathNameW
GetDiskFreeSpaceExW
FindClose
CloseHandle
QueryPerformanceCounter
RtlCaptureStackBackTrace
GetSystemTimeAsFileTime
GetModuleHandleW
FormatMessageW
FileTimeToSystemTime
CreateToolhelp32Snapshot
Module32NextW
LocalFree
SetEndOfFile
SystemTimeToFileTime
SetFilePointerEx
GetDiskFreeSpaceW
GetSystemInfo
GetSystemTime
WaitForSingleObject
SetEvent
TlsSetValue
CreateThread
IsProcessorFeaturePresent
HeapFree
CreateMutexW
DeleteCriticalSection
ReleaseMutex
OpenThread
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
VirtualAlloc
VirtualFree
GetUserDefaultLCID
TlsAlloc
TlsFree
HeapAlloc
GetProcessHeap
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
ResetEvent
MapViewOfFileEx
UnmapViewOfFile
LoadLibraryW
GetQueuedCompletionStatus
GetExitCodeThread

advapi32

EnableTrace
ControlTraceW
StartTraceW
UnregisterTraceGuids
RegisterTraceGuidsW
TraceEvent
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
QueryAllTracesW

rpcrt4

UuidCreate

shlwapi

PathRemoveFileSpecW
PathRemoveBackslashW
PathCanonicalizeW
PathFindExtensionW
PathAddExtensionW
PathFindFileNameW
PathCombineW
PathRemoveExtensionW

user32

MessageBoxW

Exports

Exports

SetAssertHandler
XEGetEngine

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AssertDa
Size: 512B - Virtual size: 465B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZrSoft_/ZrSoft_.exe
.exe windows:6 windows x86 arch:x86

4f2f006e2ecf7172ad368f8289dc96c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11.6MB - Virtual size: 11.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.2MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZrSoft_/geo.dat

Sharing

General

Malware Config

Signatures

Files

Password: EasyCrack4302

Password: EasyCrack4302

6499b940213d268aa405068355eafe37

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 6KB

Password: EasyCrack4302

6499b940213d268aa405068355eafe37

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 6KB

Password: EasyCrack4302

b2cc1a5951aba90f1a8e416e2e23f199

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp_win

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

oleaut32

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-file-l1-1-0

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6
Signer

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 6KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

61:23:bf:49:03:40:17:f0:1d:e7:36:77:b6:0b:e6:13:40:93:6c:4a:2a:1f:ed:2b:81:18:52:17:77:e1:c2:a6
Signer

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 905KB - Virtual size: 905KB

.data
Size: 21KB - Virtual size: 29KB

.pdata
Size: 106KB - Virtual size: 105KB

.didat
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 94KB - Virtual size: 93KB

.reloc
Size: 59KB - Virtual size: 59KB