picasa39-setup[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

picasa39-setup.exe
Size

13.0MB
MD5

3df3d3c125d3bb1a5bd55e88f9e48920
SHA1

72f3e2f18e83d60ec657f03c341a3c1df701c2a9
SHA256

cc36161b6d8ea29528bed7d5883ad260cfc8d8e32825938c52e93c1a495c355b
SHA512

a171cb62b35f63749f25196f5f94805f44b1795ba9d0c4e9a26f2511afff82f500f76b913b96f83e777e0a4089a4dcd5d804b1fcd5a655dc094b741198b25bcb
SSDEEP

393216:1pOtxS2JzVMrK5r8KmON15WytJQmA79/uFJOV:1pgxSezmdq1ztJQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/$PLUGINSDIR/NSIS_Picasa_Unicode.dll
unpack001/$PLUGINSDIR/StdUtils.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$SYSDIR/GPhotos.scr
unpack001/plugins/CDVDR/CDVDR.yti
unpack001/plugins/Red.dll
unpack001/plugins/expwebsites/expwebsites.yti
unpack001/plugins/ytITivo.yti
unpack004/$PLUGINSDIR/NSIS_Picasa_Unicode.dll
unpack004/$PLUGINSDIR/System.dll
unpack004/$PLUGINSDIR/nsDialogs.dll

Files

picasa39-setup.exe
.exe windows:4 windows x86 arch:x86

e221f4f7d36469d53810a4b5f9fc8966

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9c:41:97:08:81:38:61:27:8a:72:40:d1:66:3a:0b:4a:3d:76:b1:a0
Signer

Actual PE Digest

9c:41:97:08:81:38:61:27:8a:72:40:d1:66:3a:0b:4a:3d:76:b1:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathW
SetFileTime
CloseHandle
GetShortPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
GetFullPathNameW
CreateDirectoryW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
SetFileAttributesW
ExpandEnvironmentStringsW
SetErrorMode
LoadLibraryW
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
lstrcpyA
lstrcpyW
lstrcatW
GetSystemDirectoryW
GetVersion
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
lstrcmpiW
lstrcmpW
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryExW
GetExitCodeProcess
FreeLibrary
WritePrivateProfileStringW
GetCommandLineW
GetTempPathW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
WriteFile
lstrlenA
WideCharToMultiByte

user32

EndDialog
ScreenToClient
GetWindowRect
RegisterClassW
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
wsprintfW
CreateWindowExW
SystemParametersInfoW
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
GetDC
SetWindowLongW
LoadImageW
SendMessageTimeoutW
FindWindowExW
EmptyClipboard
OpenClipboard
TrackPopupMenu
EndPaint
ShowWindow
GetDlgItem
IsWindow
SetForegroundWindow

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW

advapi32

RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/NSIS_Picasa_Unicode.dll
.dll windows:4 windows x86 arch:x86

dd4d4b4320a71ab0c16c5077ded3ee8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\twbrown-picasa-1\googleclient\picasa4\NSIS_Unicode_v3\Plugins\x86-unicode\NSIS_Picasa_Unicode.pdb

Imports

sti

StiCreateInstanceW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

lstrcpynW
MultiByteToWideChar
GlobalFree
GetLastError
GetProcAddress
FindFirstFileW
FindClose
LoadLibraryW
RemoveDirectoryW
GetLocaleInfoW
CreateProcessW
MoveFileExW
Sleep
lstrcatW
FindNextFileW
GetVersionExW
CreateDirectoryW
GetFileAttributesW
GetUserDefaultLCID
WaitForSingleObject
CreateFileW
CloseHandle
GetVersion
DeleteFileW
GetCommandLineW
GetModuleHandleW
lstrcpyW
GetPrivateProfileStringW
OpenProcess
GetExitCodeProcess
TerminateProcess
OpenMutexA
GetModuleHandleA
GetCurrentProcessId
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetConsoleMode
WideCharToMultiByte
GlobalAlloc
HeapSize
CreateFileA
InitializeCriticalSection
WritePrivateProfileStringW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
GetConsoleCP
FreeEnvironmentStringsW
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
ExitProcess
WriteFile
GetModuleFileNameA
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
SetStdHandle

user32

MapWindowPoints
GetClassNameA
EnumWindows
GetWindowLongW
FindWindowA
MoveWindow
FindWindowExW
GetWindowRect
CreateWindowExW
MessageBoxW
SendMessageW
wsprintfW
GetDlgItem
SetWindowLongW
GetClientRect
CallWindowProcW
DestroyWindow

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW
SHFileOperationW

ole32

CoCreateInstance

Exports

Exports

TokenizeVersionString
addlink
appopencheck
closelink
distrocheck
fixshortcuts
getlicenselangco
installdircheck
movenextbutton
ntusercheck
resizeokbutton
setie7registry
stiregister
stiseticon
uninstall
upgradedirectory
upgradewindow
versioncheck

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StdUtils.dll
.dll windows:5 windows x86 arch:x86

afc0276b5cd87f66996699e6e2d2c643

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_snprintf
swscanf
_snwprintf
rand
memset
srand
time
??2@YAPAXI@Z
wcsncpy
??3@YAXPAX@Z
wcschr
_beginthreadex
_wcsicmp

shlwapi

ord176

kernel32

GetSystemTime
lstrcpynW
GlobalFree
MultiByteToWideChar
GetExitCodeProcess
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
InitializeCriticalSection
DeleteCriticalSection
GetCommandLineW
WaitForSingleObject
GetLastError
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
CloseHandle
Sleep
CreateEventW
GetTickCount
FreeLibrary
LoadLibraryW
GetModuleHandleW
TerminateThread
GlobalAlloc

user32

MessageBoxA
LoadStringW
MessageBoxW
wsprintfW
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW

shell32

ShellExecuteExW
SHFileOperationW
ShellExecuteW

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

Exports

Exports

DisableVerboseMode
Dummy
EnableVerboseMode
ExecShellAsUser
ExecShellWaitEx
FormatStr
FormatStr2
FormatStr3
GetAllParameters
GetDays
GetHours
GetLibVersion
GetMinutes
GetParameter
GetRealOsBuildNo
GetRealOsName
GetRealOsVersion
InvokeShellVerb
Rand
RandList
RandMax
RandMinMax
RevStr
SHFileCopy
SHFileMove
ScanStr
ScanStr2
ScanStr3
Time
TrimStr
TrimStrLeft
TrimStrRight
VerifyRealOsBuildNo
VerifyRealOsVersion
WaitForProcEx

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 851B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

ec5fddc407d2b4e0a16fc4d786afc555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc

user32

DestroyWindow
CallWindowProcW
SetCursor
GetPropW
CharPrevW
MapWindowPoints
DrawFocusRect
GetWindowLongW
GetClientRect
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
LoadCursorW
RemovePropW
DrawTextW

gdi32

SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/GPhotos.scr
.exe windows:4 windows x86 arch:x86

dc8d59e7eb85f973800905283db42bb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\GPhotos.pdb

Imports

comctl32

ImageList_Destroy
ImageList_Create
ImageList_Add
InitCommonControlsEx
PropertySheetW
CreatePropertySheetPageW
PropertySheetA
CreatePropertySheetPageA

psapi

GetModuleFileNameExA
GetModuleBaseNameA
EnumProcesses
EnumProcessModules

rasapi32

RasEnumEntriesA

wininet

HttpOpenRequestA
HttpEndRequestA
InternetOpenA
InternetGetConnectedState
InternetQueryOptionA
InternetCloseHandle
InternetSetOptionA
InternetSetStatusCallback
InternetCrackUrlA
HttpSendRequestExA
HttpSendRequestA
HttpAddRequestHeadersA
InternetGetConnectedStateEx
InternetErrorDlg
InternetWriteFile
InternetReadFile
InternetConnectA
InternetGetCookieExA
HttpQueryInfoA

kernel32

GetACP
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEvent
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
InterlockedCompareExchange
CloseHandle
GetLastError
GetCurrentProcess
CreateEventA
ExpandEnvironmentStringsA
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
LoadResource
SizeofResource
GetModuleFileNameA
FindResourceA
OpenProcess
GetProcAddress
lstrcmpiA
ReadProcessMemory
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryExA
lstrlenW
FreeLibrary
CreateThread
RaiseException
IsDBCSLeadByte
GetCommandLineA
Sleep
GetModuleHandleA
lstrlenA
GetCurrentProcessId
TerminateProcess
ExitProcess
SetThreadAffinityMask
GetCurrentThread
CreateFileA
GetDevicePowerState
GetProcessTimes
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentDirectoryA
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
LCMapStringA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
HeapSize
IsValidCodePage
GetOEMCP
GetCPInfo
SetHandleCount
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
HeapCreate
HeapDestroy
GetFileType
GetStartupInfoA
GetVersionExA
UnhandledExceptionFilter
GetSystemPowerStatus
GetTickCount
LoadLibraryA
SetStdHandle
ExitThread
RtlUnwind
HeapReAlloc
VirtualProtect
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
GetThreadLocale
GetDiskFreeSpaceExA
GetSystemTimeAsFileTime
Module32Next
Module32First
CreateToolhelp32Snapshot
GetSystemDefaultLCID
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemInfo
FindClose
ReadFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FlushFileBuffers
SetEndOfFile
SetFilePointer
VirtualAlloc
VirtualFree
LockResource
GetDriveTypeA
GetTempPathA
GetTempPathW
QueryPerformanceFrequency
CompareFileTime
GetLocaleInfoA
SystemTimeToFileTime
GlobalLock
GlobalAlloc
GlobalUnlock
lstrcmpA
SetLastError
MulDiv
FlushInstructionCache
DisableThreadLibraryCalls
GlobalFree
GetStringTypeA
LocalFree
WriteFile
GetTimeZoneInformation
FormatMessageA
OutputDebugStringA
QueryPerformanceCounter
GetFileSize
LCMapStringW
GetUserDefaultLCID
DebugBreak
FindFirstFileExA
SetFileAttributesA
GetTimeFormatA
FindNextFileW
GetFileAttributesExA
FindNextFileA
RemoveDirectoryA
GetShortPathNameW
GetShortPathNameA
CopyFileW
CreateFileW
MoveFileW
SetFileAttributesW
MoveFileExW
GetFileAttributesExW
CopyFileA
CreateProcessA
CreateDirectoryA
GetDateFormatW
MoveFileA
GetTimeFormatW
CreateDirectoryExA
RemoveDirectoryW
MoveFileExA
CopyFileExW
MoveFileWithProgressW
CreateProcessW
GetVersion
CopyFileExA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
MoveFileWithProgressA
CompareStringW
CompareStringA
GetFileAttributesW
GetModuleFileNameW
GetFileAttributesA
DeleteFileW
GetModuleHandleW
DeleteFileA
FindFirstFileW
LoadLibraryW
FindFirstFileA
CreateDirectoryW
LoadLibraryExW
CreateDirectoryExW
FindFirstFileExW
GetDateFormatA
TerminateThread
SetThreadPriority
GetThreadPriority
WaitForMultipleObjects
InterlockedExchange
GetLongPathNameW
GetLongPathNameA
GetSystemDirectoryA
SearchPathA
SetCurrentDirectoryA
SetErrorMode
VirtualQuery
TzSpecificLocalTimeToSystemTime

user32

DrawTextW
GetScrollBarInfo
IsWindowEnabled
CreateDialogIndirectParamA
CharNextA
PostThreadMessageA
GetMessageA
DispatchMessageA
SetParent
EnumChildWindows
ShowWindow
GetKeyState
MoveWindow
PostMessageA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SendMessageA
DestroyWindow
GetFocus
SetWindowPos
RegisterClassExA
FillRect
SetPropA
RemovePropA
BeginPaint
EndPaint
GetClassNameA
InvalidateRect
GetSysColor
CreateAcceleratorTableA
InvalidateRgn
ClientToScreen
ReleaseCapture
ScreenToClient
GetWindow
SetWindowTextA
IsChild
GetWindowTextLengthA
RedrawWindow
GetClassInfoExA
SetCapture
LoadCursorA
DestroyAcceleratorTable
GetWindowRect
IsWindowVisible
DialogBoxIndirectParamA
GetPropA
GetWindowTextLengthW
GetWindowTextW
FlashWindowEx
SetActiveWindow
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
MessageBoxW
GetMenuItemInfoA
SetWindowLongW
GetWindowLongW
CallWindowProcW
RegisterClassW
UnregisterClassA
UnregisterClassW
GetClassInfoA
SetMenuItemInfoA
SetClassLongW
SetClassLongA
SetWindowTextW
InsertMenuItemA
DialogBoxParamW
SendMessageW
AppendMenuA
SetDlgItemTextW
DefWindowProcW
MessageBoxA
CreateDialogParamW
CreateWindowExW
CreateDialogParamA
SetMenuItemInfoW
DefWindowProcA
EnumThreadWindows
GetActiveWindow
MessageBeep
IsIconic
GetAsyncKeyState
GetCursor
ShowCursor
IsDialogMessageA
TranslateAcceleratorA
MsgWaitForMultipleObjects
DialogBoxIndirectParamW
GetTopWindow
UpdateWindow
AdjustWindowRectEx
GetMenu
FindWindowExA
GetClassLongA
KillTimer
SetTimer
GetDlgItem
EnableWindow
SetFocus
LoadBitmapA
GetMessagePos
MapWindowPoints
GetSystemMetrics
GetDC
ReleaseDC
FindWindowA
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
TranslateMessage
PeekMessageA
DialogBoxParamA
IsWindow
SetCursor
PostQuitMessage
GetCursorPos
SystemParametersInfoA
GetClientRect
SetDlgItemTextA
CallNextHookEx
SetWindowsHookExA
LoadIconA
UnhookWindowsHookEx
GetUserObjectInformationA
GetThreadDesktop
CheckDlgButton
IsDlgButtonChecked
GetForegroundWindow
AllowSetForegroundWindow
GetParent
GetDesktopWindow
EndDialog
EnumWindows
SetForegroundWindow
GetWindowTextA
GetWindowModuleFileNameA

gdi32

TextOutW
GetTextExtentPoint32A
ExtTextOutA
TextOutA
SelectObject
GetDeviceCaps
GetObjectA
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetTextMetricsA
ExtTextOutW
GetTextExtentPoint32W
CreateFontIndirectA
CreatePen
Rectangle
CreateDIBSection
GetICMProfileA
GetGlyphOutlineA
GetKerningPairsA
SetBkMode
GetGlyphOutlineW
GetStockObject
GetClipBox
DeleteObject

advapi32

RegUnLoadKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumValueA
CryptDecrypt
CryptReleaseContext
CryptEncrypt
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegLoadKeyA
RegSetValueExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA

ole32

OleUninitialize
OleInitialize
OleLockRunning
CLSIDFromString
CoGetClassObject
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoInitializeEx
CoCreateGuid
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize

oleaut32

SysFreeString
LoadRegTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
VarDateFromStr
VarBstrCat
OleCreateFontIndirect
VariantInit
SysAllocStringLen
SysStringByteLen
VariantClear
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
VarUI4FromStr
SysStringLen

mscms

GetColorDirectoryA

shlwapi

SHDeleteValueA
SHDeleteKeyA

urlmon

FindMimeFromData
CoInternetGetSession

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA

ws2_32

gethostbyname

comdlg32

GetSaveFileNameW
GetOpenFileNameA
GetSaveFileNameA
GetOpenFileNameW

shell32

Shell_NotifyIconA
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteExA
SHFileOperationW
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
DragQueryFileA
ShellExecuteA
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationA
SHGetFileInfoA
DragQueryFileW
SHGetSpecialFolderPathA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA

Exports

Exports

JSON_parser_char
JSON_parser_done
JSON_parser_is_legal_white_space_string
delete_JSON_parser
init_JSON_config
new_JSON_parser

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 424KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MovieThumb.exe
.exe windows:4 windows x86 arch:x86

63d4a243406419c0e8be281d51040425

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:d7:7a:34:96:02:b3:66:a4:9e:99:64:f8:ca:0b:f6:5b:29:9e:b2
Signer

Actual PE Digest

79:d7:7a:34:96:02:b3:66:a4:9e:99:64:f8:ca:0b:f6:5b:29:9e:b2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\MovieThumb.pdb

Imports

msvfw32

ICClose
ICSendMessage

avifil32

AVIFileOpenA
AVIFileInit
AVIStreamRelease
AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamLength
AVIStreamGetFrameOpen
AVIStreamInfoA
AVIFileGetStream
AVIFileRelease

winmm

mmioDescend
mmioRead
mmioAscend
mmioClose
mciGetErrorStringA
timeKillEvent
timeEndPeriod
timeBeginPeriod
timeGetTime
mciSendCommandA
mciSendStringA
mmioOpenA
timeSetEvent

kernel32

SetUnhandledExceptionFilter
CreateEventA
GetLastError
ResetEvent
WaitForMultipleObjects
WaitForSingleObject
WriteProcessMemory
LoadLibraryExA
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
InterlockedDecrement
Sleep
InterlockedIncrement
OpenEventA
LeaveCriticalSection
SetErrorMode
GetCommandLineW
InterlockedCompareExchange
ReadProcessMemory
CloseHandle
OpenProcess
SetEvent
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
LCMapStringA
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetModuleFileNameA
GetModuleHandleA
GetLongPathNameW
GetShortPathNameW
CreateFileW
GetLongPathNameA
InterlockedExchange
TerminateThread
GetCurrentThread
SetThreadPriority
GetThreadPriority
GetCurrentProcess
GetVersion
GetVersionExA
GetModuleFileNameW
QueryPerformanceCounter
QueryPerformanceFrequency
FindFirstFileExA
CreateProcessA
SetFileAttributesW
FindNextFileW
GetFileAttributesExW
FindNextFileA
GetDateFormatW
CreateDirectoryA
CopyFileW
GetTimeFormatW
MoveFileW
CreateDirectoryExA
RemoveDirectoryW
MoveFileExW
CopyFileA
MoveFileA
CreateProcessW
MoveFileExA
FindFirstChangeNotificationW
CopyFileExW
FindFirstChangeNotificationA
MoveFileWithProgressW
CopyFileExA
CompareStringW
CompareStringA
MoveFileWithProgressA
GetModuleHandleW
LoadLibraryW
GetFileAttributesW
GetFileAttributesA
GetDateFormatA
LoadLibraryExW
CreateDirectoryW
DeleteFileW
CreateDirectoryExW
GetTimeFormatA
DeleteFileA
SetFileAttributesA
FindFirstFileW
RemoveDirectoryA
GetFileAttributesExA
FindFirstFileA
GetShortPathNameA
FindFirstFileExW
CreateFileA
VirtualFree
VirtualAlloc
SetFilePointer
SetEndOfFile
FlushFileBuffers
ReadFile
WriteFile
GetSystemInfo
GetLocaleInfoA
MulDiv
GetACP
CreateThread
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapReAlloc
ExitThread
RtlUnwind
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
IsDebuggerPresent
RaiseException
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

MsgWaitForMultipleObjects
SetWindowLongW
CallWindowProcA
GetWindowLongW
CallWindowProcW
RegisterClassW
UnregisterClassA
GetMenuItemInfoA
UnregisterClassW
SetMenuItemInfoA
GetClassInfoA
SetClassLongW
SetClassLongA
SetWindowTextW
InsertMenuItemA
SetWindowTextA
DialogBoxParamW
AppendMenuA
SetDlgItemTextW
DialogBoxParamA
DefWindowProcW
CreateDialogParamW
SetDlgItemTextA
CreateDialogParamA
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
MessageBoxW
PostThreadMessageA
RegisterWindowMessageA
SendMessageW
PeekMessageA
GetQueueStatus
SendMessageA
RegisterClassA
CreateWindowExA
wsprintfW
ReleaseDC
GetDC
DefWindowProcA
DestroyWindow
SetWindowLongA
GetWindowTextA
GetWindowLongA
GetWindowTextW
CreateWindowExW
MessageBoxA

gdi32

CreateDIBSection
SetDIBits
DeleteDC
SelectObject
CreateCompatibleDC
DeleteObject
GetTextExtentPoint32A
TextOutW
ExtTextOutW
GetTextExtentPoint32W
TextOutA
ExtTextOutA

ole32

CoInitialize
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitializeEx
CreateItemMoniker
GetRunningObjectTable

oleaut32

SysAllocString
SysFreeString

comctl32

PropertySheetA
CreatePropertySheetPageW
PropertySheetW
CreatePropertySheetPageA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueExA
RegEnumValueA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegEnumKeyExA

shell32

SHGetFileInfoA
SHGetSpecialFolderPathA
ShellExecuteExA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetPathFromIDListW
DragQueryFileA
SHFileOperationW
Shell_NotifyIconA
SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
SHBrowseForFolderW
SHFileOperationA
ShellExecuteA
DragQueryFileW

Sections

.text
Size: 528KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Picasa3.exe
.exe windows:4 windows x86 arch:x86

6845be239155d10a6c49f0733c969c2f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:59:cc:ae:21:63:7f:a4:dc:3f:a5:d9:64:53:fc:d1:82:e6:1e:39
Signer

Actual PE Digest

49:59:cc:ae:21:63:7f:a4:dc:3f:a5:d9:64:53:fc:d1:82:e6:1e:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\Picasa3.pdb

Imports

kernel32

GetConsoleMode
lstrcpyA
GetConsoleOutputCP
WriteConsoleA
GetFullPathNameA
GetConsoleCP
SetStdHandle
ExitThread
VirtualProtect
FileTimeToLocalFileTime
IsProcessorFeaturePresent
WriteConsoleW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
GetThreadLocale
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
SetEvent
CreateEventA
SetProcessAffinityMask
InterlockedCompareExchange
OpenMutexA
WaitForSingleObject
CreateMutexA
ResetEvent
FindResourceA
LoadResource
LockResource
SizeofResource
SetThreadAffinityMask
GetVolumeInformationA
GetDriveTypeA
GetCommandLineW
TryEnterCriticalSection
GetLongPathNameA
CompareFileTime
FindCloseChangeNotification
GetLongPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLogicalDriveStringsA
PulseEvent
OpenEventA
OpenProcess
ReadProcessMemory
GlobalLock
WriteProcessMemory
GlobalUnlock
GlobalFree
WaitForMultipleObjects
OutputDebugStringA
GlobalSize
FindClose
GetWindowsDirectoryA
SystemTimeToFileTime
GetLogicalDrives
GetExitCodeProcess
GetOverlappedResult
FindNextChangeNotification
DeleteFileW
GetFileAttributesExW
GetSystemTime
GetShortPathNameW
GetShortPathNameA
GetProfileStringA
FormatMessageA
LocalFree
GlobalAlloc
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
LoadLibraryExA
FlushInstructionCache
IsDBCSLeadByte
lstrlenW
RaiseException
lstrlenA
lstrcmpA
DisableThreadLibraryCalls
MulDiv
lstrcmpiA
GetComputerNameA
GetFileSize
CreateFileA
FindFirstFileA
ReadFile
TerminateThread
SetThreadPriority
GetThreadPriority
VirtualQuery
GetSystemDirectoryA
SearchPathA
GetDiskFreeSpaceExA
GetVersion
SetErrorMode
GetModuleFileNameW
LocalFileTimeToFileTime
GetNumberFormatA
GetTempPathA
CreateThread
FlushFileBuffers
GetTempPathW
SetFileTime
CreateFileW
LockFileEx
UnlockFileEx
SetFilePointer
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetFileTime
QueryPerformanceFrequency
GetTimeFormatW
FindNextFileW
RemoveDirectoryW
FindNextFileA
CopyFileW
MoveFileW
CreateProcessW
MoveFileExW
FindFirstChangeNotificationW
CopyFileA
FindFirstChangeNotificationA
MoveFileA
RemoveDirectoryA
MoveFileExA
CopyFileExW
MoveFileWithProgressW
CreateProcessA
CopyFileExA
GetModuleHandleW
MoveFileWithProgressA
LoadLibraryW
LoadLibraryExW
CreateDirectoryW
SetFileAttributesA
CreateDirectoryA
CreateDirectoryExW
GetFileAttributesExA
CreateDirectoryExA
GetFileAttributesW
GetFileAttributesA
DeleteFileA
FindFirstFileW
SetFileAttributesW
FindFirstFileExW
FindFirstFileExA
GetDateFormatW
GetSystemInfo
lstrcmpW
DebugBreak
GetSystemDefaultLCID
CreateToolhelp32Snapshot
Module32First
Module32Next
GetProcessTimes
ReleaseSemaphore
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement

comctl32

InitCommonControlsEx
PropertySheetA
CreatePropertySheetPageA
PropertySheetW
CreatePropertySheetPageW
ord14
ord6

ddraw

DirectDrawCreate

imm32

ImmGetContext
ImmSetOpenStatus
ImmReleaseContext
ImmGetDefaultIMEWnd
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetOpenStatus

iphlpapi

GetAdaptersInfo

mpr

WNetGetConnectionA

mscms

GetColorDirectoryA

shlwapi

SHDeleteKeyA
AssocQueryStringW
StrTrimA
UrlUnescapeA
SHDeleteValueA

urlmon

URLDownloadToFileA
URLDownloadToFileW
URLDownloadToCacheFileA
FindMimeFromData
CoInternetGetSession

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

msvfw32

ICSendMessage
ICCompressorFree
ICCompressorChoose
ICClose

avifil32

AVIStreamWrite
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileCreateStreamA
AVIFileInit
AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIFileOpenA
AVIFileOpenW

wininet

InternetSetStatusCallback
InternetConnectA
InternetGetCookieExA
InternetGetConnectedStateEx
InternetOpenA
InternetGoOnline
InternetCrackUrlA
DeleteUrlCacheEntry
HttpOpenRequestA
InternetTimeFromSystemTime
InternetFindNextFileA
FtpFindFirstFileA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpDeleteFileA
InternetGetLastResponseInfoA
FtpCreateDirectoryA
FtpOpenFileA
HttpSendRequestExA
HttpSendRequestA
InternetSetOptionA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetErrorDlg
HttpQueryInfoA
InternetGetConnectedState
InternetCombineUrlA
InternetCloseHandle
InternetQueryOptionA
HttpAddRequestHeadersA

winmm

mmioOpenA
mmioDescend
mmioRead
mmioAscend
mmioClose
mciSendStringA
mciGetErrorStringA
timeSetEvent
timeGetTime
timeEndPeriod
timeKillEvent
timeBeginPeriod
timeGetDevCaps

wintrust

WinVerifyTrust

ws2_32

htonl
ntohs
htons
gethostbyname
recv
closesocket
getsockname
send
ntohl
sendto
socket
setsockopt
ioctlsocket
bind
recvfrom
WSAStartup
WSACleanup
select
listen
accept

user32

FlashWindowEx
RegisterWindowMessageA
GetFocus
GetKeyState
CallWindowProcA
SetParent
EnumChildWindows
ScrollWindowEx
GetWindowTextLengthA
DestroyIcon
CheckDlgButton
IsDlgButtonChecked
GetPropA
SetPropA
ReleaseCapture
SetCursor
OpenClipboard
GetClipboardData
CloseClipboard
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
CreateDialogIndirectParamA
DialogBoxIndirectParamW
KillTimer
DrawTextW
IsWindow
GetScrollBarInfo
IsWindowEnabled
DialogBoxIndirectParamA
DestroyAcceleratorTable
RegisterClassExA
SetCapture
GetWindowTextA
CreateAcceleratorTableA
RemovePropA
InvalidateRgn
GetClassInfoExA
GetWindow
CharNextA
IsChild
GetAsyncKeyState
GetCursor
ShowCursor
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
EnumThreadWindows
GetQueueStatus
IsDialogMessageA
TranslateAcceleratorA
MsgWaitForMultipleObjects
SetActiveWindow
SetMenu
PostQuitMessage
GetWindowTextLengthW
GetWindowTextW
GetIconInfo
DrawIconEx
GetClassLongA
CallWindowProcW
DialogBoxParamA
RegisterClassW
UnregisterClassW
SetDlgItemTextA
GetClassInfoA
SetClassLongW
SetWindowTextW
CreateDialogParamA
DialogBoxParamW
SystemParametersInfoA
SetDlgItemTextW
DefWindowProcW
CreateDialogParamW
LoadStringA
SetMenuItemInfoW
CreateWindowExW
GetMenuItemInfoW
SetMenuItemInfoA
InsertMenuItemW
AppendMenuW
InsertMenuItemA
MessageBoxW
AppendMenuA
UnregisterClassA
SetWindowLongW
GetWindowLongW
AdjustWindowRect
GetTopWindow
FindWindowExA
GetMenuInfo
SetMenuInfo
TrackPopupMenu
TrackPopupMenuEx
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
GetScrollPos
ShowScrollBar
LoadBitmapA
wsprintfA
PostThreadMessageA
CreateWindowExA
MessageBoxA
RegisterClipboardFormatA
ScreenToClient
DrawMenuBar
GetClassNameA
GetParent
EnableWindow
PostMessageA
CheckMenuItem
MoveWindow
EnableMenuItem
GetClientRect
MapWindowPoints
GetWindowRect
ClientToScreen
DestroyMenu
LoadImageA
SetWindowPos
SetTimer
EndDialog
GetSystemMetrics
PeekMessageA
UpdateWindow
InvalidateRect
DefWindowProcA
GetDlgCtrlID
LoadCursorA
ReleaseDC
SetClassLongA
GetDC
GetDesktopWindow
GetSysColor
GetWindowLongA
FindWindowA
EnumWindows
SetWindowLongA
LoadIconA
SendMessageA
SetForegroundWindow
IsIconic
ShowWindow
IsWindowVisible
GetDCEx
GetForegroundWindow
WindowFromPoint
SetFocus
RedrawWindow
GetCapture
RemoveMenu
SetWindowTextA
GetMenuItemInfoA
SetMenuDefaultItem
IsZoomed
GetMenuItemCount
BringWindowToTop
GetSubMenu
SystemParametersInfoW
SetWindowPlacement
AdjustWindowRectEx
GetMenu
GetWindowPlacement
MessageBeep
GetCursorPos
CreateMenu
CreatePopupMenu
RegisterClassA
wsprintfW
EndPaint
FillRect
BeginPaint
SendMessageW
DestroyWindow
GetDlgItem

gdi32

SetBkMode
CreatePatternBrush
GetOutlineTextMetricsA
EnumFontFamiliesExW
GetTextExtentExPointA
CreateDCA
GetDeviceCaps
SetMapMode
StartDocA
AbortDoc
EndDoc
StartPage
EndPage
GetTextAlign
GetTextExtentPoint32W
GetTextExtentPoint32A
CreateCompatibleBitmap
SelectObject
GetRegionData
SetStretchBltMode
StretchBlt
CreatePen
GetGlyphOutlineW
GetKerningPairsA
CreateFontIndirectA
GetTextFaceA
GetTextMetricsA
SetTextColor
DeleteObject
GetGlyphOutlineA
GetICMProfileA
ExtTextOutW
ExtTextOutA
TextOutW
TextOutA
CreateDIBSection
Rectangle
SetDIBits
CreateBrushIndirect
GetStockObject
DeleteDC
CreateCompatibleDC
PatBlt
CreateRectRgn
GetObjectA
SetBkColor
BitBlt
SetTextAlign
CreateSolidBrush

winspool.drv

EnumPrintersA
GetPrinterA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
CryptReleaseContext
RegEnumValueA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
GetUserNameA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDecrypt
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueExA
CryptGenRandom
RegCloseKey

shell32

DragAcceptFiles
ShellExecuteA
DragQueryPoint
DragFinish
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA
SHFileOperationA
SHGetFileInfoA
ShellExecuteExW
SHGetSpecialFolderPathA
Shell_NotifyIconW
ShellExecuteExA
SHBrowseForFolderW
DragQueryFileA
DragQueryFileW
SHFileOperationW
SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteW

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CoInitialize
DoDragDrop
CoUninitialize
OleUninitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoTaskMemRealloc
CoResumeClassObjects
CLSIDFromString
OleLockRunning
CoGetClassObject
CLSIDFromProgID
StringFromGUID2
FreePropVariantArray
PropVariantCopy
PropVariantClear
ReleaseStgMedium
CoRegisterClassObject
CoInitializeEx
CoCreateInstance
CoTaskMemAlloc
CreateItemMoniker
GetRunningObjectTable
OleInitialize
CoCreateGuid

oleaut32

LoadTypeLi
SafeArrayCreateVector
OleCreateFontIndirect
SafeArrayUnaccessData
SysAllocStringByteLen
VarBstrCmp
VariantClear
VariantTimeToSystemTime
LoadRegTypeLi
SysAllocStringLen
SysStringByteLen
SysStringLen
VarUI4FromStr
SysAllocString
SafeArrayAccessData
VarBstrFromDate
SystemTimeToVariantTime
VarDateFromStr
VariantInit
VarBstrCat
SysFreeString

Exports

Exports

JSON_parser_char
JSON_parser_done
JSON_parser_is_legal_white_space_string
delete_JSON_parser
init_JSON_config
new_JSON_parser

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 912KB - Virtual size: 911KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Picasa3i18n.dll
.dll windows:4 windows x86 arch:x86

22b98c5c8c68a5c45b232e3b1c1c06e3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

06:ab:19:2b:4c:1e:6e:a8:34:c8:6d:75:5a:48:63:e3:37:6d:aa:f4
Signer

Actual PE Digest

06:ab:19:2b:4c:1e:6e:a8:34:c8:6d:75:5a:48:63:e3:37:6d:aa:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\Picasa3i18n.pdb

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

GETINSTANCE

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25.6MB - Virtual size: 25.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PicasaPhotoViewer.exe
.exe windows:4 windows x86 arch:x86

f2e1835014558b0097badd63db325e7e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:bd:bc:91:e5:cb:42:57:58:8b:ef:e5:ad:36:00:56:d0:47:2a:47
Signer

Actual PE Digest

e7:bd:bc:91:e5:cb:42:57:58:8b:ef:e5:ad:36:00:56:d0:47:2a:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\PicasaPhotoViewer.pdb

Imports

shlwapi

StrRetToBufW
SHDeleteKeyA
SHDeleteValueA
AssocQueryStringW

wininet

InternetGetConnectedStateEx
InternetCloseHandle
InternetQueryOptionA
InternetSetOptionA
InternetGoOnline
InternetGetCookieExA
InternetConnectA
InternetSetStatusCallback
InternetOpenA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetErrorDlg
HttpQueryInfoA
HttpAddRequestHeadersA
HttpSendRequestA
HttpSendRequestExA
DeleteUrlCacheEntry
InternetCrackUrlA
InternetGetConnectedState
HttpOpenRequestA

kernel32

GetFileAttributesW
GetSystemDirectoryA
SearchPathA
SetErrorMode
GetDriveTypeA
SetFileTime
LockResource
GetTempPathW
GetTempPathA
GetModuleHandleW
GetModuleFileNameW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
CopyFileExA
FindFirstChangeNotificationA
DebugBreak
GetThreadLocale
IsProcessorFeaturePresent
VirtualProtect
FormatMessageA
GlobalMemoryStatusEx
GetCommandLineW
QueryPerformanceCounter
ExitProcess
GetLastError
GetLongPathNameA
GetLongPathNameW
CreateMutexA
FindClose
ResetEvent
WaitForSingleObject
Sleep
OpenMutexA
GetExitCodeProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
CreateEventA
SetEvent
CloseHandle
GetShortPathNameA
EnterCriticalSection
InterlockedCompareExchange
GetCurrentThreadId
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
ExitThread
CreateFileMappingA
MapViewOfFile
MoveFileWithProgressA
GetProcessTimes
Module32Next
Module32First
CreateToolhelp32Snapshot
GetSystemInfo
GetSystemDefaultLCID
CreateThread
lstrcmpW
QueryPerformanceFrequency
UnlockFileEx
LockFileEx
HeapAlloc
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapSize
RtlUnwind
SetHandleCount
GetFileType
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
SetFilePointer
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetSystemTimeAsFileTime
GetLocaleInfoA
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
SetEndOfFile
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFree
LoadLibraryExA
MulDiv
DisableThreadLibraryCalls
lstrlenA
GlobalLock
GlobalUnlock
LoadResource
GlobalAlloc
SizeofResource
lstrcmpiA
FindResourceA
lstrcmpA
FlushInstructionCache
lstrlenW
IsDBCSLeadByte
LocalFree
OutputDebugStringA
GetFileSize
TerminateThread
SetThreadPriority
GetThreadPriority
WaitForMultipleObjects
VirtualQuery
GetWindowsDirectoryA
GetFileAttributesA
LoadLibraryW
DeleteFileW
DeleteFileA
CreateDirectoryW
LoadLibraryExW
FindFirstFileW
CreateDirectoryExW
FindFirstFileA
SetFileAttributesA
FindFirstFileExW
GetFileAttributesExA
FindFirstFileExA
FindNextFileW
GetShortPathNameW
RemoveDirectoryA
FindNextFileA
CreateFileW
CopyFileW
SetFileAttributesW
MoveFileW
GetFileAttributesExW
MoveFileExW
CreateProcessA
CopyFileA
GetDateFormatW
GetTimeFormatW
CreateDirectoryA
MoveFileA
RemoveDirectoryW
CreateDirectoryExA
MoveFileExA
CreateProcessW
CopyFileExW
GetVersion
FindFirstChangeNotificationW
MoveFileWithProgressW
UnmapViewOfFile

user32

RegisterWindowMessageA
FillRect
RegisterClassExA
BeginPaint
EndPaint
CharNextA
InvalidateRect
CreateAcceleratorTableA
GetSysColor
InvalidateRgn
ReleaseCapture
GetWindowRect
IsWindowVisible
DialogBoxIndirectParamA
SetTimer
KillTimer
GetPropA
GetWindowTextLengthW
GetWindowTextW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
MessageBoxW
SetWindowLongW
GetWindowLongW
RegisterClassA
CallWindowProcW
GetMenuItemInfoA
RegisterClassW
UnregisterClassA
UnregisterClassW
GetClassInfoA
SetMenuItemInfoA
SetClassLongW
SetClassLongA
SetWindowTextW
DialogBoxParamW
InsertMenuItemA
SendMessageW
SetDlgItemTextW
DialogBoxParamA
AppendMenuA
DefWindowProcW
LoadStringA
CreateDialogParamW
MessageBoxA
SetDlgItemTextA
CreateWindowExW
CreateDialogParamA
DispatchMessageA
MsgWaitForMultipleObjects
SetActiveWindow
GetAsyncKeyState
SetCursor
GetCursor
FlashWindowEx
ShowCursor
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
EnumThreadWindows
DestroyAcceleratorTable
PeekMessageA
GetCursorPos
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
SetMenu
GetActiveWindow
PostQuitMessage
FindWindowExA
GetTopWindow
GetMenu
SetMenuInfo
TrackPopupMenu
CreatePopupMenu
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
DialogBoxIndirectParamW
GetClassLongA
GetDlgItem
LoadImageA
LoadCursorA
SetCapture
GetClassInfoExA
GetWindowTextA
DefWindowProcA
IsChild
SetWindowTextA
RedrawWindow
GetWindow
IsWindow
RemovePropA
CreateWindowExA
ScreenToClient
SetPropA
EndDialog
LoadIconA
GetSystemMetrics
ClientToScreen
GetDesktopWindow
GetDC
GetForegroundWindow
ReleaseDC
GetWindowPlacement
AdjustWindowRect
EnableMenuItem
CheckMenuItem
SetWindowLongA
DrawIcon
DestroyIcon
DestroyWindow
EnableWindow
GetFocus
SetFocus
SendMessageA
GetWindowTextLengthA
MessageBeep
GetParent
GetClientRect
IsIconic
DrawTextW
GetClassNameA
GetWindowLongA
FindWindowA
EnumWindows
SetWindowPos
GetScrollBarInfo
IsWindowEnabled
CreateDialogIndirectParamA
ShowWindow
SetForegroundWindow
SystemParametersInfoA
AdjustWindowRectEx
UpdateWindow
PostMessageA
GetKeyState
CallWindowProcA
MoveWindow
EnumChildWindows
SetParent
DestroyMenu

gdi32

GetGlyphOutlineA
GetKerningPairsA
SetBkMode
GetOutlineTextMetricsA
GetICMProfileA
GetGlyphOutlineW
Rectangle
CreatePen
DeleteDC
SelectObject
CreateCompatibleDC
SetStretchBltMode
CreateDIBSection
CreateFontIndirectA
TextOutW
GetTextExtentPoint32A
ExtTextOutA
TextOutA
GetTextExtentPoint32W
ExtTextOutW
GetObjectA
GetStockObject
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
GetTextMetricsA
CreateSolidBrush
DeleteObject

shell32

ExtractIconExA
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteW
SHGetPathFromIDListW
DragAcceptFiles
SHChangeNotify
ShellExecuteExW
Shell_NotifyIconA
ShellExecuteA
SHFileOperationA
DragQueryFileW
SHGetFileInfoA
SHGetSpecialFolderPathA
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationW
DragQueryFileA
ShellExecuteExA
SHGetFileInfoW
SHGetSpecialFolderPathW
SHGetMalloc

ole32

CoCreateInstance
CoRegisterClassObject
CoTaskMemFree
CreateStreamOnHGlobal
StringFromGUID2
OleInitialize
OleUninitialize
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoResumeClassObjects
CLSIDFromString
CoTaskMemAlloc

oleaut32

SysFreeString
SysAllocStringLen
SysAllocString
SysStringByteLen
VariantInit
VariantClear
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
VarBstrCat
SystemTimeToVariantTime
VariantTimeToSystemTime

comctl32

CreatePropertySheetPageA
PropertySheetW
CreatePropertySheetPageW
InitCommonControlsEx
ord6
PropertySheetA

mscms

GetColorDirectoryA

urlmon

URLDownloadToFileA
FindMimeFromData
CoInternetGetSession
URLDownloadToFileW

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW

wintrust

WinVerifyTrust

ws2_32

ntohl
htonl
gethostbyname
htons
ntohs

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegOpenKeyExW
CryptReleaseContext
CryptDecrypt
RegEnumValueW
RegQueryValueExA
RegEnumValueA
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
CryptEncrypt

Exports

Exports

JSON_parser_char
JSON_parser_done
JSON_parser_is_legal_white_space_string
delete_JSON_parser
init_JSON_config
new_JSON_parser

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
buttons/core-lh2.pbz
.zip
{0B3F3356-4FA1-48ca-B972-2B7D20AC6FBF}.pbf
.xml
{1FC0FA62-3412-4466-B485-B7CB97D3714B}.pbf
.xml
{3C09A978-42C4-4437-85CA-D326872B424D}.pbf
.xml
{45EF212C-84AB-46c5-A42E-95023ED50C76}.pbf
.xml
{4D139EF7-47A3-4da4-9A00-AF35AAEC17D1}.pbf
.xml
{8E6A2DAF-0069-4df2-88D2-8B24BEEC9CA1}.pbf
.xml
{A957DB23-D80A-4aa6-94A6-D6857FD74A68}.pbf
.xml
{B9012CB2-DD50-49a5-B4CB-009344BBA285}.pbf
{C6ABED00-0058-4420-A9FA-0D471E950308}.pbf
.xml
buttons/geotag.pbz
.zip
{9A42861F-B5F4-4577-9228-EA2A782BD906}.pbf
.xml
{9A42861F-B5F4-4577-9228-EA2A782BD906}.psd
cdautorun/Download Picasa.url
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/GoogleBreakpad
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Resources
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/GoogleBreakpad
.dylib macos arch:ppc arch:x86
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Info.plist
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Inspector
.macho macos arch:ppc arch:x86
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Info.plist
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/MacOS/Reporter
.macho macos arch:ppc arch:x86
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/PkgInfo
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/English.lproj/Breakpad.nib
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/English.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/de.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/en_GB.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/es.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/fr.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/it.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/ja.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/nl.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/zh_CN.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/zh_TW.lproj/Localizable.strings
cdautorun/Picasa CD Slideshow.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/Current
cdautorun/Picasa CD Slideshow.app/Contents/Info.plist
.xml
cdautorun/Picasa CD Slideshow.app/Contents/MacOS/Picasa CD Slideshow
.macho macos arch:x86
cdautorun/Picasa CD Slideshow.app/Contents/PkgInfo
cdautorun/Picasa CD Slideshow.app/Contents/Resources/Dialogs.nib/classes.nib
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/Dialogs.nib/info.nib
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/Dialogs.nib/objects.xib
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/NESW.png
.png
cdautorun/Picasa CD Slideshow.app/Contents/Resources/NWSE.png
.png
cdautorun/Picasa CD Slideshow.app/Contents/Resources/PicasaCD.icns
cdautorun/Picasa CD Slideshow.app/Contents/Resources/bg.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/bg.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/bg.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ca.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ca.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ca.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/cdgo.tre
cdautorun/Picasa CD Slideshow.app/Contents/Resources/cdgo.ui
cdautorun/Picasa CD Slideshow.app/Contents/Resources/crosshairthin.png
.png
cdautorun/Picasa CD Slideshow.app/Contents/Resources/cs.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/cs.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/cs.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/da.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/da.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/da.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/de.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/de.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/de.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/deletecursor.png
.png
cdautorun/Picasa CD Slideshow.app/Contents/Resources/dropper.png
.png
cdautorun/Picasa CD Slideshow.app/Contents/Resources/el.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/el.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/el.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/en_GB.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/en_GB.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/en_GB.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/es.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/es.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/es.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fi.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fi.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fi.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fil.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fil.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fil.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fr.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fr.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/fr.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/hr.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/hr.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/hr.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/hu.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/hu.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/hu.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/id.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/id.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/id.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/it.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/it.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/it.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ja.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ja.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ja.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ko.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ko.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ko.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/lt.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/lt.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/lt.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/lv.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/lv.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/lv.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/nl.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/nl.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/nl.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/no.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/no.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/no.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pl.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pl.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pl.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt_BR.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt_BR.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt_BR.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt_PT.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt_PT.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/pt_PT.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ro.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ro.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ro.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ru.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ru.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/ru.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sk.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sk.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sk.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sl.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sl.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sl.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sr.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sr.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sr.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sv.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sv.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/sv.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/tl.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/tl.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/tl.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/tr.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/tr.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/tr.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/uk.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/uk.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/uk.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/zh_CN.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/zh_CN.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/zh_CN.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/zh_TW.lproj/i18n/cdgo.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/zh_TW.lproj/i18n/cdgo_resexport.xml
.xml
cdautorun/Picasa CD Slideshow.app/Contents/Resources/zh_TW.lproj/i18n/cdgo_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/GoogleBreakpad
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Resources
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/GoogleBreakpad
.dylib macos arch:ppc arch:x86
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Info.plist
.xml
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Inspector
.macho macos arch:ppc arch:x86
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Info.plist
.xml
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/MacOS/Reporter
.macho macos arch:ppc arch:x86
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/PkgInfo
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/English.lproj/Breakpad.nib
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/English.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/ReporterIcon.icns
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/de.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/en_GB.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/es.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/fr.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/goArrow.png
.png
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/it.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/ja.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/nl.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/zh_CN.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/A/Resources/Reporter.app/Contents/Resources/zh_TW.lproj/Localizable.strings
cdautorun/Picasa Restore.app/Contents/Frameworks/GoogleBreakpad.framework/Versions/Current
cdautorun/Picasa Restore.app/Contents/Info.plist
.xml
cdautorun/Picasa Restore.app/Contents/MacOS/Picasa Restore
.macho macos arch:x86
cdautorun/Picasa Restore.app/Contents/PkgInfo
cdautorun/Picasa Restore.app/Contents/Resources/English.lproj/InfoPlist.strings
cdautorun/Picasa Restore.app/Contents/Resources/English.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/English.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/English.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/PicasaRestore.icns
cdautorun/Picasa Restore.app/Contents/Resources/bg.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/bg.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/bg.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/bg.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/bg.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ca.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ca.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ca.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/ca.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ca.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/cs.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/cs.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/cs.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/cs.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/cs.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/da.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/da.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/da.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/da.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/da.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/de.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/de.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/de.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/de.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/de.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/el.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/el.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/el.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/el.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/el.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/en_GB.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/en_GB.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/en_GB.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/en_GB.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/en_GB.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/es.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/es.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/es.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/es.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/es.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fi.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fi.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fi.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/fi.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fi.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fil.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fil.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fil.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/fil.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fil.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fr.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fr.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fr.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/fr.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/fr.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hr.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hr.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hr.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/hr.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hr.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hu.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hu.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hu.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/hu.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/hu.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/id.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/id.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/id.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/id.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/id.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/it.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/it.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/it.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/it.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/it.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ja.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ja.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ja.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/ja.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ja.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ko.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ko.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ko.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/ko.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ko.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lt.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lt.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lt.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/lt.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lt.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lv.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lv.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lv.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/lv.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/lv.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/nl.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/nl.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/nl.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/nl.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/nl.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/no.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/no.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/no.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/no.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/no.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pl.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pl.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pl.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/pl.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pl.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/pt.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_BR.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_BR.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_BR.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/pt_BR.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_BR.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_PT.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_PT.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_PT.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/pt_PT.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/pt_PT.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ro.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ro.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ro.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/ro.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ro.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ru.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ru.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ru.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/ru.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/ru.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sk.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sk.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sk.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/sk.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sk.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sl.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sl.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sl.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/sl.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sl.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sr.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sr.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sr.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/sr.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sr.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sv.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sv.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sv.lproj/PRMainMenu.nib/keyedobjects.nib
.ps1
cdautorun/Picasa Restore.app/Contents/Resources/sv.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/sv.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tl.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tl.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tl.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/tl.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tl.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tr.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tr.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tr.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/tr.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/tr.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/uk.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/uk.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/uk.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/uk.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/uk.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_CN.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_CN.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_CN.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/zh_CN.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_CN.lproj/i18n/restore_stringres.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_TW.lproj/PRMainMenu.nib/classes.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_TW.lproj/PRMainMenu.nib/info.nib
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_TW.lproj/PRMainMenu.nib/keyedobjects.nib
cdautorun/Picasa Restore.app/Contents/Resources/zh_TW.lproj/i18n/restore_resexport.xml
.xml
cdautorun/Picasa Restore.app/Contents/Resources/zh_TW.lproj/i18n/restore_stringres.xml
.xml
cdautorun/PicasaCD.exe
.exe windows:4 windows x86 arch:x86

8c6cf8123d4782167f2c0c00c889a02a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:ed:30:b0:fc:49:7f:22:7b:08:4e:b8:ba:bb:c8:71:81:d2:9c
Signer

Actual PE Digest

7b:05:ed:30:b0:fc:49:7f:22:7b:08:4e:b8:ba:bb:c8:71:81:d2:9c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\cdautorun\PicasaCD.pdb

Imports

kernel32

Sleep
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
CreateMutexA
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
ReadFile
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalFree
LoadLibraryExA
OutputDebugStringA
GlobalFree
FormatMessageA
GetFileSize
QueryPerformanceFrequency
TerminateThread
SetThreadPriority
GetThreadPriority
WaitForMultipleObjects
ResetEvent
GetModuleFileNameW
GetLongPathNameW
GetLongPathNameA
GetSystemDirectoryA
SearchPathA
SetErrorMode
GetVersion
DebugBreak
GetShortPathNameW
CreateFileW
GetDriveTypeA
DeviceIoControl
GetTempPathW
GetTempPathA
FindResourceA
SizeofResource
LoadResource
LockResource
DeleteFileA
LoadLibraryExW
CreateDirectoryW
FindFirstFileW
CreateDirectoryExW
RemoveDirectoryA
FindFirstFileA
SetFileAttributesA
GetFileAttributesExA
FindFirstFileExW
CreateProcessA
FindFirstFileExA
GetShortPathNameA
FindNextFileW
FindNextFileA
SetFileAttributesW
GetFileAttributesExW
CreateDirectoryA
CopyFileW
MoveFileW
CreateDirectoryExA
MoveFileExW
GetDateFormatW
CopyFileA
GetTimeFormatW
RemoveDirectoryW
MoveFileA
MoveFileExA
CopyFileExW
CreateProcessW
MoveFileWithProgressW
FindFirstChangeNotificationW
CopyFileExA
FindFirstChangeNotificationA
MoveFileWithProgressA
GetModuleHandleW
GetFileAttributesW
GetFileAttributesA
LoadLibraryW
DeleteFileW
VirtualQuery
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
CreateThread
FindClose
SetEndOfFile
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetSystemInfo
GetSystemDefaultLCID
CreateToolhelp32Snapshot
Module32First
Module32Next
GetProcessTimes
GlobalAlloc
ReleaseMutex
OpenMutexA
WaitForSingleObject
GetLastError
OpenEventA
InterlockedIncrement
SetEvent
GetCurrentThreadId
CreateEventA
InterlockedDecrement
ExitThread

user32

MsgWaitForMultipleObjects
GetCursor
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
GetForegroundWindow
PeekMessageA
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
MessageBoxW
CreateWindowExA
CallWindowProcA
SetWindowLongW
GetWindowLongW
RegisterClassA
CallWindowProcW
UnregisterClassA
SetMenuItemInfoA
GetMenuItemInfoA
RegisterClassW
UnregisterClassW
SetClassLongA
GetClassInfoA
InsertMenuItemA
SetClassLongW
SetWindowTextA
SetWindowTextW
GetWindowTextA
AppendMenuA
GetWindowTextW
DialogBoxParamW
DialogBoxParamA
SetCursor
SendMessageW
SetDlgItemTextW
SetDlgItemTextA
DefWindowProcW
CreateDialogParamW
DefWindowProcA
CreateDialogParamA
CreateWindowExW
SetCapture
SetParent
GetTopWindow
AdjustWindowRectEx
SetFocus
GetMenu
GetDC
ReleaseDC
ClientToScreen
RedrawWindow
ScreenToClient
GetWindowTextLengthW
GetWindowTextLengthA
EnableWindow
DialogBoxIndirectParamA
GetWindowLongA
GetFocus
IsWindowVisible
SetWindowLongA
EndDialog
MoveWindow
GetWindowRect
GetDlgItem
GetSystemMetrics
LoadCursorA
DispatchMessageA
GetAsyncKeyState
BeginPaint
PostQuitMessage
GetParent
FlashWindowEx
LoadIconA
GetActiveWindow
SetWindowPos
ReleaseCapture
GetClientRect
IsWindow
SystemParametersInfoA
DestroyWindow
EnumThreadWindows
MessageBeep
LoadImageA
ShowWindow
IsIconic
SetForegroundWindow
FindWindowExA
SendMessageA
PostMessageA
SetActiveWindow
GetClassNameA
GetWindow
EndPaint
GetDesktopWindow
MessageBoxA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileW
DragQueryFileA
SHFileOperationW
SHGetMalloc
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
SHFileOperationA
SHGetFileInfoA
SHBrowseForFolderW
SHGetSpecialFolderPathA
SHGetPathFromIDListW
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteA
SHGetFileInfoW

comctl32

PropertySheetA
CreatePropertySheetPageA
PropertySheetW
InitCommonControlsEx
CreatePropertySheetPageW

mscms

GetColorDirectoryA

urlmon

FindMimeFromData

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoW

wininet

InternetCrackUrlA
InternetSetStatusCallback
InternetConnectA
HttpSendRequestExA
HttpSendRequestA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetOpenA
InternetGetConnectedStateEx
InternetCloseHandle
InternetGetConnectedState
InternetQueryOptionA
InternetSetOptionA
HttpOpenRequestA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetErrorDlg

winmm

mciSendCommandA

ws2_32

gethostbyname

gdi32

GetTextExtentPoint32W
ExtTextOutW
TextOutW
GetTextExtentPoint32A
ExtTextOutA
TextOutA
SelectObject
CreateFontIndirectA
DeleteDC
GetDeviceCaps
CreateCompatibleDC
GetStockObject
GetKerningPairsA
GetGlyphOutlineA
GetGlyphOutlineW
SetBkMode
GetICMProfileA
CreateDIBSection
BitBlt
DeleteObject
Rectangle
CreatePen

comdlg32

GetSaveFileNameA
GetOpenFileNameW
GetSaveFileNameW
GetOpenFileNameA

advapi32

RegEnumKeyExW
ReportEventA
DeregisterEventSource
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptReleaseContext
CryptDecrypt
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegCreateKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegOpenKeyExA
RegCreateKeyExA
RegEnumValueW
RegisterEventSourceA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cdautorun/PicasaRestore.exe
.exe windows:4 windows x86 arch:x86

cb5f497b5f88f38d6eb1ad55417cbcb3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:44:9e:74:e1:be:e6:18:2a:d3:0a:61:7d:94:96:17:10:b8:d2:25
Signer

Actual PE Digest

58:44:9e:74:e1:be:e6:18:2a:d3:0a:61:7d:94:96:17:10:b8:d2:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\cdautorun\PicasaRestore.pdb

Imports

kernel32

ExitThread
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
RaiseException
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetLocaleInfoA
InitializeCriticalSection
RtlUnwind
FreeLibrary
InterlockedExchange
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
InterlockedDecrement
ReadFile
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
CreateFileA
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetNumberFormatA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
CompareFileTime
CreateEventA
ResetEvent
WaitForMultipleObjects
WaitForSingleObject
SetEvent
TerminateThread
SetThreadPriority
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalFree
FormatMessageA
LocalFree
GetModuleFileNameW
GetLongPathNameW
GetLongPathNameA
LoadLibraryExA
GetSystemDirectoryA
SetErrorMode
GetVersion
GetTempPathW
GetShortPathNameW
GetTempPathA
CreateFileW
SetFileTime
GetDriveTypeA
CreateProcessW
MoveFileExA
FindFirstChangeNotificationW
CopyFileExW
FindFirstChangeNotificationA
MoveFileWithProgressW
CopyFileExA
MoveFileWithProgressA
GetModuleHandleW
LoadLibraryW
GetFileAttributesW
GetFileAttributesA
LoadLibraryExW
CreateDirectoryW
DeleteFileW
CreateDirectoryExW
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
FindFirstFileW
GetFileAttributesExA
FindFirstFileA
GetShortPathNameA
FindFirstFileExW
CreateProcessA
FindFirstFileExA
SetFileAttributesW
FindNextFileW
GetFileAttributesExW
FindNextFileA
GetDateFormatW
CreateDirectoryA
CopyFileW
GetTimeFormatW
MoveFileW
CreateDirectoryExA
RemoveDirectoryW
MoveFileExW
CopyFileA
MoveFileA
UnmapViewOfFile
GetFileSize
SetEndOfFile
FindClose
GetSystemInfo
QueryPerformanceFrequency
InterlockedCompareExchange
InterlockedIncrement
ReleaseMutex
GetLastError
CreateMutexA
GetUserDefaultLCID
MultiByteToWideChar
CreateThread

user32

GetWindowTextW
GetWindowTextA
SetClassLongA
SetWindowTextW
InsertMenuItemA
DialogBoxParamW
SetWindowTextA
AppendMenuA
SendMessageW
SetDlgItemTextW
MessageBoxA
DefWindowProcW
DialogBoxParamA
CreateDialogParamW
SetDlgItemTextA
DefWindowProcA
CreateWindowExW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
MessageBoxW
CreateWindowExA
SetWindowLongW
CallWindowProcA
GetWindowLongW
RegisterClassA
CallWindowProcW
RegisterClassW
UnregisterClassA
UnregisterClassW
GetWindowTextLengthA
GetMenuItemInfoA
GetClassInfoA
SetClassLongW
ReleaseCapture
GetActiveWindow
MessageBeep
PostQuitMessage
LoadIconA
MoveWindow
SetFocus
GetDC
ReleaseDC
CreateDialogParamA
DialogBoxIndirectParamW
IsIconic
DestroyWindow
GetDesktopWindow
EndDialog
ShowWindow
UpdateWindow
GetWindowTextLengthW
SetMenuItemInfoA
FlashWindowEx
GetSystemMetrics
EndPaint
BeginPaint
GetSysColor
GetClassInfoExA
SetWindowLongA
RegisterWindowMessageA
EnumWindows
FindWindowA
SystemParametersInfoA
IsWindow
EnumThreadWindows
SetWindowsHookExA
GetClassNameA
CheckDlgButton
SetWindowPos
MapWindowPoints
IsWindowVisible
EnableWindow
PostMessageA
SetTimer
SetForegroundWindow
LoadImageA
GetWindowLongA
SendMessageA
GetDlgItem
GetClientRect
GetWindowRect
CallNextHookEx
GetCursor
UnhookWindowsHookEx
SetActiveWindow
GetParent
SetCursor
LoadCursorA
GetWindow
GetAsyncKeyState

gdi32

ExtTextOutA
TextOutA
CreateCompatibleDC
SelectObject
DeleteDC
GetTextExtentPoint32W
ExtTextOutW
TextOutW
CreateFontIndirectA
DeleteObject
BitBlt
Rectangle
CreatePen
CreateDIBSection
GetStockObject
GetTextExtentPoint32A

comctl32

PropertySheetW
CreatePropertySheetPageW
PropertySheetA
CreatePropertySheetPageA
InitCommonControlsEx

comdlg32

GetSaveFileNameA
GetOpenFileNameW
GetSaveFileNameW
GetOpenFileNameA

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExW

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderPathA
DragQueryFileW
ShellExecuteA
ShellExecuteExA
DragQueryFileA
Shell_NotifyIconA
SHGetFileInfoW
SHFileOperationW

ole32

CoTaskMemFree

oleaut32

SystemTimeToVariantTime
VarBstrFromDate
SysFreeString

Sections

.text
Size: 476KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cdautorun/cdgo.tre
cdautorun/cdgo.ui
i18n/uninstall.html
.html
i18n/uninstall_bg.html
.html
i18n/uninstall_ca.html
.html
i18n/uninstall_cs.html
.html
i18n/uninstall_da.html
.html
i18n/uninstall_de.html
.html
i18n/uninstall_el.html
i18n/uninstall_es.html
.html
i18n/uninstall_fi.html
i18n/uninstall_fr.html
.html
i18n/uninstall_hi.html
i18n/uninstall_hr.html
.html
i18n/uninstall_hu.html
.html
i18n/uninstall_id.html
.html
i18n/uninstall_it.html
.html
i18n/uninstall_ja.html
.html
i18n/uninstall_ko.html
.html
i18n/uninstall_lt.html
.html
i18n/uninstall_lv.html
i18n/uninstall_nl.html
.html
i18n/uninstall_no.html
i18n/uninstall_pl.html
i18n/uninstall_pt-BR.html
.html
i18n/uninstall_ro.html
.html
i18n/uninstall_ru.html
.html
i18n/uninstall_sk.html
.html
i18n/uninstall_sl.html
.html
i18n/uninstall_sr.html
i18n/uninstall_sv.html
i18n/uninstall_th.html
.html
i18n/uninstall_tr.html
.html
i18n/uninstall_uk.html
.html
i18n/uninstall_vi.html
.html
i18n/uninstall_zh-CN.html
.html
i18n/uninstall_zh-TW.html
.html
licenses/adobe_xmp_toolkit.txt
licenses/lcms.txt
npPicasa3.dll
.dll windows:4 windows x86 arch:x86

22b98c5c8c68a5c45b232e3b1c1c06e3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0c:39:9e:19:e9:12:75:0f:8a:b3:31:55:a2:8b:bd:04:41:b8:cb:81
Signer

Actual PE Digest

0c:39:9e:19:e9:12:75:0f:8a:b3:31:55:a2:8b:bd:04:41:b8:cb:81

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\npPicasa3.pdb

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/CDVDR/CDVDR.yti
.dll windows:4 windows x86 arch:x86

a126ac83290c0910712b8a9c8361344c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\plugins\CDVDR\CDVDR.pdb

Imports

shlwapi

SHCreateStreamOnFileW

kernel32

lstrlenW
LoadLibraryExA
MultiByteToWideChar
FindResourceA
GetModuleHandleA
SizeofResource
LeaveCriticalSection
IsDBCSLeadByte
LoadResource
InitializeCriticalSection
FreeLibrary
DeleteCriticalSection
lstrcmpiA
GetProcAddress
LCMapStringW
LoadLibraryA
VirtualQuery
GetCurrentThreadId
WaitForSingleObject
CloseHandle
GetVersion
GetVersionExA
GetCurrentProcessId
GetModuleFileNameW
WaitForMultipleObjects
InterlockedCompareExchange
GetTickCount
GetCurrentProcess
ResetEvent
InterlockedExchange
SetEvent
TerminateThread
CreateEventA
SetThreadPriority
GetLocaleInfoA
FindFirstFileW
LoadLibraryW
FindFirstFileA
LoadLibraryExW
CreateDirectoryW
FindFirstFileExW
CreateDirectoryExW
FindFirstFileExA
lstrlenA
FindNextFileW
GetFileAttributesExA
FindNextFileA
GetShortPathNameA
GetDateFormatA
CopyFileW
GetShortPathNameW
GetTimeFormatA
MoveFileW
CreateFileW
CreateFileA
MoveFileExW
SetFileAttributesW
RemoveDirectoryA
CopyFileA
GetFileAttributesExW
MoveFileA
GetDateFormatW
GetTimeFormatW
MoveFileExA
RemoveDirectoryW
CreateProcessA
CopyFileExW
MoveFileWithProgressW
CreateDirectoryA
CopyFileExA
CreateProcessW
CreateDirectoryExA
FindFirstChangeNotificationW
MoveFileWithProgressA
FindFirstChangeNotificationA
CompareStringW
CompareStringA
GetFileAttributesW
GetFileAttributesA
DeleteFileW
GetModuleHandleW
DeleteFileA
QueryPerformanceCounter
GetSystemInfo
VirtualFree
VirtualAlloc
SetFilePointer
SetEndOfFile
FlushFileBuffers
ReadFile
WriteFile
Sleep
GetACP
GetThreadLocale
HeapAlloc
VirtualProtect
HeapFree
HeapReAlloc
GetCommandLineA
GetProcessHeap
ExitThread
CreateThread
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
TlsGetValue
GetModuleFileNameA
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
HeapSize
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
RtlUnwind
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
WideCharToMultiByte
EnterCriticalSection
GetLastError
RaiseException
InterlockedDecrement
InterlockedIncrement
SetFileAttributesA
TlsAlloc

user32

SetWindowLongW
GetWindowLongW
CallWindowProcW
CallWindowProcA
RegisterClassW
UnregisterClassW
RegisterClassA
GetClassInfoA
SetClassLongW
UnregisterClassA
CreateWindowExA
SetWindowTextW
DialogBoxParamW
GetWindowLongA
SetClassLongA
SendMessageW
SetMenuItemInfoA
SetDlgItemTextW
SetWindowTextA
DefWindowProcW
CreateWindowExW
CreateDialogParamW
InsertMenuItemA
DialogBoxParamA
AppendMenuA
MessageBoxA
SetDlgItemTextA
SetWindowLongA
SendMessageA
GetWindowTextA
GetWindowTextW
GetMenuItemInfoA
CharNextA
MessageBoxW
AppendMenuW
InsertMenuItemW
GetMenuItemInfoW
SetMenuItemInfoW
CreateDialogParamA
DefWindowProcA

advapi32

RegDeleteKeyA
RegCloseKey
RegCreateKeyExW
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegEnumKeyExA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

SysStringLen
SafeArrayDestroyData
DispCallFunc
VariantInit
VarUI4FromStr
LoadRegTypeLi
SysAllocStringLen
LoadTypeLi
VariantClear
SysAllocString
SysFreeString

comctl32

PropertySheetA
CreatePropertySheetPageA
PropertySheetW
CreatePropertySheetPageW

gdi32

ExtTextOutW
GetTextExtentPoint32W
TextOutA
ExtTextOutA
GetTextExtentPoint32A
TextOutW

comdlg32

GetOpenFileNameW
GetSaveFileNameA
GetOpenFileNameA
GetSaveFileNameW

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetPathFromIDListW
DragQueryFileW
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderPathA
SHFileOperationW
SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteExA
DragQueryFileA
ShellExecuteW
Shell_NotifyIconA
SHBrowseForFolderW
ShellExecuteExW
Shell_NotifyIconW

Exports

Exports

YTIPLUGINENTRY

Sections

.text
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/Red.dll
.dll windows:4 windows x86 arch:x86

e35bd5e85bc336a31c0c2c309f8c0484

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Development\googleclient\picasa4\build\plugins\Red.pdb

Imports

kernel32

OutputDebugStringA
Sleep
GetCurrentThreadId
CreateMutexA
ReleaseMutex
CloseHandle
WaitForSingleObject
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
RtlUnwind
ReadFile
LoadLibraryA
InitializeCriticalSection
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetFileAttributesA

user32

MsgWaitForMultipleObjects
TranslateMessage
PeekMessageA
DispatchMessageA

Exports

Exports

REDENTRY

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/expwebsites/expwebsites.psd
plugins/expwebsites/expwebsites.yti
.dll windows:4 windows x86 arch:x86

5def3b23dbefd874a5b066dfdc73d38d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\plugins\expwebsites\expwebsites.pdb

Imports

wininet

InternetGetCookieA
InternetOpenA
InternetGetConnectedStateEx
InternetCloseHandle
InternetGetConnectedState
InternetQueryOptionA
InternetSetOptionA
DeleteUrlCacheEntry
InternetConnectA
InternetSetStatusCallback
HttpOpenRequestA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetErrorDlg
HttpQueryInfoA
HttpAddRequestHeadersA
HttpSendRequestA
HttpSendRequestExA
InternetCrackUrlA

kernel32

SetLastError
HeapSize
ExitProcess
GetStdHandle
SetHandleCount
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapCreate
HeapDestroy
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
CreateThread
ExitThread
GetStartupInfoA
GetCurrentThreadId
Sleep
GetModuleHandleA
FindResourceA
WideCharToMultiByte
GetProcessHeap
GetCommandLineA
lstrlenW
LoadResource
SizeofResource
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryExA
FreeLibrary
InitializeCriticalSection
InterlockedCompareExchange
EnterCriticalSection
GetLastError
lstrlenA
IsDBCSLeadByte
MultiByteToWideChar
RaiseException
GetModuleFileNameA
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
GetCPInfo
SetFilePointer
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
RtlUnwind
LCMapStringA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
IsValidCodePage
SystemTimeToFileTime
LoadLibraryA
FileTimeToSystemTime
GlobalLock
GlobalUnlock
GetProcAddress
GlobalFree
GlobalAlloc
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentThread
LocalFree
WriteFile
CloseHandle
GetStringTypeA
GetTimeZoneInformation
GetTickCount
OutputDebugStringA
FormatMessageA
GetFileSize
LCMapStringW
GetUserDefaultLCID
SearchPathA
WaitForSingleObject
SetErrorMode
GetVersion
GetVersionExA
GetCurrentProcessId
WaitForMultipleObjects
GetModuleFileNameW
GetLongPathNameW
GetLongPathNameA
ResetEvent
InterlockedExchange
SetEvent
TerminateThread
SetThreadPriority
CreateEventA
GetCurrentProcess
VirtualQuery
DeleteFileW
DeleteFileA
LoadLibraryW
FindFirstFileW
LoadLibraryExW
CreateDirectoryW
FindFirstFileA
CreateDirectoryExW
SetFileAttributesA
FindFirstFileExW
GetDateFormatA
FindFirstFileExA
GetFileAttributesExA
GetTimeFormatA
FindNextFileW
GetShortPathNameA
FindNextFileA
GetShortPathNameW
RemoveDirectoryA
CreateFileA
CreateFileW
CopyFileW
SetFileAttributesW
MoveFileW
GetFileAttributesExW
MoveFileExW
CopyFileA
GetDateFormatW
CreateProcessA
GetTimeFormatW
MoveFileA
RemoveDirectoryW
CreateDirectoryA
MoveFileExA
CreateDirectoryExA
CopyFileExW
CreateProcessW
MoveFileWithProgressW
FindFirstChangeNotificationW
CopyFileExA
FindFirstChangeNotificationA
MoveFileWithProgressA
CompareStringW
CompareStringA
GetFileAttributesW
GetFileAttributesA
GetModuleHandleW
GetNumberFormatA
GetLocaleInfoA
GetDriveTypeA
LockResource
VirtualFree
VirtualAlloc
HeapReAlloc
SetEndOfFile
FlushFileBuffers
UnmapViewOfFile
ReadFile
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemInfo
GetACP
GetThreadLocale
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
VirtualProtect
GetOEMCP

user32

SetWindowPos
GetFocus
GetSystemMetrics
InvalidateRect
DestroyWindow
SystemParametersInfoA
DrawTextW
SetWindowLongA
IsWindowEnabled
CreateDialogIndirectParamA
GetForegroundWindow
GetScrollBarInfo
IsWindow
EnumChildWindows
GetWindowLongA
SetFocus
GetWindowRect
IsIconic
ScreenToClient
GetClientRect
GetDesktopWindow
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
SetCursor
GetCursor
GetWindow
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
EnumThreadWindows
IsWindowVisible
CreateDialogParamA
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
MessageBoxW
GetMenuItemInfoA
SetWindowLongW
EndDialog
GetWindowLongW
CallWindowProcW
RegisterClassA
RegisterClassW
DialogBoxIndirectParamW
UnregisterClassA
CreateWindowExA
GetClassInfoA
SetClassLongW
SetMenuItemInfoA
SetWindowTextW
DialogBoxParamW
SetWindowTextA
LoadStringA
SendMessageW
InsertMenuItemA
SetDlgItemTextW
GetClassNameA
DefWindowProcW
DialogBoxParamA
AppendMenuA
CreateDialogParamW
CreateWindowExW
SendDlgItemMessageA
SetDlgItemTextA
DefWindowProcA
UpdateWindow
GetDlgCtrlID
ShowWindow
GetDlgItem
PostMessageA
MoveWindow
LoadCursorA
SetClassLongA
GetSysColor
PostThreadMessageA
EnableWindow
GetMessageA
CharNextA
SetTimer
KillTimer
GetParent
UnregisterClassW
SetPropA
PeekMessageA
DispatchMessageA
TranslateMessage
SendMessageA
LoadIconA
CallWindowProcA
MessageBoxA

gdi32

GetStockObject
CreateSolidBrush
CreateFontIndirectA
DeleteObject
SetTextColor
SetBkColor
GetTextMetricsA
GetTextFaceA
SelectObject
ExtTextOutA
TextOutA
GetTextExtentPoint32A
ExtTextOutW
TextOutW
DeleteDC
CreateCompatibleDC
GetTextExtentPoint32W

advapi32

RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptReleaseContext
CryptDecrypt
RegEnumValueW
RegEnumValueA
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW

ole32

CoTaskMemFree
CoInitialize
CoTaskMemRealloc
CoUninitialize
CoTaskMemAlloc
CoCreateInstance

oleaut32

SafeArrayCreate
VarBstrCat
SysStringLen
SysAllocString
SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
VariantClear
SafeArrayDestroy
VariantCopy
SafeArrayPutElement
VariantInit
SysFreeString
VarUI4FromStr
VariantTimeToSystemTime
SystemTimeToVariantTime

comctl32

PropertySheetW
CreatePropertySheetPageA
PropertySheetA
InitCommonControlsEx
CreatePropertySheetPageW

urlmon

FindMimeFromData

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

ws2_32

gethostbyname

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetOpenFileNameW
GetSaveFileNameW

shell32

DragQueryFileW
SHFileOperationA
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteA
SHBrowseForFolderW
SHGetSpecialFolderPathW
ShellExecuteExA
DragQueryFileA
SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderPathA
SHGetFileInfoA
Shell_NotifyIconA

Exports

Exports

CreatePluginByName
Destroy
YTIPLUGINENTRY

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 708KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/red.cfg
plugins/ytITivo.yti
.dll windows:4 windows x86 arch:x86

dfc8ad5ce89e30f0377dc4c8c06bdd17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\plugins\ytITivo.pdb

Imports

kernel32

FreeLibrary
LoadLibraryExA
GetProcAddress
GetCurrentThread
GetSystemDirectoryA
GetDateFormatW
CopyFileExW
GetTimeFormatW
CreateDirectoryA
MoveFileWithProgressW
RemoveDirectoryW
CopyFileExA
CreateDirectoryExA
MoveFileWithProgressA
MultiByteToWideChar
CreateProcessW
FindFirstChangeNotificationW
GetFileAttributesW
FindFirstChangeNotificationA
GetFileAttributesA
CompareStringW
DeleteFileW
CompareStringA
DeleteFileA
FindFirstFileW
WideCharToMultiByte
GetModuleHandleW
FindFirstFileA
LoadLibraryW
FindFirstFileExW
LoadLibraryA
FindFirstFileExA
CreateDirectoryW
LoadLibraryExW
CreateDirectoryExW
FindNextFileW
FindNextFileA
SetFileAttributesA
GetDateFormatA
CopyFileW
GetFileAttributesExA
GetTimeFormatA
MoveFileW
MoveFileExW
GetShortPathNameW
GetShortPathNameA
RemoveDirectoryA
CopyFileA
CreateFileW
SetFileAttributesW
InitializeCriticalSection
CreateFileA
MoveFileA
GetFileAttributesExW
DeleteCriticalSection
MoveFileExA
CreateProcessA
ResetEvent
InterlockedExchange
SetEvent
TerminateThread
CreateEventA
SetThreadPriority
GetCurrentProcess
LockResource
FindResourceA
SizeofResource
LoadResource
LCMapStringW
GlobalAlloc
GlobalLock
GlobalFree
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocaleInfoA
GetSystemInfo
FlushFileBuffers
ReadFile
WriteFile
VirtualFree
VirtualAlloc
SetFilePointer
SetEndOfFile
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
ExitThread
CreateThread
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
GetStdHandle
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
RaiseException
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLongPathNameA
GetCurrentProcessId
GetLongPathNameW
GetModuleHandleA
GetModuleFileNameW
GetVersionExA
GetVersion
SetErrorMode
CloseHandle
WaitForSingleObject
WaitForMultipleObjects
LocalFree
FormatMessageA
GetLastError
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
InterlockedCompareExchange
Sleep
InterlockedDecrement
InterlockedIncrement

user32

CallWindowProcW
CallWindowProcA
RegisterClassW
UnregisterClassW
RegisterClassA
LoadStringA
CreateWindowExA
GetClassInfoA
UnregisterClassA
SetClassLongW
SetWindowTextW
SetMenuItemInfoA
SetClassLongA
GetWindowTextW
CreateWindowExW
DialogBoxParamW
SendMessageW
GetWindowTextA
InsertMenuItemA
SetDlgItemTextW
DefWindowProcW
DialogBoxParamA
AppendMenuA
CreateDialogParamW
MessageBoxA
SetDlgItemTextA
DefWindowProcA
CreateDialogParamA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
MessageBoxW
SetWindowLongW
SetWindowLongA
GetWindowLongW
EndDialog
PostMessageA
GetSystemMetrics
SystemParametersInfoA
IsWindow
LoadCursorA
IsIconic
IsWindowVisible
EnumThreadWindows
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
SetWindowPos
GetWindowRect
GetParent
GetWindow
SendMessageA
DestroyWindow
GetClassNameA
MoveWindow
GetWindowLongA
DialogBoxIndirectParamW
IsDlgButtonChecked
SetWindowTextA
EnableWindow
CheckDlgButton
GetDlgItem
LoadIconA
ShowWindow

comctl32

CreatePropertySheetPageA
CreatePropertySheetPageW
PropertySheetW
InitCommonControlsEx
PropertySheetA

gdi32

GetStockObject
CreateFontIndirectA
TextOutW
ExtTextOutW
GetTextExtentPoint32W
TextOutA
ExtTextOutA
GetTextExtentPoint32A

comdlg32

GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW
GetSaveFileNameA

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegEnumValueA
RegEnumKeyExA
RegSetValueExA
RegEnumValueW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListW
SHGetPathFromIDListA
Shell_NotifyIconA
ShellExecuteW
ShellExecuteA
SHFileOperationW
DragQueryFileA
SHGetFileInfoW
ShellExecuteExA
SHGetSpecialFolderPathW
ShellExecuteExW
Shell_NotifyIconW
SHBrowseForFolderW
SHFileOperationA
DragQueryFileW
SHGetSpecialFolderPathA
SHGetFileInfoA

ole32

CoTaskMemFree

Exports

Exports

YTIPLUGINENTRY

Sections

.text
Size: 288KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qtsupport.dll
.dll windows:4 windows x86 arch:x86

d2d29e7a7bb2f127f0be43968900bd6d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:1b:23:8d:33:f9:07:a2:01:fa:2d:eb:3e:08:41:dd:f8:68:a4:1c
Signer

Actual PE Digest

1b:1b:23:8d:33:f9:07:a2:01:fa:2d:eb:3e:08:41:dd:f8:68:a4:1c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

p:\d\a\wpyh4-vm-6.hot\recipes\840394494\base\googleclient\picasa39-stable\build\qtsupport.pdb

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GlobalFree
GlobalAlloc
FreeLibrary
GetModuleFileNameA
GetProcAddress
CloseHandle
ReleaseMutex
GetLastError
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetFileAttributesA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
ExitProcess
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

QTENTRY

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
runtime/HelveticaNeue Condensed-20-1.000000-400-0.ytf
runtime/HelveticaNeue MediumCond-14-1.000000-400-0.ytf
runtime/HelveticaNeue MediumCond-28-1.000000-400-0.ytf
runtime/Praxis LT Regular-18-1.000000-400-0.ytf
runtime/Praxis Semi Bold-Heavy-11-1.000000-400-0.ytf
runtime/Praxis Semi Bold-Heavy-12-1.000000-400-0.ytf
runtime/Praxis Semi Bold-Heavy-12-1.000000-700-0.ytf
runtime/Praxis Semi Bold-Heavy-13-1.000000-700-0.ytf
runtime/Praxis Semi Bold-Heavy-14-1.000000-400-0.ytf
runtime/Praxis Semi Bold-Heavy-14-1.000000-700-0.ytf
runtime/Praxis Semi Bold-Heavy-16-1.000000-700-0.ytf
runtime/Praxis Semi Bold-Heavy-18-1.000000-700-0.ytf
runtime/about.fen
runtime/addtogroup.fen
runtime/album.fen
runtime/auto_backup_prompt.fen
runtime/autocomplete_errors.fen
runtime/bezier.txt
runtime/cdchoose.fen
runtime/compacting.fen
runtime/confirm.fen
runtime/confirmsync.fen
runtime/constants.ui
runtime/contactmgr.fen
runtime/customaspectratio.fen
runtime/defaults.ini
runtime/eula.fen
runtime/export.fen
runtime/favicon.ico
runtime/filterdesc.xml
runtime/filters.txt
runtime/fliprtl.txt
runtime/genericlogin.fen
runtime/geotag.kml
runtime/geotag/addmarker.png
.png
runtime/geotag/bottom_image.gif
.gif
runtime/geotag/close.gif
.gif
runtime/geotag/geopanelscript.html
.js
runtime/geotag/geopanelscript_v3.html
runtime/geotag/mm_20_green.png
.png
runtime/geotag/mm_20_red.png
.png
runtime/geotag/mm_20_shadow.png
.png
runtime/geotag/picasa_geopanel_bin.js
.js
runtime/geotag/picasa_geopanel_bin_v3.js
.js
runtime/geotag/picasa_infowindow.css
runtime/gpuploader_about.fen
runtime/gpuploader_advoptions.fen
runtime/gpuploader_confirm.fen
runtime/gpuploader_debug.fen
runtime/gpuploader_download.fen
runtime/gpuploader_file_errors.fen
runtime/gpuploader_filestatus.fen
runtime/gpuploader_instructions.fen
runtime/gpuploader_manage_devices.fen
runtime/gpuploader_onboard.fen
runtime/gpuploader_pinwheel_72.png
.png
runtime/gpuploader_pinwheel_72x2.png
.png
runtime/gpuploader_prefs.fen
runtime/gpuploader_quota_error1.fen
runtime/gpuploader_quota_error2.fen
runtime/gpuploader_storage_notify.fen
runtime/gpuploader_welcome.fen
runtime/imageproperties.fen
runtime/importweb.fen
runtime/input.fen
runtime/missing.jpg
.jpg
runtime/move_database.fen
runtime/moving_database.fen
runtime/newbackupset.fen
runtime/offsettime.fen
runtime/options.fen
runtime/orderprintsprefs.fen
runtime/picasaweb_logo.gif
.gif
runtime/poster.fen
runtime/properties.xml
runtime/pwconfirm.html
.html
runtime/quota.fen
runtime/refresh_contacts_progress.fen
runtime/rename.fen
runtime/respack.yt
runtime/reviewprint.fen
runtime/slingshot/respack.yt
runtime/splashbk.jpg
.jpg
runtime/webexport.fen
runtime/winedisable.txt
runtime/write_all_facetags.fen
runtime/xhairs.png
.png
runtime/youtube.fen
uninstall.exe
.exe windows:4 windows x86 arch:x86

e221f4f7d36469d53810a4b5f9fc8966

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29-01-2014 00:00

Not After

29-01-2016 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing+OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:10:ac:80:67:dd:70:cc:2f:a9:69:c6:6b:7d:16:16:93:5d:7f:f4
Signer

Actual PE Digest

21:10:ac:80:67:dd:70:cc:2f:a9:69:c6:6b:7d:16:16:93:5d:7f:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathW
SetFileTime
CloseHandle
GetShortPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
GetFullPathNameW
CreateDirectoryW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
SetFileAttributesW
ExpandEnvironmentStringsW
SetErrorMode
LoadLibraryW
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
lstrcpyA
lstrcpyW
lstrcatW
GetSystemDirectoryW
GetVersion
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
lstrcmpiW
lstrcmpW
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryExW
GetExitCodeProcess
FreeLibrary
WritePrivateProfileStringW
GetCommandLineW
GetTempPathW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
WriteFile
lstrlenA
WideCharToMultiByte

user32

EndDialog
ScreenToClient
GetWindowRect
RegisterClassW
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
wsprintfW
CreateWindowExW
SystemParametersInfoW
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
GetDC
SetWindowLongW
LoadImageW
SendMessageTimeoutW
FindWindowExW
EmptyClipboard
OpenClipboard
TrackPopupMenu
EndPaint
ShowWindow
GetDlgItem
IsWindow
SetForegroundWindow

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW

advapi32

RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/NSIS_Picasa_Unicode.dll
.dll windows:4 windows x86 arch:x86

dd4d4b4320a71ab0c16c5077ded3ee8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\twbrown-picasa-1\googleclient\picasa4\NSIS_Unicode_v3\Plugins\x86-unicode\NSIS_Picasa_Unicode.pdb

Imports

sti

StiCreateInstanceW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

lstrcpynW
MultiByteToWideChar
GlobalFree
GetLastError
GetProcAddress
FindFirstFileW
FindClose
LoadLibraryW
RemoveDirectoryW
GetLocaleInfoW
CreateProcessW
MoveFileExW
Sleep
lstrcatW
FindNextFileW
GetVersionExW
CreateDirectoryW
GetFileAttributesW
GetUserDefaultLCID
WaitForSingleObject
CreateFileW
CloseHandle
GetVersion
DeleteFileW
GetCommandLineW
GetModuleHandleW
lstrcpyW
GetPrivateProfileStringW
OpenProcess
GetExitCodeProcess
TerminateProcess
OpenMutexA
GetModuleHandleA
GetCurrentProcessId
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetConsoleMode
WideCharToMultiByte
GlobalAlloc
HeapSize
CreateFileA
InitializeCriticalSection
WritePrivateProfileStringW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
GetConsoleCP
FreeEnvironmentStringsW
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
ExitProcess
WriteFile
GetModuleFileNameA
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
SetStdHandle

user32

MapWindowPoints
GetClassNameA
EnumWindows
GetWindowLongW
FindWindowA
MoveWindow
FindWindowExW
GetWindowRect
CreateWindowExW
MessageBoxW
SendMessageW
wsprintfW
GetDlgItem
SetWindowLongW
GetClientRect
CallWindowProcW
DestroyWindow

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW
SHFileOperationW

ole32

CoCreateInstance

Exports

Exports

TokenizeVersionString
addlink
appopencheck
closelink
distrocheck
fixshortcuts
getlicenselangco
installdircheck
movenextbutton
ntusercheck
resizeokbutton
setie7registry
stiregister
stiseticon
uninstall
upgradedirectory
upgradewindow
versioncheck

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 851B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

ec5fddc407d2b4e0a16fc4d786afc555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc

user32

DestroyWindow
CallWindowProcW
SetCursor
GetPropW
CharPrevW
MapWindowPoints
DrawFocusRect
GetWindowLongW
GetClientRect
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
LoadCursorW
RemovePropW
DrawTextW

gdi32

SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
update/LifeScapeUpdater/currentVersion.ini
web/documentation/examples/assets/maketext18.gif
web/documentation/examples/assets/nav.gif
.gif
web/documentation/examples/assets/prevnext.gif
.gif
web/documentation/examples/assets/style.css
web/documentation/examples/footer.html
web/documentation/examples/header.html
.html
web/documentation/examples/imagelistelement.html
web/documentation/examples/imagelistfooter.html
web/documentation/examples/imagelistheader.html
web/documentation/examples/imagetarget.tpl
web/documentation/examples/includedtarget.html
web/documentation/examples/index.tpl
web/documentation/examples/itemheader.html
.html
web/documentation/examples/output_header.html
.html
web/documentation/examples/style.css
web/documentation/examples/targetlistelement.html
web/documentation/examples/targetlistheader.html
web/documentation/index.html
.html
web/documentation/style.css
web/templates/TemplateNotes.txt
web/templates/blackbg/assets/style.css
web/templates/blackbg/footer.html
web/templates/blackbg/frameset.htm
.html
web/templates/blackbg/header.html
.html
web/templates/blackbg/imagelistelement.html
web/templates/blackbg/imagelistfooter.html
web/templates/blackbg/imagelistheader.html
web/templates/blackbg/imagetarget.tpl
web/templates/blackbg/includedtarget.html
web/templates/blackbg/index.html
.html
web/templates/blackbg/index.tpl
web/templates/blackbg/itemheader.html
.html
web/templates/blackbg/preview.jpg
.jpg
web/templates/blackbg/style.css
web/templates/blackbg/targetlistelement.html
web/templates/blackbg/targetlistheader.html
web/templates/blackbg/verboseimagelistelement.html
web/templates/blackfrm/assets/style.css
web/templates/blackfrm/caption.html
.html
web/templates/blackfrm/footer.html
web/templates/blackfrm/frameImageSet.tpl
web/templates/blackfrm/frameIndex.html
.html
web/templates/blackfrm/framebase.tpl
web/templates/blackfrm/framecaption.tpl
web/templates/blackfrm/header.html
.html
web/templates/blackfrm/imageset.html
.html
web/templates/blackfrm/imagetarget.tpl
web/templates/blackfrm/includedtarget.html
web/templates/blackfrm/index.tpl
web/templates/blackfrm/itemheader.html
.html
web/templates/blackfrm/preview.jpg
.jpg
web/templates/blackfrm/targetlistelement.html
web/templates/blackfrm/thumbnails.tpl
web/templates/blackfrm/xLifescape.ini
web/templates/greybg/assets/style.css
web/templates/greybg/footer.html
web/templates/greybg/frameset.htm
.html
web/templates/greybg/header.html
.html
web/templates/greybg/imagelistelement.html
web/templates/greybg/imagelistfooter.html
web/templates/greybg/imagelistheader.html
web/templates/greybg/imagetarget.tpl
web/templates/greybg/includedtarget.html
web/templates/greybg/index.html
.html
web/templates/greybg/index.tpl
web/templates/greybg/itemheader.html
.html
web/templates/greybg/preview.jpg
.jpg
web/templates/greybg/style.css
web/templates/greybg/targetlistelement.html
web/templates/greybg/targetlistheader.html
web/templates/greybg/verboseimagelistelement.html
web/templates/greyfrm/assets/style.css
web/templates/greyfrm/caption.html
.html
web/templates/greyfrm/footer.html
web/templates/greyfrm/frameImageSet.tpl
web/templates/greyfrm/frameIndex.html
.html
web/templates/greyfrm/framebase.tpl
web/templates/greyfrm/framecaption.tpl
web/templates/greyfrm/header.html
.html
web/templates/greyfrm/imageset.html
.html
web/templates/greyfrm/imagetarget.tpl
web/templates/greyfrm/includedtarget.html
web/templates/greyfrm/index.tpl
web/templates/greyfrm/itemheader.html
.html
web/templates/greyfrm/preview.jpg
.jpg
web/templates/greyfrm/targetlistelement.html
web/templates/greyfrm/thumbnails.tpl
web/templates/whitebg/assets/style.css
web/templates/whitebg/footer.html
web/templates/whitebg/frameset.htm
.html
web/templates/whitebg/header.html
.html
web/templates/whitebg/imagelistelement.html
web/templates/whitebg/imagelistfooter.html
web/templates/whitebg/imagelistheader.html
web/templates/whitebg/imagetarget.tpl
web/templates/whitebg/includedtarget.html
web/templates/whitebg/index.html
.html
web/templates/whitebg/index.tpl
web/templates/whitebg/itemheader.html
.html
web/templates/whitebg/preview.jpg
.jpg
web/templates/whitebg/style.css
web/templates/whitebg/targetlistelement.html
web/templates/whitebg/targetlistheader.html
web/templates/whitebg/verboseimagelistelement.html
web/templates/whitefrm/assets/style.css
web/templates/whitefrm/caption.html
.html
web/templates/whitefrm/footer.html
web/templates/whitefrm/frameImageSet.tpl
web/templates/whitefrm/frameIndex.html
.html
web/templates/whitefrm/framebase.tpl
web/templates/whitefrm/framecaption.tpl
web/templates/whitefrm/header.html
.html
web/templates/whitefrm/imageset.html
.html
web/templates/whitefrm/imagetarget.tpl
web/templates/whitefrm/includedtarget.html
web/templates/whitefrm/index.tpl
web/templates/whitefrm/itemheader.html
.html
web/templates/whitefrm/preview.jpg
.jpg
web/templates/whitefrm/targetlistelement.html
web/templates/whitefrm/thumbnails.tpl
web/templates/xml/footer.xml
web/templates/xml/header.xml
.xml
web/templates/xml/imagelistelement.xml
web/templates/xml/imagelistfooter.xml
web/templates/xml/imagelistheader.xml
web/templates/xml/index.tpl
web/templates/xml/preview.jpg
.jpg

Sharing

General

Malware Config

Signatures

Files

e221f4f7d36469d53810a4b5f9fc8966

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8dCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

9c:41:97:08:81:38:61:27:8a:72:40:d1:66:3a:0b:4a:3d:76:b1:a0Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 128KB

.ndata Size: - Virtual size: 196KB

.rsrc Size: 79KB - Virtual size: 79KB

dd4d4b4320a71ab0c16c5077ded3ee8a

Headers

File Characteristics

PDB Paths

Imports

sti

version

kernel32

user32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 69KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 500B

.reloc Size: 8KB - Virtual size: 6KB

afc0276b5cd87f66996699e6e2d2c643

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

kernel32

user32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 232B

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 1KB - Virtual size: 1KB

fc0224e99e736751432961db63a41b76

Headers

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

9c:41:97:08:81:38:61:27:8a:72:40:d1:66:3a:0b:4a:3d:76:b1:a0
Signer

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 128KB

.ndata
Size: - Virtual size: 196KB

.rsrc
Size: 79KB - Virtual size: 79KB

.text
Size: 72KB - Virtual size: 69KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 500B

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 232B

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 851B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 610B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 626B

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 424KB - Virtual size: 422KB

.data
Size: 92KB - Virtual size: 210KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

29:12:c7:0c:9a:2b:8a:3e:f6:f6:07:46:62:d6:8b:8d
Certificate