91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd
- SHA256 91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd
Overview
overview
3Static
static
1FSCapture1...01.dll
windows10-2004-x64
3FSCapture1...01.dll
windows11-ltsc_2024-x64
3FSCapture1...02.exe
windows10-2004-x64
1FSCapture1...02.exe
windows11-ltsc_2024-x64
1FSCapture1...03.exe
windows10-2004-x64
3FSCapture1...03.exe
windows11-ltsc_2024-x64
3FSCapture1...04.exe
windows10-2004-x64
3FSCapture1...04.exe
windows11-ltsc_2024-x64
3FSCapture1...05.dll
windows10-2004-x64
3FSCapture1...05.dll
windows11-ltsc_2024-x64
3FSCapture1...06.exe
windows10-2004-x64
3FSCapture1...06.exe
windows11-ltsc_2024-x64
3FSCapture1...07.exe
windows10-2004-x64
3FSCapture1...07.exe
windows11-ltsc_2024-x64
3FSCapture1...re.exe
windows10-2004-x64
3FSCapture1...re.exe
windows11-ltsc_2024-x64
3FSCapture1...lp.chm
windows10-2004-x64
1FSCapture1...lp.chm
windows11-ltsc_2024-x64
1FSCapture1...ir.exe
windows10-2004-x64
3FSCapture1...ir.exe
windows11-ltsc_2024-x64
3FSCapture1...us.exe
windows10-2004-x64
3FSCapture1...us.exe
windows11-ltsc_2024-x64
3FSCapture1...er.exe
windows10-2004-x64
3FSCapture1...er.exe
windows11-ltsc_2024-x64
3FSCapture1...uv.dll
windows10-2004-x64
3FSCapture1...uv.dll
windows11-ltsc_2024-x64
3FSCapture1...bp.dll
windows10-2004-x64
3FSCapture1...bp.dll
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
FSCapture113/FSCPlugin01.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
FSCapture113/FSCPlugin01.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
FSCapture113/FSCPlugin02.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
FSCapture113/FSCPlugin02.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
FSCapture113/FSCPlugin03.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
FSCapture113/FSCPlugin03.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
FSCapture113/FSCPlugin04.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
FSCapture113/FSCPlugin04.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
FSCapture113/FSCPlugin05.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
FSCapture113/FSCPlugin05.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
FSCapture113/FSCPlugin06.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
FSCapture113/FSCPlugin06.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
FSCapture113/FSCPlugin07.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
FSCapture113/FSCPlugin07.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
FSCapture113/FSCapture.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral16
Sample
FSCapture113/FSCapture.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral17
Sample
FSCapture113/FSCaptureHelp.chm
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
FSCapture113/FSCaptureHelp.chm
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
FSCapture113/FSCrossHair.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
FSCapture113/FSCrossHair.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
FSCapture113/FSFocus.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
FSCapture113/FSFocus.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
FSCapture113/FSRecorder.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
FSCapture113/FSRecorder.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
FSCapture113/libsharpyuv.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
FSCapture113/libsharpyuv.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
FSCapture113/libwebp.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
FSCapture113/libwebp.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd
- Size 13.1MB
- Sample260823-fpf92ashjf
- SHA256 91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd
- MD5 432f2ec866c9a2ad0edf9c0ff0de1a93
- SHA1 2d32b37ecd52504ccaef92f013e0b1a2f894a9d4
- SHA512 1195d9d577ff049afb5ec171b19067d89fb0d241d319b3de20ddb3e215fdca6580d5c5f79ff52a2b78b0f8edde84d1e8950ab847fb9e0f2bfb1b3131390bf8d3
- SSDEEP 393216:xnVxTXpxNBnqHo7Vx3fvvpskHjCtkKbHmGu+eB1nNEsFGJ4hr:VHX7f1DqvkWFutFlhr
- TLSH T168D6335C51A517F480232F283BEBDB7DBC1C311C8946E1E493ACA1E55BB5AA9CDC3827
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd.zip 13.1MB
-
FSCapture113/Credits.txt1KB
-
FSCapture113/Draw.db731KB
-
FSCapture113/FSCPlugin01.dll.dll 319KB
-
FSCapture113/FSCPlugin02.dll.exe 3.5MB
-
FSCapture113/FSCPlugin03.dll.exe 2.2MB
-
FSCapture113/FSCPlugin04.dll.exe 1.6MB
-
FSCapture113/FSCPlugin05.dll.dll 117KB
-
FSCapture113/FSCPlugin06.exe.exe 2.9MB
-
FSCapture113/FSCPlugin07.exe.exe 25KB
-
FSCapture113/FSCapture.exe.exe 7.4MB
-
FSCapture113/FSCaptureHelp.chm.chm 172KB
-
FSCapture113/FSCrossHair.exe.exe 643KB
-
FSCapture113/FSFocus.exe.exe 648KB
-
FSCapture113/FSLogo.png.png 16KB
-
FSCapture113/FSRecorder.exe.exe 5.7MB
-
FSCapture113/Languages/FSC02.fslang206KB
-
FSCapture113/Languages/FSC03.fslang206KB
-
FSCapture113/Languages/FSC05.fslang284KB
-
FSCapture113/Languages/FSC06.fslang302KB
-
FSCapture113/Languages/FSC07.fslang295KB
-
FSCapture113/Languages/FSC08.fslang294KB
-
FSCapture113/Languages/FSC10.fslang288KB
-
FSCapture113/Languages/FSC11.fslang284KB
-
FSCapture113/Languages/FSC12.fslang304KB
-
FSCapture113/Languages/FSC13.fslang295KB
-
FSCapture113/Languages/FSC15.fslang220KB
-
FSCapture113/Languages/FSC16.fslang278KB
-
FSCapture113/Languages/FSC17.fslang282KB
-
FSCapture113/Languages/FSC19.fslang285KB
-
FSCapture113/Languages/FSC20.fslang283KB
-
FSCapture113/Languages/FSC21.fslang223KB
-
FSCapture113/Languages/FSC22.fslang295KB
-
FSCapture113/LicenseAgreement.txt1KB
-
FSCapture113/Portable.db454B
-
FSCapture113/fsc.db8KB
-
FSCapture113/libsharpyuv.dll.dll 104KB
-
FSCapture113/libwebp.dll.dll 492KB
FSCapture113/Credits.txt
- SHA256 232a42e5cef0478141b49a6be9da1f0f0c7c10b76f3c7b72eb9d91222aac034d
- MD5 107fba7548488e7b2442556be048d5c2
- SHA1 8ffd3008e3929c5503f5f7bc4b3126d5e444ad4e
- SHA512 62fce847420a4ac40a1bae163e41e04a621d14775e5e2e7dc3a0a63ffc1ef100f1a92014e7de7307c0f98a6c34210012a4a3992b2ae99d4af4d34520bfb6bf7d
- TLSH T17F41830753E58604FBF36F607D7165E14676BEA26E78C66C23C9418E4AB1A40C430FB7
- MD5 SHA1 SHA512 TLSH
FSCapture113/Draw.db
- SHA256 0a0b62e6f5f3b7824eec81ca33740b6b16d73e2093505ac191f0cd75e4931ca0
- MD5 8f23fae255ff499a0ee3b2a34dcb402e
- SHA1 10a40cf783d16bacbc7fcc9d9d13425aac7d6362
- SHA512 6eb259269c8af00c7174ded2e04246ba07f0d48a8cdd9158a97c38a7d5d55b8c3ace4addb7a08c3b3a6a26f5489b38f6802da8c79522a2251a5565ab75ad92f2
- SSDEEP 12288:fZXeDKBnzkX0lrYlEIEYBzRZCfWI8pjTmqapHpvAkbl03rx7Qns1VUzuvtIsLL72:YQ4kUQGV3I8V+pIqurKsbFtIg74/T
- TLSH T1FEF423D3F3B5784DC56D03B22297602289F38BCD6B06E71D667FE89D2674B148CA1B06
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/FSCPlugin01.dll
- IMPHASH b3edd6daaaef5839333295da0a7b3e29
- SHA256 cf66f927d6d3ebc77d93567c25c9577803e5fb64201755d7773257c4c3ed5d2b
- MD5 f421919da3cb7c44b086210d4d797d7a
- SHA1 cdca33c63f6fae255a6f64bdca62bd8dbc7032dc
- SHA512 bb98bfdbea713ae19da38cb3cfaa4f2c54a5af2c9adc8a80eea415f45eb07005307733589fcf54f407a090e5e6c228fac3ff654f4aa71cb861265d6b41a01472
- SSDEEP 6144:Iu/M8/CrMeIS4iB7ncZzPnRGpk2WQvg1+i/X5NKP5NCs/lwaj2Qy:l/Anc1x2Wj5NKPqs92Qy
- TLSH T199648E2276E380B9CB8A1632652C3BB9B6FDDE4A2FD1D5C38B54F86C1A33541D139139
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c3:26:88:90:30:33:ab:ea:7d:5c:7a:a1:4b:46:f1:7a:f4:bb:f0:e9:01:ab:32:a1:21:6d:2f:11:52:6f:07:32
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Sep 10, 2021
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
01:01:21:b2:85:ba:aa:6f:62:28:52:63:78:1f:b7:a7
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 28, 2021 - Feb 1, 2024
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
138944
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
__CxxFrameHandler
??1type_info@@UAE@XZ
_ftol
_itoa
ceil
floor
wcslen
_onexit
__dllonexit
_wtoi
memmove
_CxxThrowException
sscanf
_except_handler3
strstr
strncpy
rand
winmm
timeGetTime
mmioClose
mmioOpenA
mmioAscend
mmioRead
mmioDescend
mmioGetInfo
mmioCreateChunk
timeSetEvent
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
mmioSetInfo
mmioWrite
mmioAdvance
mmioSeek
kernel32
LocalFree
lstrlenW
GetTickCount
GetCurrentThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
WaitForSingleObject
GetLastError
CreateFileA
WideCharToMultiByte
WriteFile
DeleteFileW
CreateFileW
lstrcatW
QueryPerformanceCounter
QueryPerformanceFrequency
CreateEventA
SetThreadPriority
ResetEvent
SetEvent
Sleep
InterlockedExchange
WaitForMultipleObjects
CreateThread
GetACP
ReadFile
GetFileSize
SetFilePointer
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
OutputDebugStringA
WaitForMultipleObjectsEx
DeviceIoControl
FreeLibrary
GetModuleHandleA
CreateProcessA
SetHandleInformation
CreatePipe
TerminateProcess
lstrlenA
GetCurrentThreadId
GetVersionExA
DisableThreadLibraryCalls
DuplicateHandle
GetCurrentProcess
CreateSemaphoreA
ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
LoadLibraryA
CreateFileMappingA
lstrcmpiA
GetProcAddress
MultiByteToWideChar
GetThreadPriority
advapi32
RegQueryValueExA
RegSetValueExA
user32
DispatchMessageA
GetQueueStatus
PostThreadMessageA
wvsprintfA
MsgWaitForMultipleObjects
PeekMessageA
IsWindowVisible
SetForegroundWindow
InvalidateRect
GetClassInfoA
LoadCursorA
RegisterClassA
CreateWindowExA
GetDC
ReleaseDC
DefWindowProcA
GetClientRect
MapWindowPoints
GetParent
GetWindowRect
GetWindowLongA
AdjustWindowRectEx
SetWindowPos
ShowWindow
IsWindow
GetWindowThreadProcessId
MessageBoxA
PostMessageA
SetRectEmpty
wsprintfA
GetClassNameA
EnumWindows
EnumChildWindows
DestroyWindow
SendMessageA
RegisterWindowMessageA
SetRect
IsRectEmpty
SetWindowLongA
gdi32
SetWorldTransform
GetWorldTransform
SetGraphicsMode
SelectObject
CreateCompatibleDC
DeleteObject
StretchBlt
SetStretchBltMode
CreateDIBSection
GdiFlush
ModifyWorldTransform
GetObjectA
SelectPalette
GetStockObject
RealizePalette
TextOutA
GetTextExtentPoint32A
SetDIBColorTable
SetDIBitsToDevice
CreatePalette
GetSystemPaletteEntries
GetDeviceCaps
DeleteDC
StretchDIBits
CreateDCA
GetDIBits
CreateCompatibleBitmap
BitBlt
ole32
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
oleaut32
VariantClear
CreateErrorInfo
VariantChangeType
GetErrorInfo
VariantInit
SysFreeString
SysAllocString
SetErrorInfo
wininet
InternetOpenA
InternetCrackUrlA
InternetSetOptionA
InternetCloseHandle
InternetConnectA
HttpSendRequestA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
InternetQueryDataAvailable
wmvcore
WMCreateReader
msvcp60
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
ws2_32
WSAIoctl
WSASocketA
WSAGetLastError
WSAStartup
htons
WSARecv
bind
setsockopt
closesocket
WSACleanup
CheckFilter
CloseExtBuffer
CreateExtBuffer
CreateInstance
DVSendData
DllGetClassObject
GetAudioStreamConfig
GetDeviceData
GetExtBuffer
GetWMCredentials
LGInit
MultiLibInit
PGRConfig
ProcessCameraControl
ProcessRtt
ProcessVideoQuality
PutDeviceData
SendIPCameraCommand
SetAudio
SetFrequency
SetLog
Name
.text
Size
212KB
Virtual Size
210KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
56KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
4KB
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=20, productName=Unmarked objects (old),
count=10, id=19, version=8022,
count=14, id=19, version=8034,
count=1, id=10, version=8047,
count=5, id=4, version=8047,
count=8, id=14, version=7299,
count=1, id=11, version=8047,
count=205, id=1, productName=Unmarked objects,
count=1, id=28, version=9178,
count=18, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
FSCapture113/FSCPlugin02.dll
- IMPHASH d4b4a4f7fd3edd016ef0e508830109c2
- SHA256 3940a45fb0f3b5ea4417ad7a5548fa6782d04fbf4153ce293456419bc917f5ab
- MD5 d1ee29e053cb0ee681ca60e5edcd06d0
- SHA1 acea629fcb49cf627e7ae9bad0f309d64a584a92
- SHA512 561137b8c8b79d099a5810c7895999b8db0dbf125fde7adb65e3408c03318acbb9f53decb238354fbfa4f1a8b156458dadaeb9667e866d0ec784381b76188418
- SSDEEP 49152:ThO3Tvd0z70duSDf+8lrERgPDLSl1Wb5YHh:Mdt7rG
- TLSH T17A06276F62A8D36DC12EC37EC19B8B11E43370B51BB3C6E7139006759A469D48EFE261
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f0:99:13:bc:db:85:5c:9e:da:bd:a3:f7:2b:74:a1:a9:5e:5f:99:20:e4:37:93:7c:1b:3b:00:fc:fc:13:f1:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Aug 18, 2025
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
2918352
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
RtlUnwindEx
GetACP
LocalFree
CloseHandle
SizeofResource
GetCurrentProcessId
QueryPerformanceFrequency
IsDebuggerPresent
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
HeapDestroy
ReadFile
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
MulDiv
FreeResource
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
GlobalFindAtomW
VirtualQueryEx
GlobalFree
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
GlobalDeleteAtom
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
EnumResourceNamesW
DeleteFileW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
SetThreadLocale
GetThreadLocale
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW
comdlg32
FindTextW
comctl32
ImageList_GetImageInfo
FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
FlatSB_SetScrollProp
ImageList_GetDragImage
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
ImageList_Copy
FlatSB_GetScrollInfo
ImageList_Write
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetOverlayImage
shell32
Shell_NotifyIconW
SHAppBarMessage
ole32
IsEqualGUID
OleInitialize
CoInitializeEx
OleUninitialize
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
user32
CopyImage
CreateWindowExW
GetMenuItemInfoW
SetMenuItemInfoW
DefFrameProcW
GetDCEx
PeekMessageW
MonitorFromWindow
GetDlgCtrlID
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
FrameRect
MapVirtualKeyW
IsWindowUnicode
RegisterWindowMessageW
FillRect
GetMenuStringW
DispatchMessageW
CreateAcceleratorTableW
SendMessageA
DefMDIChildProcW
EnumWindows
GetClassInfoW
ShowOwnedPopups
GetSystemMenu
GetScrollRange
GetScrollPos
SetScrollPos
GetActiveWindow
SetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
DrawFocusRect
EnumChildWindows
GetScrollBarInfo
ReleaseCapture
UnhookWindowsHookEx
LoadCursorW
GetCapture
SetCapture
CreatePopupMenu
ScrollWindow
ShowCaret
GetMenuItemID
GetLastActivePopup
CharLowerBuffW
GetSystemMetrics
PostMessageW
DrawMenuBar
SetParent
IsZoomed
CharUpperBuffW
GetClientRect
IsChild
GetClassLongPtrW
SetClassLongPtrW
ClientToScreen
GetClipboardData
SetClipboardData
SetWindowPlacement
IsIconic
CallNextHookEx
GetMonitorInfoW
ShowWindow
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
SetForegroundWindow
GetWindowTextW
EnableWindow
DestroyWindow
IsDialogMessageW
EndMenu
RegisterClassW
CharNextW
GetWindowThreadProcessId
RedrawWindow
GetDC
GetFocus
SetFocus
EndPaint
ReleaseDC
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
ActivateKeyboardLayout
GetParent
DrawTextW
SetScrollRange
MonitorFromRect
InsertMenuItemW
PeekMessageA
GetPropW
MessageBoxW
MessageBeep
SetPropW
RemovePropW
UpdateWindow
GetSubMenu
MsgWaitForMultipleObjects
DestroyMenu
DestroyIcon
SetWindowsHookExW
EmptyClipboard
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
AdjustWindowRectEx
DrawIcon
IsWindow
EnumThreadWindows
InvalidateRect
GetKeyboardState
DrawFrameControl
ScreenToClient
GetWindowLongPtrW
SetWindowLongPtrW
SendMessageTimeoutW
BringWindowToTop
SetCursor
CreateIcon
CreateMenu
LoadStringW
CharLowerW
SetWindowPos
SetWindowRgn
GetMenuItemCount
RemoveMenu
GetSysColorBrush
GetKeyboardLayoutNameW
GetWindowDC
TranslateMessage
OpenClipboard
DrawTextExW
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CloseClipboard
DestroyCursor
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
EnableScrollBar
GetSysColor
TrackPopupMenu
CopyIcon
DrawIconEx
PostQuitMessage
GetClassNameW
ShowScrollBar
EnableMenuItem
GetIconInfo
GetMessagePos
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
GetCursorPos
SetCursorPos
HideCaret
GetMenu
GetMenuState
SetMenu
SetRect
GetKeyState
FindWindowExW
MonitorFromPoint
ValidateRect
SystemParametersInfoW
LoadIconW
GetCursor
GetWindow
GetWindowRect
InsertMenuW
KillTimer
WaitMessage
IsWindowEnabled
IsDialogMessageA
TranslateMDISysAccel
GetWindowPlacement
CreateIconIndirect
FindWindowW
DeleteMenu
GetKeyboardLayout
oleaut32
SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType
advapi32
RegSetValueExW
RegConnectRegistryW
RegEnumKeyExW
RegLoadKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegUnLoadKeyW
RegSaveKeyW
RegDeleteValueW
RegReplaceKeyW
RegFlushKey
RegQueryValueExW
RegEnumValueW
RegCloseKey
RegCreateKeyExW
RegRestoreKeyW
gdi32
Pie
SetBkMode
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
SetAbortProc
SetTextColor
StretchBlt
RoundRect
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
CreatePalette
PolyBezierTo
CreateICW
CreateDCW
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
AbortDoc
GetEnhMetaFilePaletteEntries
CreatePenIndirect
CreateFontIndirectW
PolyBezier
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
FrameRgn
BitBlt
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
IntersectClipRect
Polyline
CreateBitmap
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
SetBkColor
CreateCompatibleDC
GetBrushOrgEx
GetCurrentPositionEx
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
260KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
51KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
157B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
640B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
109B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
156KB
Virtual Size
155KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.pdata
Size
169KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/FSCPlugin03.dll
- IMPHASH 1a9b7ed0c25aa8f869fdb9042895171f
- SHA256 d6a2b32f59cd6d567232597c3f440bd338d6914da472372c50ceb73c65564434
- MD5 d8938801e05e512f7e37380db1c1c4ec
- SHA1 cc9d9debc47ed6c5a66753a98ebc889fe03de045
- SHA512 275ba078ed40fc03f4727115c687daf01bb7ba1c8a0d0c8e19d369db459a910790b67184f2587381f7bccbd605075bbf346c7023d188ec6c0bbfd94eb0eafd8b
- SSDEEP 24576:B1+Sus1HRBOcDtwCpFf4fMaJj8C7hkEcw32Ig1BJS/AcOWdg0DZMK0jwWKrxaLa:9JzVAjj8uo1nSocOsDZMo/rxn
- TLSH T17EB54A23B384643FC05F1A3A7637A754D9FBAA6127168C4B57F0088C8E355892E3E6D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:b6:cd:d0:35:db:5c:d8:40:94:91:eb:3e:41:d6:26:fe:52:c5:4c:50:0f:52:6d:f6:6f:f6:fb:67:93:c3:80
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Aug 18, 2025
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
2001456
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetACP
LocalFree
CloseHandle
SizeofResource
GetCurrentProcessId
QueryPerformanceFrequency
IsDebuggerPresent
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
HeapDestroy
ReadFile
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
MulDiv
FreeResource
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
GlobalFindAtomW
VirtualQueryEx
GlobalFree
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
GlobalDeleteAtom
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GlobalLock
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
EnumResourceNamesW
DeleteFileW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
SetThreadLocale
GetThreadLocale
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW
comctl32
ImageList_GetImageInfo
FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
FlatSB_SetScrollProp
ImageList_GetDragImage
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
ImageList_Copy
FlatSB_GetScrollInfo
ImageList_Write
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetOverlayImage
shell32
Shell_NotifyIconW
SHAppBarMessage
ole32
IsEqualGUID
OleInitialize
CoInitializeEx
OleUninitialize
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
user32
CopyImage
CreateWindowExW
GetMenuItemInfoW
SetMenuItemInfoW
DefFrameProcW
GetDCEx
PeekMessageW
MonitorFromWindow
GetDlgCtrlID
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
FrameRect
MapVirtualKeyW
IsWindowUnicode
RegisterWindowMessageW
FillRect
GetMenuStringW
DispatchMessageW
CreateAcceleratorTableW
SendMessageA
DefMDIChildProcW
EnumWindows
GetClassInfoW
ShowOwnedPopups
GetSystemMenu
GetScrollRange
GetScrollPos
SetScrollPos
GetActiveWindow
SetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
DrawFocusRect
EnumChildWindows
ReleaseCapture
UnhookWindowsHookEx
LoadCursorW
GetCapture
SetCapture
CreatePopupMenu
ScrollWindow
ShowCaret
GetMenuItemID
GetLastActivePopup
CharLowerBuffW
GetSystemMetrics
SetWindowLongW
PostMessageW
DrawMenuBar
SetParent
IsZoomed
CharUpperBuffW
GetClientRect
IsChild
ClientToScreen
GetClipboardData
SetClipboardData
SetWindowPlacement
IsIconic
CallNextHookEx
GetMonitorInfoW
ShowWindow
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
SetForegroundWindow
GetWindowTextW
EnableWindow
DestroyWindow
IsDialogMessageW
EndMenu
RegisterClassW
CharNextW
GetWindowThreadProcessId
RedrawWindow
GetDC
GetFocus
SetFocus
EndPaint
ReleaseDC
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClassLongW
ActivateKeyboardLayout
GetParent
DrawTextW
SetScrollRange
MonitorFromRect
InsertMenuItemW
PeekMessageA
GetPropW
SetClassLongW
MessageBoxW
MessageBeep
SetPropW
RemovePropW
UpdateWindow
GetSubMenu
MsgWaitForMultipleObjects
DestroyMenu
DestroyIcon
SetWindowsHookExW
EmptyClipboard
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
AdjustWindowRectEx
DrawIcon
IsWindow
EnumThreadWindows
InvalidateRect
GetKeyboardState
DrawFrameControl
ScreenToClient
SendMessageTimeoutW
SetCursor
CreateIcon
CreateMenu
LoadStringW
CharLowerW
SetWindowPos
SetWindowRgn
GetMenuItemCount
RemoveMenu
GetSysColorBrush
GetKeyboardLayoutNameW
GetWindowDC
TranslateMessage
OpenClipboard
DrawTextExW
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CloseClipboard
DestroyCursor
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
EnableScrollBar
GetSysColor
TrackPopupMenu
CopyIcon
DrawIconEx
PostQuitMessage
GetClassNameW
ShowScrollBar
EnableMenuItem
GetIconInfo
GetMessagePos
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
GetCursorPos
SetCursorPos
HideCaret
GetMenu
GetMenuState
SetMenu
SetRect
GetKeyState
FindWindowExW
MonitorFromPoint
ValidateRect
SystemParametersInfoW
LoadIconW
GetCursor
GetWindow
GetWindowLongW
GetWindowRect
InsertMenuW
KillTimer
WaitMessage
IsWindowEnabled
IsDialogMessageA
TranslateMDISysAccel
GetWindowPlacement
CreateIconIndirect
FindWindowW
DeleteMenu
GetKeyboardLayout
oleaut32
SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType
advapi32
RegSetValueExW
RegConnectRegistryW
RegEnumKeyExW
RegLoadKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegUnLoadKeyW
RegSaveKeyW
RegDeleteValueW
RegReplaceKeyW
RegFlushKey
RegQueryValueExW
RegEnumValueW
RegCloseKey
RegCreateKeyExW
RegRestoreKeyW
gdi32
Pie
SetBkMode
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
SetAbortProc
SetTextColor
StretchBlt
RoundRect
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
CreatePalette
PolyBezierTo
CreateICW
CreateDCW
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
AbortDoc
GetEnhMetaFilePaletteEntries
CreatePenIndirect
CreateFontIndirectW
PolyBezier
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
FrameRgn
BitBlt
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
IntersectClipRect
Polyline
CreateBitmap
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
SetBkColor
CreateCompatibleDC
GetBrushOrgEx
GetCurrentPositionEx
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
27KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
157B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
84B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/FSCPlugin04.dll
- SHA256 be7fedf3abe163c3c4ac2610780bfa99d7164c61b1517d6a883fa67f33331baa
- MD5 cb21f86c66c5e8ce4f8db284a60b0261
- SHA1 1c8f025d41d72cc99fc364829c35ef4849980ab7
- SHA512 bb42fbc4e835977eac3ac4c4ff7d75d8a8205ada15cbef761fa2d6a7d021c244f3d0180f8a6110d290d30a2989c46956033df8a4a1979d5983fc09b2f9e6afb7
- SSDEEP 24576:wfjAQHIJuWVA12WaGKxekwjRJ1e/x6j+EclGQHjg8qTKoYZW0pcmm/54WEW10MZG:TKhLx1kwj5emgpvU00SWxiMUP
- TLSH T1E2756D31F182843FC4731B74AD1B56D49826BB902E386D5B3AF82E5CBF396417D1628B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6b:f1:e5:fb:ad:2d:2f:c0:1b:9a:07:f1:52:16:29:e6:f2:b2:07:ad:92:f4:69:51:f4:e8:4a:fa:d5:6a:aa:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Jan 15, 2025
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
1467120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
30KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
36B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/FSCPlugin05.dll
- IMPHASH 705fa014439cda3c5bcd5fb11e6f338a
- SHA256 3d2877a8d739f682fb5323c00d568483f8c878c6ac745de5f0d0caa7ffa3788a
- MD5 70c3f6892684641080c6ffe2f32b9bda
- SHA1 cbb401c44a17e85e54e73b0c716cd5e819ff6421
- SHA512 d1341d4e190ea4109a15a99e4119b2559c0d330df43ab2ed6605f454e9f7012fd42fa75dde9a8290c366fbf50b4d44d36548e35568bc510b974fa4cfe47f7f30
- SSDEEP 3072:yuJnXnJMBIrVDtuUFAWoULBRmBrv8qKxs:yYXfpxuUFZDBR8h
- TLSH T145C36C227254C032D1DA15398879BB65673BB9A29FB488CB7BB807BD1E603C15F34397
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
03:33:1e:28:ee:89:33:3d:1b:b6:80:98:d5:34:c3:e3:1c:2b:b1:cb:ab:02:65:15:bb:82:09:3d:ec:20:3c:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Apr 13, 2023
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
01:01:21:b2:85:ba:aa:6f:62:28:52:63:78:1f:b7:a7
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 28, 2021 - Feb 1, 2024
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
5
Entry point
28015
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\hesha\OneDrive\Desktop\FSCPlugin05(VirtualAudio)_v1_09\Release\FSCPlugin05.pdb
kernel32
GetModuleFileNameA
DeleteCriticalSection
GetCurrentThreadId
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryW
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
GetCurrentProcess
EnterCriticalSection
InterlockedExchange
GetVersionExW
DisableThreadLibraryCalls
lstrlenW
GetProcAddress
GetModuleHandleW
GetTickCount
CreateThread
CreateFileW
WriteConsoleW
SetStdHandle
GetLastError
SetThreadPriority
MultiByteToWideChar
LeaveCriticalSection
Sleep
InitializeCriticalSection
lstrlenA
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
IsValidCodePage
GetOEMCP
FlushFileBuffers
GetACP
GetCPInfo
HeapReAlloc
EncodePointer
DecodePointer
GetCommandLineA
RtlUnwind
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
HeapFree
HeapAlloc
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
advapi32
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW
ole32
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree
CoInitialize
CoCreateInstance
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetAudioHZ
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=158, productName=VS2010 build 30319, version=30319,
count=104, id=170, productName=VS2010 build 30319, version=30319,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=118, id=1, productName=Unmarked objects,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=46, id=171, productName=VS2010 build 30319, version=30319,
count=2, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
FSCapture113/FSCPlugin06.exe
- SHA256 c41fa438424ecb6d8ef579bea1336212f32f68290e41ce46abcdb30cb8abb6ee
- MD5 889aab202245e64d3c025b24a02a2589
- SHA1 e642244bd404cecf15409b8e5813026dff4b1360
- SHA512 a00430eb62839b901b0361dc173c1007a4affcfb77208712e9b39ba5f2df2f8f81a3334f4558b79ea268d8ebb039b34c980101d48654b026c94f5b0765492e24
- SSDEEP 49152:zsKGl/H9pqT9/OGN/gqH+AWl6RneMVEwJgHMgJB2hnTXTJ:zW/H9pqPg4WlYnVJElqhx
- TLSH T130D56B25F3428437C0631B38DD1B52A96529BF202E3899877BE83D5CBF797907929387
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
88:d0:06:71:28:af:62:f5:c6:ea:ca:7a:ae:d1:be:86:77:1b:c8:37:55:ff:a1:30:d3:14:9a:12:d6:8a:76:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Jul 29, 2026
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
2583336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
99KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
35KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
36B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/FSCPlugin07.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fe43d2a447eacbda956728ad75b85c4743d406389c0354f3d81bbb0dfb4a7d44
- MD5 e3ef14ed122068dae0aeef89db996513
- SHA1 32ce0bee51fb8ff7e02c7917cb06d72dabdd0fcb
- SHA512 fed0bd0cfc1f5272a62ccfb6b8127b272d10d942d2dd8505ea61685b50426aa5c167117060a627f19649a672721f824018dfda1b610ebe740694eaf7445e9371
- SSDEEP 384:gGSRg3LRNHTitQa6anmoNsaaU9JGnKUDzE6/L8+IYix6wEtiyAM+o/8E9VF0Nyg0:gp2LROLqX/ATYixpFyAMxkEWC
- TLSH T11DC26CADA6A8E866CC3F4E7278C155251B71F7930E50C7A25F4FC6D04F7238326652E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0a:72:0d:9b:d9:6b:6b:36:7d:df:73:12:94:4d:0e:34:57:23:d5:40:fb:c3:79:54:d6:a7:6c:9c:73:e2:4c:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Apr 16, 2024
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
20642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\hesha\Desktop\FSCPlugin07_V1_035\FastStone.Ocr\obj\Release\FSCPlugin07.pdb
mscoree
_CorExeMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FSCapture113/FSCapture.exe
- SHA256 1a111d3ef9b3c4432c0436b76e5e8939c6dbddbee7bdf630a25f06cc0b50f972
- MD5 51dbe5e71d61d3f0a270f151e1104230
- SHA1 a223f405533eb54a356bff2a37aca406f49515f6
- SHA512 f1f94a5743dc7b00d26418200697b7002d6e423a724c23a398589712ad02e91a2883b16ab4061ff8a12b1c8f30d01b89cacc20bb0ed85984b72aad2ca294c531
- SSDEEP 196608:lzAkcpD6NIWShgFf7MCireh3IQKKgzCpm3JdmrUtKjmmqM:lzA1D6TFfUQNgOmKUtAmmqM
- TLSH T170767C56B252843BD0274B38DD1B83E95929BB242F34968B7AE42C5C7FB934179383C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
15:52:fb:54:aa:d6:20:10:b8:7b:99:4e:f1:2d:cc:67:81:ee:84:c6:9b:45:57:1d:55:83:7e:f2:3b:1a:9e:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Jul 29, 2026
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
5272676
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
48B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
217KB
Virtual Size
217KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/FSCaptureHelp.chm
- SHA256 419f766cd3c22e1f6e5a506d655eb7037ff9701137251ffbd045eeef29f164a4
- MD5 3ff07c9db0b12f66b61a4b3195f8d8de
- SHA1 357e8b07a5a820e49d9ac4520a7dee2878e1574c
- SHA512 16f3c7db8b4925da767b8a775dcc6498d77833ae4d5fd20c24f4b0d063cdd28e57894566c2a18afeaa533463be4e5a6e5bfa8fea4c3ebcc52de9fdddd98bb84d
- SSDEEP 3072:hDb+gB0Ews3HNuRAEVkBwEypB15/NaTt1lVXnSvwOcrFah+VJEU0ZJTervo:hDHB0Ews3H+xvOt1l5SvwldJEUEerw
- TLSH T16E0412BA35C92206DC5890787ED047B1E95FDD01E9AE3793832F2F4D0EACE201D6596B
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/FSCrossHair.exe
- SHA256 1addda69512a0d742d35ad227bdd9d5eb7c6f370cd78864cc76c5bfe4b952abf
- MD5 ac247a14aa2e9163fe5637425ff2726a
- SHA1 ea005c886bdf4196b0da24b47d767b45884c1e6e
- SHA512 d2a5628a1c308af8ce602ac2a9a8cde4c4f259c077f60b7b157c8226b02229456546595219237d79aaa345b1c23b378b22a1514d42ae7e8eb9b80880b1276862
- SSDEEP 12288:WTzlAMnFwfF1uujrdiXIsEgwo9aaZkTcw2BLmxyOSILecVGjGEeed:WT/n1srULEg5WUBiIy
- TLSH T1CBE47E62E2A14837C1732538AD4F5768AC3ABE112E28B9467BF55C4C5F397607C3A393
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ca:03:4d:d8:0e:c5:c1:be:df:64:e3:46:89:4d:79:50:c9:85:8a:97:b2:66:6f:0a:e8:2d:c1:d6:d5:32:76:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Jan 15, 2025
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
567676
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
551KB
Virtual Size
550KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
12KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
36B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/FSFocus.exe
- SHA256 6a42df7f1328611028566f40d48d36fd59cbc2de9042e8f8d7832d7c20a3eb73
- MD5 99a03fb8c4773ee7f14d8bf3a3eb9e55
- SHA1 445e70166938c013a095b082bc445080928a8d8c
- SHA512 0050c7ded8a9f18507b25dff26cf8089f839c7d5acb46fdbfcdb41dd56ce86fb37d8455e5bf5bcfbe655adf8e315bab81b45c73d36f0537fc8d62b35e4ecb99f
- SSDEEP 12288:EasyrVmeeTEuSjwlBWz4u/LZdSLiKYUBSixDcSDeBQhQ4G:E8VmTEw3Wz46saIPeBWQZ
- TLSH T1DAE47E22A2A15837C1332A7CAC4B5768AC3ABE112E24B5476BF55C4C5F397917C3A3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:c8:ce:19:de:fd:e0:60:d9:52:2c:47:4b:f0:ea:c0:7d:dc:e3:a3:52:fd:84:be:d0:6d:77:f4:cf:4a:13:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Oct 10, 2024
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
572876
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
556KB
Virtual Size
555KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
12KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
36B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/FSLogo.png
- SHA256 15da9d859193790bc08aaa1c88cb61e318fc8e90d8d37d72a5884a028887a898
- MD5 d03a70c659c1b548ee2076d3e937cee6
- SHA1 296dfefae326199d39e2b21280d3ce2315f8c5c2
- SHA512 0b23d90eff56642db7e96a475fe350ca555c5cedd118fe01a8224b0e85fa908ac4b06affbafa91e0b7a760f9780c9d8683ec773e2ca7935f15d7dcc412b69fa9
- SSDEEP 384:UaHshj5NpHFgERfllmpvRxNL0ldMRVTPcP1VWyg+ag:9GzCERtliJxNL0ERVDAVpag
- TLSH T15D72E1645EA50472AC1B5C123125E112BA3F0F8F1ACF876FCCF560E16FD58E8F2A6A15
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/FSRecorder.exe
- SHA256 b72bac8e783a9d320811d25468d8970f9ec3bf4e89a35ad13b17d30382036a15
- MD5 dbd19342590a353e59867d650a8c117c
- SHA1 a26c5c07b2a37fa8deaf6787f26b35bc54fc8fd4
- SHA512 2a0bdda18a2352c6524ece7711508547683bc57eb4659f27c9d7f9cd284a7692c4cd5baa9d8ffd5d11490d6d0205a83340046fc1bd60fe711025a3823c233934
- SSDEEP 98304:84h0Li9KB755fABgZyDI1DdzTpKjQFJg7aaAWEEVBDVvv+2CuzPPNA4:nki9KF4CyDCDdsjQg2aACFVvv9CgPNA4
- TLSH T151565A25F642C42BC0631F38D91B97E9A529BF202F34664B3AE83D5C7F797813925287
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
52:60:c4:d3:d2:ff:53:42:dd:7e:fa:db:85:77:f7:40:84:eb:b7:0c:3e:fe:0b:22:55:18:1a:85:11:e3:16:15
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Jul 29, 2026
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
4502512
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
106KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
48B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FSCapture113/Languages/FSC02.fslang
- SHA256 a26cdc5412f997fb48afce9dd5163b8460d63bd806f7bc6dab34ef2fe63f040d
- MD5 fef1201e70651668844a384fbb28f1b6
- SHA1 9712fbac98e49a2fdecdb7ced28bf83c678470d7
- SHA512 80f2683fde56e28b930042249f94f56e2683df6a0af965fcb7a2d2ac3877f61f2d7674d6d4b4b9fa9828c33661ec5976b38a9e8ad8e79946f695ca238b25a83c
- SSDEEP 3072:jjZfRI50115Wxn3Id57YIjePuc6eQRhzsbk2zb6rI79gKCLmpr7Y/o:jNdbNSYi9
- TLSH T1F224F84626300A94D0EB8538E0E2551A5F77B7F8C4FAAB668CC5748432D627B237F71E
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC03.fslang
- SHA256 e077eb154f5a8524c64555b7ba382aabeb191eba04c0196b904071066885177c
- MD5 5e9b364caba7ef483fe2cc584b890f76
- SHA1 559283e9d421f5f00f02138d9ccaaf534410e03b
- SHA512 e0f42ed39435650cdc41067232db1cbe542f3d96b16689dce05b23beec3ce8cae67980b1d566acc11304463d4209f7af41ad536b748e1281d8ad480a8e4586ce
- SSDEEP 3072:CEhGzK5G7FhnmAYjK6FDft6Ia27xZPlf0P9kmL4ioiqlMzB8xKYrCIyHL3:D7/IEbxqj
- TLSH T1622418462A300B54D0AB053CE1E3195B2F77A7E8C4BA67668CC5B4943293277336F76E
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC05.fslang
- SHA256 1a1f1085b54736a3d9a829c30171f26d2a2a5595b0590e09c3749c95c9bbd9ee
- MD5 c130762b7f184fcfe0244223a7bc62f8
- SHA1 d6bbc3431707ef7d1d1f67dfa727226ede7b39b7
- SHA512 4d98f3e25deeb88a75ce9a59914f03d08e4880b2930c66e5609a21f04ea8062061ffa01143c4f86e514ae34ecc4137edbf85c9ff134426ff686f5d5e833415d3
- SSDEEP 3072:5Ogq/rhAoe/spdGX6e2mwahjfQZZY+Sh1w86D2al+h21fq7EAfJS66J4YW66sWfu:2OR0qMa/gEXi
- TLSH T17854504123F40608F0F32B39A9F216594F77BEE9ECB5D25D0580219C29B2791AA7E737
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC06.fslang
- SHA256 63f159a0884830b99554c936642b1f41b4d84dd6b25cc8aeecfafcb9ea672307
- MD5 94e135c729327528cf368de2169d0d96
- SHA1 648284e6cdf28084cb23a3278a3e1c5e228bb3be
- SHA512 2a2a63d134a4e942169d8b4e7919a5fd977e2d63cc1bdb1c36eb7f0c18fcd5f370a0c23407c1517e06ecf5c0c7dc31391993fd87cf57c67412d59b60719ab912
- SSDEEP 1536:JT2MEeCjZeMlxkLx1OuU9Lw7lxnTG+F/Wnt4OClRXbbS+pAXK0vmYOHxX7pnAX/S:d2ZbmxEpU79F/i2bFpAXK0voLpAPpdVk
- TLSH T19C64D84163F80644F2F37F39B9B611194F3BBEDACC79D21C0941209D29B2B649A6A737
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC07.fslang
- SHA256 bad051d5fe4abdaa37c0f63433302a7380b3ad253ec36cb6268adf0572f456be
- MD5 ebd0a91039a315203dc6056c92cee322
- SHA1 0fcc2cae8724a590cb66f2524018bff95345c931
- SHA512 249866de6fcb0577549065c84ed3d2c49ec71229741a8f48a18a5b8e5f0aba77a3780356bd4a9bdd67b1229487432cc26bc98acaaab96d92d4e2a60ca3ba2559
- SSDEEP 3072:QVVqx/R0BHw6kTaol8JIbwbVC4nIYS9V+QC4VkSk+aMv1CyqAWPY5aTsNQEh1KeP:sLtT+qIQbFH6
- TLSH T13054714113E40618F1F36F39A9F211595F33BFE99CBAD65D094020DC29B2B61EA3A736
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC08.fslang
- SHA256 695938cde76ed46e1ee63feda8f28297265c217b07c7042a47970799fb003a2e
- MD5 242973230fa978ecd56fbfd7bda896cc
- SHA1 17f64c63d9ee5787b8585c8c6ceb6e37212cef4b
- SHA512 dba59fcc398a7dbdc503783c871fa6fa6d9c61cf76f0fa250d8e6bd81e330efc8bea1a9bcf3ee4ce99a9fe510548cf053d7c5add6f39bab953e22ada62a622c0
- SSDEEP 3072:rEiOSrRvV88mbHcNG8T0mFqVZHf5az4Is1zy0OmTgPYCMYIstM:QibM8mVfmFi+UIv0fTgPIF
- TLSH T19354104123FC0A44F1F36F34B9B216194E3BBF99EC79D21D0581209D28B2B65AA79737
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC10.fslang
- SHA256 b3e90dcb8d08ffcaa8a1904ba811614706531479c7f8bc266d7a3c72d98d82be
- MD5 436ba1152d21458548c838209b699993
- SHA1 1bb98faf40d07baa80d935ec6d981ae37a283ff7
- SHA512 051f956b603042da4fcd6266bd19d4f923d284613121bbc69814e25a83b0f5d274a859b1bdf13363df97714eca50e6eb22169e426b2369550c7b87c931a4ee18
- SSDEEP 3072:uWzdiyBQKgRWuAcIaYByUS5M5IXdm1zH0ZawJ:s5WrcIa2ImEB
- TLSH T19454A64123F00650F1F74F3AA5F222594F3BBEB5E975D29F1880604826B26E5A779337
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC11.fslang
- SHA256 540312184442a972b74e30745e8ae8c13ba67237b1a6f4073ec26717211acac0
- MD5 3238d643f2472fb7ead9d1a3f2a9d4eb
- SHA1 9603d2524a8183b48a88a228fcc23ab5bfe96d75
- SHA512 c68a021402290f8ddad3eede838a27ce455a4c6d0f8dc99b3be32a324ae05c340d0ba5ae45ddabc0f0c361d1a699eae16f2a191d3f62adb8df5cbbef7744b330
- SSDEEP 3072:Y6NLvTAAj9HG5B5ASah7Q3hqGpAWXFfjokc:7c51aKqUU
- TLSH T11F54730FFA385250E065C1342F928DD70AB7B794536A56D6CA8F3CB8605D236332A7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC12.fslang
- SHA256 e24d2f022f6723edef8c9639606eaa16447fe8361bb2edbcf809317c42ed7e47
- MD5 320301799611461950419a4b8b8f546e
- SHA1 2d1045159084ba89cb75f1080f882cdd14b32e9d
- SHA512 a704235825ece179b64dae205a5e00b01023fbe56eb8eef8be5847e4f59961163f524465bf9f46509660808e84939ae9f98637fd32cb7b13678007ac9afa07f3
- SSDEEP 3072:ti+IHWq77l7nb7SYUmLs+XbaqK7Oy4TuCUzFc+hm2y7fa8iUob/HbKT2nKGcTZay:ti+IpVUmLJbY4Tu91m2yvKK1ZaMl
- TLSH T14F64E84127F90644F1F36B39BAB212598E3BBEE5EC79D21D4150204D1CB2F55AE2AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC13.fslang
- SHA256 21302f571a6e7f0e206669065f7b1234ba1f712e09b9366204aefd6ef978a899
- MD5 a1f333b00556f2d0bae31e53d6ce5200
- SHA1 d7d22a5a8599cf951d8b8c9c4204e369162428c6
- SHA512 04765fec3026bc0e85589cd4aaf5f6de8de49d3f82fab6ca5460c2b644e98920e47b9cc2b7515c1d7fb9a5576789d7b0068d02642c2659fd4bcb220b8b19366f
- SSDEEP 3072:lfjLd5ks8kKfRD1bcgR9qTFTLDBy64h65Lrn3mgknwWjUVeHo5y4EuI0lkOFNmO2:zWjUVeHo5y4WJ/z/ujEpB
- TLSH T12954208122FC015AF0F78F367CF1515A4A37BEA4AC7DD21D8881218C3AB6691D679B37
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC15.fslang
- SHA256 80427ae70b4471b34dd249d6a564771eea01664ac350fc3ecac692d610354cac
- MD5 e12611ecb6c1c5bd0dafaa4e13ba24f8
- SHA1 d486976e49aeb9185da2a8b9b717d8a78c4f9cbc
- SHA512 3757d1c95787e455260d0a9104ca64462a92b9cb816abf2ac1a9988680251ca0951e4beac1fa0f040897e94eb66859ac8715684d87e51c72b9133ef6b4e99875
- SSDEEP 3072:fcHMLiOdP9mbmTvcE0Ri2qX17gXTsM5MKF+HJ+d4QjU46gA6toQXTaqqeOZFitL:qpji+dPj7q98
- TLSH T19824088725300690E0A20538E1E3176E9F37A7D8C9EB9B56C9C570D432A327673AFB5D
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC16.fslang
- SHA256 8f2082a15537950d25c0d285468c8e85e40a7ab47aa80edd8a43bab2c5feca4e
- MD5 87168bad88fce8193fd36cb2cf3597e2
- SHA1 860e591126bc278f59308715f0faf90f16f53d64
- SHA512 aa2278f69e3009a4cab7482c629b81ea8140c8de9d6029e18918cf652a33c21b9f4439bb34312926ad6bbffb14224231efeef6d7690abdef97cd962924d72135
- SSDEEP 3072:Es0TFO0HrNvFnWX3X04lA/G7ZaGUfIrZnCSVDb30OAG0aReH3OzKaQjo8VcWri2k:yr630ald0Tkmk
- TLSH T11854640212B80684F1F75F3AB9F205664F377EE5AD75D31E4491228C29722E1B6BA337
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC17.fslang
- SHA256 a1ececa899fd3c1c9229c136ca88a25d796fa06f7d3aa535202145d7097bb4c3
- MD5 634f5105df827e826ea075779d961cb4
- SHA1 34b325341dd03d9417ec1e81f2904236aff07241
- SHA512 07e4a14fffddbffdeb162a109f69a18e278d9fd86ff987f4a72a16e4cbdf547145af48ffde502d318c434d597b3603a54e433586d6ad5b3a560dfa53dc951c4b
- SSDEEP 3072:DmSfPuFFOT2QKle8rR8iTXgEL/DTAYhBadkyyAt4jPUheeiIgX/sX+B4:DHiLhrVUD
- TLSH T1FD54414227F81628F0F34B357CF216550E77FEE59CBAD61D0A41208C29723A5A6BA737
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC19.fslang
- SHA256 b0baec12e8e44e1ce944f8866892243010a22864d9cbb66b860bad61c37bce4a
- MD5 fe8b624d474877c47f793d7bd8e53a23
- SHA1 aebff706489bdc519f4afa372af6b2493a31b5e6
- SHA512 194337996a91bdeeff7d6c22c44301aca9da8ee08e75e58179d121e9682b64bdb3bba02a7fb5ff71d26be07780c2641fb9b5572e135636ced6675553291a8323
- SSDEEP 3072:iFPeX1gA751yIw6Dg+XO0TGxUW13ttyt5lES:n3yIO0qvWR
- TLSH T13654920FE9385610E495C1759EC345D70BBAB79443EA97C4DA8F3CA430AE239332A6D7
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC20.fslang
- SHA256 18d9315e78dc03c05958db9616c12083f92d6cf7ddfb9cba53a21dd2b9a4c1f5
- MD5 f77ed91e7aa68503607417537d3a7dfb
- SHA1 8756761e4da5e5cc13f296a790374e225def7a5d
- SHA512 9ed6a8cb27c91e1c53524f88331c41e0e5f847029665453b73bf383ceaa936a09d0024e41e6ad1bfa27f464946b93dccdccc15a2f7c35093a663b86fc2b1cb32
- SSDEEP 3072:vy8uShgk1XV689tbCLXgM6iFZrJlcoqdb6p7YlomqznS4VzxPrpedo7RRJ5ugU4:iNjp7Pd2C
- TLSH T1BA54504FF4385650E151C2356F9356E70BBAB790936A27D68A8F7C98305E231332A7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC21.fslang
- SHA256 7dea7320998214368a947e62be5f3da85318d77016c85c424029ad51a6fdae59
- MD5 d0edcda1324abbedb0c67395a8ebe19e
- SHA1 9b0e066668e66b9f3d675ca1e8fd8fce98df87b8
- SHA512 70b9c7f9d11b0d6e86f98f7a19798a6c2b83356401bb4ff588b9ddea4d7c4730d60d5f584f01cd6be9f888c5858415a18e79dd1d58d80740e4cc8830bb4e2e8b
- SSDEEP 3072:vNXQNADvhPmu682KQeW5aWid9G9SP6l5RNGTCNLY22p2JT4WimZdJJOfN7BPyK:MuRWKywCy+Nt4WafNj
- TLSH T18024C78A35300A48E0E64579A0D3346A1F77FBE8C4FBAB66488574963193266337F73D
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/Languages/FSC22.fslang
- SHA256 52dd1a410e0cc5e49c4740a4f4ca5e599192ce313ae14dee960fc9494beba974
- MD5 29c56e4a0db37296b7159678213949b8
- SHA1 a3f7ed2668befd43aad4a89eb17b005f65105d67
- SHA512 8b2e81a6298b6fb3858ac400e2d65b2c7d3345569f4f88d7f4d54cdf82b88e41bc78e4238cc70017bb1a5d469e8ad9471d435109c56b72a135c736b4a2c20d61
- SSDEEP 3072:on7XQA4QTqWoPnEWrPqRPJldQcWBZaMondma7JpBzhZl4rpBjJ4IDtweq:4fUf2K0
- TLSH T1C1541B4167FC0644F1F36F79A6B622164F3BBEE5EC7D921D005020582DB2B60AA6E737
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/LicenseAgreement.txt
- SHA256 c791115364c5d399ea2f9b98d696ef9998e102d20574d889188ab00b40ccc50f
- MD5 74e3ed8c0063c609878510f0bf7c5115
- SHA1 5cada09b22a9b454b03676702f63c985535c28b2
- SHA512 645fc7c7416b5d609513049e5c89e435b603781b2c70007dc951a05ce0da3d2e97e7421551d68e799623e42279a52c32259eea795ebba433038bd0e4f3ea6cae
- TLSH T1AC111FBCF64E56AA11F2039B2942C122E34E66B03A490F52750F636C334AAA9473746D
- MD5 SHA1 SHA512 TLSH
FSCapture113/Portable.db
- SHA256 852cb4da651b7c8f9aef87b80c3f1aa615a5d980a48cc3cf1ce0eecb92b9f602
- MD5 f62a50b27850f7340fa3ca41fc958ae2
- SHA1 1cde439996ca44b5c675434073e3c9202852a369
- SHA512 6feadd59dfbb2ebcab7bcd0dc4f1320fa51700291bb9edd227a5dc80b198e71e94e2bb1829bc2c7afbf3c3a64b76e393988f79df94ec2e71c62400c06a7bb897
- MD5 SHA1 SHA512
FSCapture113/fsc.db
- SHA256 706444fbdd2ebe5fc97283309f3cda4d54f7b8472fd89d8339a48dfef23642a4
- MD5 07eae545792c61cf7d1654a153d04919
- SHA1 3537da187a124180a2d927bddb075771f425bc88
- SHA512 86da6f4277d63d9f68a171ae7aad481c8f1309ede99285b1316cc5b3ff17bc70ade7f9c2e546604607eb55d4f6d0f1e6db0b1e0b4d6db65f6a6fe9bdea101bc6
- SSDEEP 192:PL1N5Grf0A98HHZyfvEnAeg2i1UGdjBHzTXbX7pxvnWKufp6o8zuZj3Zi10c0KwD:znYx/lUstpxnWK+6o8za+0KwPYJldC/9
- TLSH T12212C9C2673F387AE7A7901A975BB5074CD2514F024B1C0632691EE8E1DFA4F6B13B09
- MD5 SHA1 SHA512 SSDEEP TLSH
FSCapture113/libsharpyuv.dll
- IMPHASH 7c2d8f5e11000d9716b92bd5fcab6c09
- SHA256 0dd0d479546a92de887c57679a11f6b3bf86218359f1e52baff5b5b0ac40046e
- MD5 02e298266b4cae1c64288f8270c45025
- SHA1 4acae30050e0cdc29360582213138c2d647956b1
- SHA512 015516c52d3472bcfa6c2648455e882f142baf76cf7894040024afb2027d30b90f49b4c4fbfa59402d2e105bc7fbd6945bddb01808f1463cc863c61f4e65f155
- SSDEEP 1536:EZZZg5wwcuBil+UaTJwb6Y2FadNyPLxbuvtmgMbFuQh54RbbbbbbbGUvy07qx2:IDkjtqwIAg0FuQh540UvDN
- TLSH T1D7A3AE2174E7C973C8BF15350499EB2A1EBA651143A184FB7FF80BAE8F203C09676365
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
32:a0:b5:c8:12:64:3d:e3:9a:75:bc:06:8a:5c:4d:f7:b2:66:51:bd:aa:98:a8:fb:b2:74:f7:f0:23:80:2a:cc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Oct 2, 2024
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
17333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SharpYuvComputeConversionMatrix
SharpYuvConvert
SharpYuvGetConversionMatrix
SharpYuvGetVersion
SharpYuvInit
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=75, id=1, productName=Unmarked objects,
count=27, id=132, productName=VS2008 build 21022, version=21022,
count=29, id=149, productName=VS2008 build 21022, version=21022,
count=105, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
FSCapture113/libwebp.dll
- IMPHASH 0d0d7b9e05db7cc05d3e789ef5450a22
- SHA256 0e5548f665b6ce4442ee630a622607a6e212fcb4df87febf757d09a2b8377515
- MD5 0b111a5b7140cf4a85402b16d2bc91e9
- SHA1 9721698c05140f06479452866733bac853da2d97
- SHA512 166ec426bac7a79d5fd163f5c21eb8205790d7cef09a1d36840eed9a8317fb489f9b0113a6283fcdc2768c1c782551e4278133e2c3a8f70395cf34b7faf4ea3d
- SSDEEP 6144:I2jeRff0cK2+k5tkTTB77bRkBWq1dPSVf2ekIOK+epZwbLUVSCiAU4DyAOmYGab:In6Jhydy+ekIZNU0yUq
- TLSH T122B48D81F59360B1F89F29B846FDBA2B5528192D4318C1F723D66F21B9B33D1A3352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
23:ae:61:5c:4a:fa:93:1e:dc:ec:78:22:c8:e5:3a:6c:81:94:fa:d1:fc:07:f6:4f:9b:23:3f:16:84:5e:e6:24
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Oct 2, 2024
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
0b:61:7e:e9:ed:18:9a:94:42:3b:e7:bb:75:64:f0:bf
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2023 - Feb 12, 2027
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
373061
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
libsharpyuv
SharpYuvInit
SharpYuvGetConversionMatrix
SharpYuvConvert
kernel32
HeapDestroy
SetThreadPriority
CloseHandle
WaitForSingleObjectEx
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
CreateSemaphoreA
SetEvent
ReleaseSemaphore
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
HeapAlloc
HeapFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
RaiseException
VP8CheckSignature
VP8GetCPUInfo
VP8GetInfo
VP8LCheckSignature
VP8LGetInfo
WebPBlendAlpha
WebPCleanupTransparentArea
WebPConfigInitInternal
WebPConfigLosslessPreset
WebPCopyPixels
WebPCopyPlane
WebPDecode
WebPDecodeARGB
WebPDecodeARGBInto
WebPDecodeBGR
WebPDecodeBGRA
WebPDecodeBGRAInto
WebPDecodeBGRInto
WebPDecodeRGB
WebPDecodeRGBA
WebPDecodeRGBAInto
WebPDecodeRGBInto
WebPDecodeYUV
WebPDecodeYUVInto
WebPEncode
WebPEncodeBGR
WebPEncodeBGRA
WebPEncodeLosslessBGR
WebPEncodeLosslessBGRA
WebPEncodeLosslessRGB
WebPEncodeLosslessRGBA
WebPEncodeRGB
WebPEncodeRGBA
WebPFree
WebPFreeDecBuffer
WebPGetColorPalette
WebPGetDecoderVersion
WebPGetEncoderVersion
WebPGetFeaturesInternal
WebPGetInfo
WebPGetWorkerInterface
WebPIAppend
WebPIDecGetRGB
WebPIDecGetYUVA
WebPIDecode
WebPIDecodedArea
WebPIDelete
WebPINewDecoder
WebPINewRGB
WebPINewYUV
WebPINewYUVA
WebPIUpdate
WebPInitDecBufferInternal
WebPInitDecoderConfigInternal
WebPMalloc
WebPMemoryWrite
WebPMemoryWriterClear
WebPMemoryWriterInit
WebPPictureARGBToYUVA
WebPPictureARGBToYUVADithered
WebPPictureAlloc
WebPPictureCopy
WebPPictureCrop
WebPPictureDistortion
WebPPictureFree
WebPPictureHasTransparency
WebPPictureImportBGR
WebPPictureImportBGRA
WebPPictureImportBGRX
WebPPictureImportRGB
WebPPictureImportRGBA
WebPPictureImportRGBX
WebPPictureInitInternal
WebPPictureIsView
WebPPictureRescale
WebPPictureSharpARGBToYUVA
WebPPictureSmartARGBToYUVA
WebPPictureView
WebPPictureYUVAToARGB
WebPPlaneDistortion
WebPSafeCalloc
WebPSafeFree
WebPSafeMalloc
WebPSetWorkerInterface
WebPValidateConfig
Name
.text
Size
407KB
Virtual Size
407KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=27, id=132, productName=VS2008 build 21022, version=21022,
count=36, id=149, productName=VS2008 build 21022, version=21022,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=88, id=1, productName=Unmarked objects,
count=209, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,