big_ip_client_2026.zip
- SHA256 62418bc0914f805f21412f8dbe3bf2c52ae119a657e1e4307a500ed8823b6e4b
Overview
overview
8Static
static
3big_ip_cli...26.exe
windows11-21h2-x64
big_ip_cli...rv.exe
windows11-21h2-x64
3big_ip_cli...ov.dll
windows11-21h2-x64
3big_ip_cli...64.dll
windows11-21h2-x64
1big_ip_cli...64.dll
windows11-21h2-x64
1big_ip_cli...er.dll
windows11-21h2-x64
3big_ip_cli...64.dll
windows11-21h2-x64
1big_ip_cli...64.dll
windows11-21h2-x64
1big_ip_cli...rv.exe
windows11-21h2-x64
3big_ip_cli...rv.sys
windows11-21h2-x64
3big_ip_cli...rv.exe
windows11-21h2-x64
3big_ip_cli...ce.exe
windows11-21h2-x64
3big_ip_cli...UI.exe
windows11-21h2-x64
3big_ip_cli...ce.exe
windows11-21h2-x64
3big_ip_cli...rv.sys
windows11-21h2-x64
3big_ip_cli...rv.exe
windows11-21h2-x64
1big_ip_cli...64.exe
windows11-21h2-x64
1big_ip_cli...rv.exe
windows11-21h2-x64
1big_ip_cli...rv.exe
windows11-21h2-x64
big_ip_cli...64.exe
windows11-21h2-x64
big_ip_cli...ce.exe
windows11-21h2-x64
3big_ip_cli...pi.dll
windows11-21h2-x64
3big_ip_cli...pc.exe
windows11-21h2-x64
3big_ip_cli...tW.exe
windows11-21h2-x64
3big_ip_cli...ov.dll
windows11-21h2-x64
3big_ip_cli...64.dll
windows11-21h2-x64
1big_ip_cli...64.dll
windows11-21h2-x64
1big_ip_cli...ls.dll
windows11-21h2-x64
3big_ip_cli...up.bat
windows11-21h2-x64
8big_ip_cli...ll.bat
windows11-21h2-x64
8big_ip_cli...ts.msi
windows11-21h2-x64
7big_ip_cli...fo.exe
windows11-21h2-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
big_ip_client_2026/BIGIPEdgeClient 2026.exe
Resource
win11-20260911-en
windows11-21h2-x64
26 signatures
150 seconds
Behavioral task
behavioral2
Sample
big_ip_client_2026/F5 VPN/F5CredMgrSrv.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
big_ip_client_2026/F5 VPN/F5CredProv.dll
Resource
win11-20260911-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
big_ip_client_2026/F5 VPN/F5CredProv64.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
big_ip_client_2026/F5 VPN/F5CredProvARM64.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
big_ip_client_2026/F5 VPN/F5CustomDialer.dll
Resource
win11-20260911-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
big_ip_client_2026/F5 VPN/F5CustomDialer64.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
big_ip_client_2026/F5 VPN/F5CustomDialerARM64.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
big_ip_client_2026/F5 VPN/F5DialSrv.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
big_ip_client_2026/F5 VPN/F5FltDrv.sys
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
big_ip_client_2026/F5 VPN/F5FltSrv.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
big_ip_client_2026/F5 VPN/F5InstallerService.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
big_ip_client_2026/F5 VPN/F5LogonUI.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
big_ip_client_2026/F5 VPN/F5PrelogonHelperService.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
big_ip_client_2026/F5 VPN/amd64/F5FltDrv.sys
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
big_ip_client_2026/F5 VPN/amd64/F5FltSrv.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
big_ip_client_2026/F5 VPN/amd64/F5PrelogonHelperService64.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
big_ip_client_2026/F5 VPN/amd64/F5TrafficSrv.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
big_ip_client_2026/F5 VPN/arm64/F5FltSrv.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
big_ip_client_2026/F5 VPN/arm64/F5PrelogonHelperServiceARM64.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
big_ip_client_2026/F5 VPN/f5InspectorService.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
big_ip_client_2026/F5 VPN/f5fpapi.dll
Resource
win11-20260911-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
big_ip_client_2026/F5 VPN/f5fpc.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
big_ip_client_2026/F5 VPN/f5fpclientW.exe
Resource
win11-20260911-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
big_ip_client_2026/F5 VPN/f5netprov.dll
Resource
win11-20260911-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
big_ip_client_2026/F5 VPN/f5netprov64.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
big_ip_client_2026/F5 VPN/f5netprovARM64.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
big_ip_client_2026/F5 VPN/scew_uls.dll
Resource
win11-20260911-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
big_ip_client_2026/Setup.bat
Resource
win11-20260911-en
windows11-21h2-x64
9 signatures
150 seconds
Behavioral task
behavioral30
Sample
big_ip_client_2026/Uninstall.bat
Resource
win11-20260911-en
windows11-21h2-x64
7 signatures
150 seconds
Behavioral task
behavioral31
Sample
big_ip_client_2026/f5fpclients.msi
Resource
win11-20260911-en
windows11-21h2-x64
15 signatures
150 seconds
Behavioral task
behavioral32
Sample
big_ip_client_2026/f5wininfo.exe
Resource
win11-20260911-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target big_ip_client_2026.zip
- Size 64.6MB
- Sample260916-vtepbsdp4y
- SHA256 62418bc0914f805f21412f8dbe3bf2c52ae119a657e1e4307a500ed8823b6e4b
- MD5 c3e3ef43ca5ed096f12281e6c4b95eb4
- SHA1 e4a7fe839d8223eca5ea655dd461a06c7a96c934
- SHA512 35e0c00e215057c60fcb8778efb6c8d15c0e132b6c346d7fce186c937e65655afeb9c5c06e85094e5537569125e1d488d5668d6eb89fc782a0fb5af8f16f3983
- SSDEEP 1572864:RHYCOqQd50ILAc6dw9yv6EoZ7klyiNb/AOczp3DZwh:R5OtdxcUy4Wyubctih
- TLSH T16DE733632FB020A6FC21397EA68FE1AE544115B1D0B4267B8AF570070F5AECC57589EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/big_ip_client_2026/BIGIPEdgeClient 2026.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/big_ip_client_2026/f5wininfo.exe
File Explorer
-
big_ip_client_2026.zip.zip 64.6MB
-
big_ip_client_2026/BIGIPEdgeClient 2026.exe.exe 32.0MB
-
big_ip_client_2026/F5 VPN/CustomDialer.ini1KB
-
big_ip_client_2026/F5 VPN/F5CredMgrSrv.exe.exe 320KB
-
big_ip_client_2026/F5 VPN/F5CredProv.dll.dll 272KB
-
big_ip_client_2026/F5 VPN/F5CredProv64.dll.dll 331KB
-
big_ip_client_2026/F5 VPN/F5CredProvARM64.dll342KB
-
big_ip_client_2026/F5 VPN/F5CustomDialer.dll.dll 402KB
-
big_ip_client_2026/F5 VPN/F5CustomDialer64.dll.dll 469KB
-
big_ip_client_2026/F5 VPN/F5CustomDialerARM64.dll434KB
-
big_ip_client_2026/F5 VPN/F5DialSrv.exe.exe 3.1MB
-
big_ip_client_2026/F5 VPN/F5FltDrv.sys.sys 45KB
-
big_ip_client_2026/F5 VPN/F5FltSrv.exe.exe 637KB
-
big_ip_client_2026/F5 VPN/F5InstallerService.exe.exe 613KB
-
big_ip_client_2026/F5 VPN/F5LogonUI.exe.exe 214KB
-
big_ip_client_2026/F5 VPN/F5PrelogonHelperService.exe.exe 338KB
-
big_ip_client_2026/F5 VPN/F5TrafficSrv.exe.exe 257KB
-
big_ip_client_2026/F5 VPN/F5_TMP/InstallerControl.cab.cab 2.0MB
-
F5InstH.exe.exe 356KB
-
F5InstP.dll.dll 88KB
-
InstallerControl.dll.dll 707KB
-
InstallerControl.inf912B
-
f5instd.exe.exe 597KB
-
f5unistall.exe.exe 3.6MB
-
uregsvr.exe.exe 122KB
-
big_ip_client_2026/F5 VPN/F5_TMP/OesisInspector.cab.cab 10.4MB
-
OesisInspector.inf1KB
-
f5OesisInspectorCom4.dll.dll 831KB
-
libwaapi.dll.dll 794KB
-
libwaheap.dll.dll 84KB
-
libwalocal.dll.dll 1.5MB
-
libwaresource.dll.dll 5.8MB
-
libwautils.dll.dll 3.2MB
-
wa_3rd_party_host_32.exe.exe 2.3MB
-
wa_3rd_party_host_64.exe.exe 2.9MB
-
big_ip_client_2026/F5 VPN/F5_TMP/cachecleaner.cab.cab 248KB
-
cachecleaner.dll.dll 501KB
-
cachecleaner.exe.exe 82KB
-
cachecleaner.inf564B
-
big_ip_client_2026/F5 VPN/F5_TMP/f5InspectionHost.cab.cab 1.2MB
-
f5InspectionHost.dll.dll 877KB
-
f5InspectionHost.inf759B
-
f5PolicyServer.exe.exe 894KB
-
f5epi.exe.exe 1.5MB
-
ietrust.exe.exe 187KB
-
big_ip_client_2026/F5 VPN/F5_TMP/f5certchk.cab.cab 467KB
-
F5CertHelper.dll.dll 93KB
-
F5CertHelper.exe.exe 437KB
-
f5certchk.dll.dll 569KB
-
f5certchk.inf630B
-
big_ip_client_2026/F5 VPN/F5_TMP/f5syschk.cab.cab 379KB
-
F5Win32CheckHelper.dll.dll 92KB
-
F5Win32CheckHelper.exe.exe 274KB
-
Win32SystemCheck.dll.dll 590KB
-
f5syschk.inf629B
-
big_ip_client_2026/F5 VPN/F5_TMP/f5tunsrv.cab.cab 2.4MB
-
TunnelServer.exe.exe 3.8MB
-
TunnelServerX.dll.dll 1.9MB
-
f5tunsrv.inf484B
-
big_ip_client_2026/F5 VPN/F5_TMP/urxhost.cab.cab 1.1MB
-
F5ElHelper.dll.dll 212KB
-
F5ElHelper.exe.exe 542KB
-
F5ElHelper64.dll.dll 258KB
-
urxhost.dll.dll 1.9MB
-
urxhost.inf806B
-
urxhostres.dll.dll 129KB
-
big_ip_client_2026/F5 VPN/F5_TMP/urxshost.cab.cab 1.6MB
-
big_ip_client_2026/F5 VPN/F5_TMP/urxvpn.cab.cab 1.6MB
-
big_ip_client_2026/F5 VPN/F5_TMP/vdeskctrl.cab.cab 1.2MB
-
big_ip_client_2026/F5 VPN/amd64/F5FltDrv.sys.sys 54KB
-
big_ip_client_2026/F5 VPN/amd64/F5FltSrv.exe.exe 791KB
-
big_ip_client_2026/F5 VPN/amd64/F5PrelogonHelperService64.exe.exe 406KB
-
big_ip_client_2026/F5 VPN/amd64/F5TrafficSrv.exe.exe 335KB
-
big_ip_client_2026/F5 VPN/arm64/F5FltDrv.sys53KB
-
big_ip_client_2026/F5 VPN/arm64/F5FltSrv.exe932KB
-
big_ip_client_2026/F5 VPN/arm64/F5PrelogonHelperServiceARM64.exe383KB
-
big_ip_client_2026/F5 VPN/config.f5c.xml 76KB
-
big_ip_client_2026/F5 VPN/f5InspectorService.exe.exe 602KB
-
big_ip_client_2026/F5 VPN/f5fpapi.dll.dll 2.4MB
-
big_ip_client_2026/F5 VPN/f5fpc.exe.exe 444KB
-
big_ip_client_2026/F5 VPN/f5fpclientW.exe.exe 5.0MB
-
big_ip_client_2026/F5 VPN/f5netprov.dll.dll 268KB
-
big_ip_client_2026/F5 VPN/f5netprov64.dll.dll 339KB
-
big_ip_client_2026/F5 VPN/f5netprovARM64.dll354KB
-
big_ip_client_2026/F5 VPN/scew_uls.dll.dll 259KB
-
big_ip_client_2026/MD5_Archivo.txt1KB
-
big_ip_client_2026/MD5_Instalador.txt2KB
-
big_ip_client_2026/Setup.bat.bat 1KB
-
big_ip_client_2026/Uninstall.bat.bat 1KB
-
big_ip_client_2026/_setup_configuration_.f5c.xml 1KB
-
big_ip_client_2026/f5fpclients.msi.msi 1.1MB
-
big_ip_client_2026/f5wininfo.exe.exe 3.4MB
big_ip_client_2026/BIGIPEdgeClient 2026.exe
- IMPHASH 77e82d910b00f5dda4227cfbcd1516ff
- SHA256 b6aa79dc51f7c501d9f648e6d5e48a41ecab8c69eeb562a61e3b3c83b660ab1c
- MD5 4db5d44c7404ed4a9c87ec9ab1123079
- SHA1 6f8b3b2673de9cbb8f34877d7c2ec95f9092f4ca
- SHA512 30171c691ce164d6449a390fbfe4f3c6b950159e296fd1f68350cc6b6d9a0d42e0418c77550936468f8e4ed545cf6410419b84aca1bd4dd9cba328bd5a0a15e4
- SSDEEP 786432:XJ4dSGKAMOY+BWu6o3czbtN/ae4p+Fzcq8xFN9Vf:udBzcvtNiJBq83HN
- TLSH T14E7733227A90E071E87226355FBAC7BD1845BD71D33085EBABE8247A0F346D1573878B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
152160
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients725x-win\1515101\src\rh\TerminalProxy\MSI\setupstub\out\Release\setupstub.pdb
comctl32
InitCommonControlsEx
kernel32
GetCurrentProcess
GetCurrentProcessId
GetExitCodeProcess
GetCurrentThreadId
CreateProcessA
GetSystemInfo
GetSystemTime
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
LocalAlloc
LocalFree
FormatMessageA
lstrcmpA
lstrlenA
CopyFileA
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetFullPathNameA
SetDefaultDllDirectories
lstrcpynA
lstrcpyA
lstrcatA
CompareStringA
GlobalAlloc
GlobalFree
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
GlobalUnlock
GlobalLock
FileTimeToLocalFileTime
GetFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointer
SetFileTime
GetVolumeInformationA
GetLocalTime
GetVersion
DosDateTimeToFileTime
SetVolumeLabelA
FileTimeToSystemTime
SystemTimeToFileTime
lstrcmpiA
CreateDirectoryW
GetFileAttributesExW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetFullPathNameW
GetCurrentDirectoryW
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeZoneInformation
ReadConsoleW
ReadFile
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
HeapReAlloc
SetStdHandle
WriteConsoleW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
GetCommandLineW
GetCommandLineA
GetFileType
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
GetLastError
RaiseException
CloseHandle
DecodePointer
OutputDebugStringA
GetTempPathA
SetFileAttributesW
SetFileAttributesA
RemoveDirectoryA
GetLongPathNameA
GetFileAttributesA
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
DeleteFileW
DeleteFileA
CreateFileW
CreateFileA
CreateDirectoryA
VerSetConditionMask
GetDriveTypeA
LoadLibraryExW
RtlUnwind
InitializeSListHead
GetStartupInfoW
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
EncodePointer
OutputDebugStringW
IsDebuggerPresent
user32
DispatchMessageA
PeekMessageA
DefWindowProcA
DestroyWindow
ShowWindow
TranslateMessage
SetWindowTextA
GetWindowRect
GetWindowLongA
SetWindowLongA
ExitWindowsEx
CharPrevA
LoadStringA
CreateDialogParamA
LoadIconA
OemToCharA
CharNextA
wsprintfA
MsgWaitForMultipleObjects
SystemParametersInfoA
IsDialogMessageA
SetForegroundWindow
GetSystemMetrics
SetFocus
SetDlgItemTextA
GetDlgItem
MoveWindow
WaitMessage
PostMessageA
SendMessageA
MessageBoxA
advapi32
LookupPrivilegeValueA
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetSecurityDescriptorControl
GetKernelObjectSecurity
AdjustTokenPrivileges
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegCloseKey
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
FreeSid
AllocateAndInitializeSid
OpenProcessToken
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
ole32
CoTaskMemFree
CoCreateGuid
StringFromGUID2
Name
.text
Size
280KB
Virtual Size
279KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=259, version=24610,
count=186, id=261, version=24610,
count=14, id=199, version=41118,
count=26, id=259, version=24123,
count=37, id=260, version=24123,
count=2, id=261, version=23013,
count=23, id=260, version=24610,
count=12, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=17, id=257, version=24610,
count=61, id=261, version=24123,
count=334, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
big_ip_client_2026/F5 VPN/CustomDialer.ini
- SHA256 b7b7a1d7fda85a68d8c04e2cbf40afb732cb3826403f9ac4826ede1c42887ae3
- MD5 9a4ff1d045f0a5d9c71864e8c9fe7728
- SHA1 55e1766318f40b20a5f70e00f6d95827bb2097b6
- SHA512 9a42573debe96559d23b23e089cde59941c50286265516b7ebc69098dd66d05aff12ad39f8e911a60d996caf0a08a859465f21be9ac617de1df700503dc59440
- TLSH T1583155400E1D27FC1886B073117893CCBADB654E587A46CADE846D8F7F9CA05785DE64
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/F5 VPN/F5CredMgrSrv.exe
- IMPHASH f337f3f4d80534b5eeeab015db4e4ffe
- SHA256 8da0242b3d34e68c359649b8127b97d5503136484cf90681cf473f6a5064042d
- MD5 5942e8097ddbae24d14b99353f8dcb95
- SHA1 464856dae7b629b858f3fd4603a207d581be787e
- SHA512 7177ed5c77589b155242c73e066884f272f5afdc520d30bad8b117bfa348d70acddceeb579fee56f34402aab440f43d8b9aec1018ddbf3e96e7f8c920fc2796f
- SSDEEP 6144:r7dG+xTtS1VS1gRUdsXdPV7a6TVnmXmJ6Boia0YwZ:VGMtS1MeKdodPV7a+cYO
- TLSH T189645D2076D4C131F9B3457AAA795BE79839F5223F6248CB63D045689D30AC2E931F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
85:0d:25:60:be:ce:b9:bc:9a:44:0c:f3:9d:fe:e4:f7:b7:a6:99:55:b7:84:e5:42:8e:04:f8:73:c0:39:94:15
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
122224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\LogonNotify\out\ReleaseUnicode\F5CredMgrSrv.pdb
rpcrt4
RpcServerUnregisterIf
RpcMgmtWaitServerListen
RpcServerRegisterIfEx
RpcServerListen
RpcServerInqBindings
RpcMgmtStopServerListening
RpcBindingInqAuthClientW
I_RpcBindingInqLocalClientPID
RpcImpersonateClient
RpcRevertToSelf
NdrServerCall2
RpcServerUseProtseqW
RpcEpRegisterW
secur32
LsaFreeReturnBuffer
LsaGetLogonSessionData
kernel32
MultiByteToWideChar
FormatMessageW
OutputDebugStringW
SetEvent
FileTimeToSystemTime
DeleteFileW
GetSystemInfo
ResetEvent
FileTimeToLocalFileTime
VerSetConditionMask
GetCurrentProcessId
GetModuleHandleW
CopyFileW
WideCharToMultiByte
lstrcpyW
VerifyVersionInfoW
GetSystemTimeAsFileTime
GetSystemTime
FlushFileBuffers
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
LCMapStringW
CompareStringW
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwind
SetEndOfFile
CreateEventW
ReleaseMutex
GetVersionExW
lstrcmpA
GetCurrentThreadId
CreateFileW
GetLocaleInfoW
FindClose
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
GetUserDefaultUILanguage
GetModuleFileNameW
GetSystemDefaultUILanguage
GetModuleHandleExW
lstrlenW
FindNextFileW
EnterCriticalSection
FindFirstFileW
HeapAlloc
LocalAlloc
GetCurrentProcess
FreeLibrary
GetProcessHeap
LocalFree
GetProcAddress
LoadLibraryW
CloseHandle
GetCurrentThread
OpenProcess
HeapFree
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
Sleep
InitializeCriticalSectionEx
SetConsoleCtrlHandler
SetFilePointerEx
HeapSize
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
ReadFile
ReadConsoleW
WriteConsoleW
QueryPerformanceCounter
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
advapi32
ConvertStringSidToSidW
LookupAccountSidW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
OpenServiceW
RegQueryValueExW
IsValidSid
GetLengthSid
OpenProcessToken
ConvertSidToStringSidW
LsaNtStatusToWinError
OpenThreadToken
GetTokenInformation
RegisterServiceCtrlHandlerExW
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
SetServiceStatus
DeleteService
ControlService
StartServiceCtrlDispatcherW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Name
.text
Size
207KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=27412,
count=157, id=261, version=27412,
count=18, id=260, version=27412,
count=19, id=260, version=29804,
count=18, id=259, version=29804,
count=48, id=261, version=29804,
count=17, id=257, version=27412,
count=256, id=1, productName=Unmarked objects,
count=8, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5CredProv.dll
- IMPHASH a81cbade0cd05acadff6590dde52beff
- SHA256 a27ebaab7248bfc2b517fa16c60754e77a371fea5cf28afc205d52904fcb0b8c
- MD5 37ad62ef591758589655dd2a543c14fd
- SHA1 165dff9b1ad3c4eb0353fc242197bc5243f2c62c
- SHA512 1083816917e795beffcc523f1e8f890ac4441ae3dcd78c72cec75b3dd694f83557efc2be8ab122820094e5a05eaf79c10b27d992555791641891ac4794048386
- SSDEEP 6144:AbB84NNUT2407uEqnQ9KzKA/wz80m8ZKx++Fa8n:GB84wT2407/qQ9Zek+Fa8n
- TLSH T16F547D11BA84C032E8AF19346428D6BBDC2CB9711FF0C8D7E3541A796E355C3AA35A5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a6:ca:de:0f:2a:a8:00:eb:ab:73:88:60:64:9f:74:3f:91:7c:78:bd:31:21:7f:32:d1:51:93:f4:dc:a0:50:57
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
88736
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\CustomDialer\out\Release\f5CredProv.pdb
shlwapi
SHStrDupA
SHStrDupW
rasdlg
RasDialDlgW
secur32
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaLookupAuthenticationPackage
winscard
SCardListCardsW
SCardGetStatusChangeW
SCardGetCardTypeProviderNameW
SCardListReadersW
SCardFreeMemory
SCardReleaseContext
SCardEstablishContext
netapi32
NetApiBufferFree
NetApiBufferAllocate
NetGetJoinInformation
rasapi32
RasEnumEntriesW
RasGetEntryPropertiesW
kernel32
GetCurrentProcess
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
LeaveCriticalSection
InitializeCriticalSection
lstrlenA
FindClose
CreateFileW
GetCurrentThreadId
ReleaseMutex
UnmapViewOfFile
GetModuleHandleA
GetLocaleInfoA
MultiByteToWideChar
GetTempPathA
GetModuleHandleExA
CopyFileA
GetLastError
LoadLibraryA
GetVersionExA
DeleteFileA
CloseHandle
GetSystemInfo
HeapAlloc
GetProcAddress
CreateFileMappingA
LocalFree
FindNextFileW
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
FreeLibrary
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
FormatMessageA
MapViewOfFile
QueryPerformanceCounter
FlushFileBuffers
GetFileAttributesW
DisableThreadLibraryCalls
LocalAlloc
GetSystemTimeAsFileTime
LCMapStringW
FreeEnvironmentStringsW
GetStartupInfoW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetFileSizeEx
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetModuleFileNameW
HeapFree
EnterCriticalSection
FindFirstFileA
GetModuleFileNameA
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
GetStringTypeW
SetStdHandle
ReadFile
ReadConsoleW
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
GetModuleHandleExW
ExitProcess
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
TlsFree
user32
LoadStringA
LoadBitmapA
advapi32
CryptAcquireContextW
CryptGetProvParam
CryptReleaseContext
LsaNtStatusToWinError
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
shell32
SHGetFolderPathW
ole32
CoTaskMemAlloc
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
Name
.text
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=27412,
count=158, id=261, version=27412,
count=16, id=260, version=29804,
count=19, id=259, version=29804,
count=38, id=261, version=29804,
count=20, id=260, version=27412,
count=25, id=257, version=27412,
count=230, id=1, productName=Unmarked objects,
count=13, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5CredProv64.dll
- IMPHASH 9cdadbdb523b20b2db2ae2bac0239a3d
- SHA256 3c57c4402ed66e103c8203f23ebd617f44ba2dda66c19750738fc996849a76a0
- MD5 c658abe0ef0354db509de6f1bd3bb0a8
- SHA1 19dffe382b7ed259bf7bd73c75f2f502363d7e4d
- SHA512 f35ebda6226321004f4fbe73e4824fbfcb32c7c00dc2cf5274fd396711515f945a53afb7c94ea620143583512a41bcbb7c8e72108f9a0332c00c1847cf992a77
- SSDEEP 6144:afhKVoerRuBf/UnMrTkRXs4nxU4VGLA4CA6:2hGeXLrmXs83VG56
- TLSH T1DC745B6CB3D506B5E0A3D63C88D38517F6B278414B7ADAFF039016296F633D0A939792
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6d:b2:d1:00:ed:ac:bb:6b:46:a2:55:7a:c3:f4:25:ae:d9:c0:25:d9:84:9e:d9:18:60:70:ee:52:d8:29:46:1e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
96784
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\CustomDialer\out\Release\f5CredProv64.pdb
shlwapi
SHStrDupA
SHStrDupW
rasdlg
RasDialDlgW
secur32
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaLookupAuthenticationPackage
winscard
SCardListCardsW
SCardGetStatusChangeW
SCardGetCardTypeProviderNameW
SCardListReadersW
SCardFreeMemory
SCardReleaseContext
SCardEstablishContext
netapi32
NetApiBufferFree
NetApiBufferAllocate
NetGetJoinInformation
rasapi32
RasEnumEntriesW
RasGetEntryPropertiesW
kernel32
GetCurrentProcess
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
LeaveCriticalSection
InitializeCriticalSection
lstrlenA
FindClose
CreateFileW
GetCurrentThreadId
ReleaseMutex
UnmapViewOfFile
GetModuleHandleA
GetLocaleInfoA
MultiByteToWideChar
GetTempPathA
GetModuleHandleExA
CopyFileA
GetLastError
LoadLibraryA
GetVersionExA
DeleteFileA
CloseHandle
GetSystemInfo
HeapAlloc
GetProcAddress
CreateFileMappingA
LocalFree
FindNextFileW
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
FreeLibrary
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
FormatMessageA
MapViewOfFile
QueryPerformanceCounter
FlushFileBuffers
GetFileAttributesW
DisableThreadLibraryCalls
LocalAlloc
GetStartupInfoW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetFileSizeEx
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
HeapFree
EnterCriticalSection
FindFirstFileA
GetModuleFileNameA
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetStringTypeW
SetStdHandle
ReadFile
ReadConsoleW
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
SetLastError
EncodePointer
TlsAlloc
DeleteCriticalSection
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExW
TlsFree
TlsSetValue
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
TlsGetValue
user32
LoadStringA
LoadBitmapA
advapi32
CryptAcquireContextW
CryptGetProvParam
CryptReleaseContext
LsaNtStatusToWinError
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
shell32
SHGetFolderPathW
ole32
CoTaskMemAlloc
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
Name
.text
Size
223KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=27412,
count=155, id=261, version=27412,
count=16, id=260, version=29804,
count=9, id=259, version=29804,
count=39, id=261, version=29804,
count=15, id=260, version=27412,
count=25, id=257, version=27412,
count=236, id=1, productName=Unmarked objects,
count=13, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5CredProvARM64.dll
- SHA256 9db8671cac05509a60651cf41f55a826bac84321f6e20c62bfed8578da5b46a3
- MD5 a3990502c4390d09d8168fcd723fb0f4
- SHA1 c98839da55f34aac059625a1559a8c3c07e2d6a7
- SHA512 20fab118945b3e2590a904fa53e479cc8bcb2c79846e4ed18bb4dba39ea0140c4098df2670a33096ddff0027b3aa27b036b00cb1ad12b7e767d63488533e6de1
- SSDEEP 6144:pdWDGNcAsJJuTKScAPV/6hvS6pkQApoz+3gWM:CCw3uTKk/MS6GVpozJWM
- TLSH T1EF745C40EE9C5C64E2D9D37CAD738F20753BB9349930C58FB225021CEDE7BD09A99A91
- MD5 SHA1 SHA512 SSDEEP TLSH
big_ip_client_2026/F5 VPN/F5CustomDialer.dll
- IMPHASH 9f9787aa2ea2c068a5928cfda115ec06
- SHA256 3cfdc46af9d81dbfa28390d35eaebd5b064f6d31ed3f4fda2ab67734364fe5f7
- MD5 493f7133951781f50f52e2fdf458980e
- SHA1 483dec47efd6d6cdde16ea6da94093626c135b35
- SHA512 b9c5caab1d34dbf48e465ab06d629435a93744765f0478cdef03b6eb625e0a3ea62d3ee6c9edcb89f69bde994ad5f6b47b7ef7712158bebb7be038e97904f8fd
- SSDEEP 6144:MCNMg963zFzprAqBcsgy5MXoJwElJ/ExZjub9a/o0tAOKOmKoi0oXaH2:j3EjXBoy5MXoJw4J/ExwIoKvtXaH2
- TLSH T1D2946B11F692C032E4BA163434799BA2593DBD301BB0C4DFA7C4AA6F1D706D1EA3572E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
33:52:29:37:54:d4:a1:5f:69:fa:c0:e7:6c:66:f3:2d:75:c5:0b:2c:6b:78:af:33:b4:fa:b5:87:da:96:a6:b4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
116960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\CustomDialer\out\Release\f5CustomDialer.pdb
rasapi32
RasGetEntryPropertiesW
RasSetEntryPropertiesW
RasGetProjectionInfoA
RasDialW
RasGetErrorStringW
RasHangUpA
RasEnumEntriesW
msi
ord8
ord74
ord124
ord103
ord17
rpcrt4
RpcMgmtStopServerListening
NdrClientCall2
RpcBindingFromStringBindingW
RpcServerUnregisterIf
RpcStringBindingComposeW
RpcStringFreeW
RpcBindingFree
RpcBindingSetAuthInfoExA
UuidCreate
RpcStringFreeA
UuidToStringA
netapi32
NetUserSetInfo
NetUserGetInfo
NetApiBufferFree
NetUserDel
NetUserAdd
NetLocalGroupDel
NetLocalGroupGetInfo
kernel32
lstrcpynW
UnmapViewOfFile
Sleep
SetEvent
CreateProcessA
CreateEventA
WaitForSingleObject
GetExitCodeProcess
SearchPathW
HeapFree
GetFullPathNameW
CreateFileW
GetFileAttributesW
GetCurrentThreadId
HeapAlloc
GetPriorityClass
GetCurrentProcessId
GetProcessHeap
FormatMessageA
FormatMessageW
VirtualQuery
DisableThreadLibraryCalls
TerminateProcess
CreatePipe
DuplicateHandle
lstrcatW
CreateDirectoryW
DeleteFileW
lstrcmpiW
GetPrivateProfileStringA
CreateFileMappingA
MapViewOfFile
lstrlenA
WritePrivateProfileSectionA
ReadFile
WriteFile
PeekNamedPipe
MultiByteToWideChar
WideCharToMultiByte
FindFirstFileA
FindClose
GetFileAttributesA
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
GetComputerNameW
CreateProcessW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapReAlloc
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetVolumeInformationA
FreeLibrary
GetModuleHandleW
LocalFree
GetProcAddress
LoadLibraryW
CloseHandle
LoadLibraryA
GetLastError
GetModuleHandleA
LocalAlloc
GetModuleFileNameW
OutputDebugStringA
GetCurrentProcess
SetLastError
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapSize
SetEndOfFile
WriteConsoleW
FindNextFileA
user32
MsgWaitForMultipleObjects
PeekMessageA
GetUserObjectSecurity
wsprintfW
SetUserObjectSecurity
WaitForInputIdle
PostThreadMessageA
SetForegroundWindow
GetSystemMetrics
CloseWindowStation
GetThreadDesktop
CloseDesktop
SetProcessWindowStation
GetUserObjectInformationW
GetProcessWindowStation
SendDlgItemMessageA
SendMessageA
GetDlgItemInt
SetDlgItemInt
GetWindowLongW
CreateDialogParamW
GetWindowRect
DestroyWindow
SetWindowPos
LoadStringA
EndDialog
SetWindowTextW
MessageBoxW
LoadStringW
ShowWindow
IsWindow
SetTimer
SetWindowLongA
SetDlgItemTextW
GetWindowLongA
GetDlgItemTextW
SendDlgItemMessageW
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItem
KillTimer
CheckDlgButton
GetDesktopWindow
DialogBoxParamW
EnableWindow
GetWindowTextW
DispatchMessageA
SendMessageW
RegisterWindowMessageA
IsDialogMessageA
TranslateMessage
advapi32
AddAce
GetTokenInformation
GetLengthSid
FreeSid
OpenProcessToken
RegSetValueExA
LogonUserW
InitializeSecurityDescriptor
RegOpenKeyExA
InitializeAcl
SetSecurityInfo
AddAccessAllowedAceEx
AddAccessAllowedAce
LookupAccountNameW
GetSecurityInfo
RegCreateKeyExW
LookupAccountSidA
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegDeleteValueW
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
GetAclInformation
ConvertSidToStringSidA
GetAce
RegDeleteKeyA
RegQueryValueExA
QueryServiceConfigA
RegQueryValueExW
CloseServiceHandle
OpenSCManagerA
OpenServiceA
GetSidSubAuthorityCount
AllocateAndInitializeSid
GetSidSubAuthority
CopySid
shell32
ShellExecuteExW
SHGetFolderPathW
SHGetSpecialFolderLocation
SHChangeNotify
ole32
StringFromIID
CoTaskMemFree
CoTaskMemAlloc
bcrypt
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptCreateHash
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
InstallCustomDialer
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
RemoveCustomDialer
Name
.text
Size
246KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=27412,
count=177, id=261, version=27412,
count=16, id=260, version=29804,
count=21, id=259, version=29804,
count=70, id=261, version=29804,
count=23, id=260, version=27412,
count=23, id=257, version=27412,
count=290, id=1, productName=Unmarked objects,
count=22, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5CustomDialer64.dll
- IMPHASH f9bd60144bf7a851ed2444442e268a19
- SHA256 d5049f1a543e4e0f49c7ceebe607d4c5ae142f83fb7432a35b8571044043472d
- MD5 d8d0532d6e04f298462d346087b05550
- SHA1 cb3b6263c0fe6234555a034c8f6e52f8528258f0
- SHA512 91ad7c6d3416d04d178619130bfe4dea39376ca8d1aeee551af5166fe3715ad35aef8ad1c8fc056d29b8a374757d2358fdc8b6fc50547ec389845437174ee08b
- SSDEEP 6144:wO7v9Vimzd3+DP51zeqOmZZ019doFU2roRKohdFpvFyjvOmKJOFYk006A:dGgl25HOmkP4U2hotLWKOYk0TA
- TLSH T170A46B29F3E94065F476823889774A52F672BC450770D6DF17A0D62E1F33BE0AA3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6d:05:f6:c7:38:ec:e4:d7:92:21:2f:ab:ee:19:42:6d:5b:96:1d:c9:43:52:55:ed:2f:83:93:c4:e5:c3:55:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
123776
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\CustomDialer\out\Release\f5CustomDialer64.pdb
rasapi32
RasGetEntryPropertiesW
RasSetEntryPropertiesW
RasGetProjectionInfoA
RasDialW
RasGetErrorStringW
RasHangUpA
RasEnumEntriesW
msi
ord17
ord8
ord74
ord124
ord103
rpcrt4
RpcMgmtStopServerListening
NdrClientCall3
RpcBindingFromStringBindingW
RpcServerUnregisterIf
RpcStringBindingComposeW
RpcStringFreeW
RpcBindingFree
RpcBindingSetAuthInfoExA
UuidCreate
RpcStringFreeA
UuidToStringA
netapi32
NetUserSetInfo
NetUserGetInfo
NetApiBufferFree
NetUserDel
NetUserAdd
NetLocalGroupDel
NetLocalGroupGetInfo
kernel32
lstrlenW
lstrcpynW
UnmapViewOfFile
Sleep
SetEvent
CreateProcessA
CreateEventA
WaitForSingleObject
GetExitCodeProcess
SearchPathW
HeapFree
GetFullPathNameW
CreateFileW
GetFileAttributesW
GetCurrentThreadId
HeapAlloc
GetPriorityClass
GetCurrentProcessId
GetProcessHeap
FormatMessageA
FormatMessageW
VirtualQuery
DisableThreadLibraryCalls
TerminateProcess
CreatePipe
DuplicateHandle
lstrcatW
CreateDirectoryW
GetModuleHandleA
DeleteFileW
GetModuleHandleW
lstrcmpiW
GetPrivateProfileStringA
CreateFileMappingA
MapViewOfFile
lstrlenA
WritePrivateProfileSectionA
ReadFile
WriteFile
PeekNamedPipe
MultiByteToWideChar
WideCharToMultiByte
FindNextFileA
FindClose
GetFileAttributesA
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
GetComputerNameW
CreateProcessW
GetVolumeInformationA
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapReAlloc
GetFileType
GetStdHandle
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
FreeLibrary
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LocalFree
GetProcAddress
LoadLibraryW
CloseHandle
LoadLibraryA
GetLastError
QueryActCtxW
DeactivateActCtx
LocalAlloc
FindActCtxSectionStringW
GetModuleFileNameW
OutputDebugStringA
GetModuleHandleExW
GetCurrentProcess
SetLastError
ActivateActCtx
CreateActCtxW
LeaveCriticalSection
EnterCriticalSection
SetFilePointerEx
ReadConsoleW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapSize
SetEndOfFile
WriteConsoleW
FindFirstFileA
RtlUnwind
user32
GetWindowLongPtrW
PeekMessageA
GetUserObjectSecurity
wsprintfW
SetUserObjectSecurity
WaitForInputIdle
PostThreadMessageA
SetForegroundWindow
MessageBoxW
GetThreadDesktop
GetUserObjectInformationW
GetProcessWindowStation
SendDlgItemMessageA
SendMessageA
GetDlgItemInt
SetDlgItemInt
CreateDialogParamW
GetWindowRect
DestroyWindow
SetWindowPos
LoadStringA
EndDialog
SetWindowTextW
MsgWaitForMultipleObjects
GetSystemMetrics
LoadStringW
ShowWindow
IsWindow
SetTimer
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItem
GetWindowLongPtrA
KillTimer
CheckDlgButton
GetDesktopWindow
SetWindowLongPtrA
DialogBoxParamW
EnableWindow
GetWindowTextW
DispatchMessageA
SendMessageW
RegisterWindowMessageA
IsDialogMessageA
TranslateMessage
advapi32
RegQueryValueExA
RegDeleteKeyA
GetTokenInformation
GetLengthSid
FreeSid
QueryServiceConfigA
CopySid
AddAce
RegSetValueExA
LogonUserW
InitializeSecurityDescriptor
RegOpenKeyExA
InitializeAcl
SetSecurityInfo
AddAccessAllowedAceEx
AddAccessAllowedAce
LookupAccountNameW
GetSecurityInfo
RegCreateKeyExW
LookupAccountSidA
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegDeleteValueW
OpenProcessToken
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
GetAclInformation
ConvertSidToStringSidA
RegQueryValueExW
CloseServiceHandle
OpenSCManagerA
OpenServiceA
GetSidSubAuthorityCount
AllocateAndInitializeSid
GetSidSubAuthority
GetAce
shell32
ShellExecuteExW
SHGetFolderPathW
SHGetSpecialFolderLocation
SHChangeNotify
ole32
CoTaskMemAlloc
CoTaskMemFree
StringFromIID
bcrypt
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptCreateHash
InstallCustomDialer
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
RemoveCustomDialer
Name
.text
Size
282KB
Virtual Size
281KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=27412,
count=177, id=261, version=27412,
count=15, id=260, version=29804,
count=10, id=259, version=29804,
count=72, id=261, version=29804,
count=20, id=260, version=27412,
count=23, id=257, version=27412,
count=300, id=1, productName=Unmarked objects,
count=22, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5CustomDialerARM64.dll
- SHA256 f808f171f88996da44c4be612821b186d67f8acdabfc891c0963d8746802c7e9
- MD5 44a26d05f63ceabc9043be37de69f00a
- SHA1 358c5efa5f27c561b54dcd990d0043cedd05e569
- SHA512 1c4052ed7f8abd4ddd08b9ecb5b6d30b970e33045ffffcceb745049ac18c9f87b3ff7963b96872727b2e524a06f5d0e6e31ff591768baf6f202cba58f2e8d210
- SSDEEP 6144:9mGfEn3ro5K8m/g/4Qi+fcekbsC+5qiSsuikuTvuOmKLjH05c:485VmYAKcPt+5qiluOviKPH0c
- TLSH T1E0943950EB8D5801F1E2D77CEC724F50703BBDA88930854EB61A424CDCBAFD5DAA57A2
- MD5 SHA1 SHA512 SSDEEP TLSH
big_ip_client_2026/F5 VPN/F5DialSrv.exe
- IMPHASH a92d5bc073c80d8ca78269a516c6d9f4
- SHA256 f01f87a6cb31e19d72bc96be2f08c60db9895d65ede747426348d00ba7034272
- MD5 a2cbe36d594804e792ca9c1a28b18161
- SHA1 9575ed85d939952a9f63d1fca32325406f97524e
- SHA512 a97a307c26d8be8321e93fbc164d1e847b6178806367b98fd08e9d9e8953071ff27c660d955cf86dfa880c755b823584fb4e1df4c846074520f002d9b0e46b70
- SSDEEP 49152:MLd0Z7nqM3KDgZAQU1VJQHDR0YfLNyXXRtPUv4FHYXiRuwKWBrvW+DqD47Gvq:MLd0Z7nq/gZARoGYfLNyXBqv4nRuw
- TLSH T15BE59F23F7458CB1F9A340B4542E977F9A3AE434A3358CC3D7805D64A8722D2663F79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c0:32:4b:84:ed:c2:f8:ce:47:30:8f:1b:61:69:1f:b1:bc:1b:85:b0:e4:67:60:64:36:18:82:ea:5a:b3:cc:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
1121840
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\CustomDialer\out\Release\f5DialSrv.pdb
rasapi32
RasGetConnectStatusA
RasHangUpA
traffic
TcDeregisterClient
TcEnumerateInterfaces
TcCloseInterface
TcOpenInterfaceW
TcDeleteFilter
TcDeleteFlow
TcAddFilter
TcRegisterClient
TcAddFlow
rpcrt4
RpcStringFreeA
NdrClientCall2
RpcSsDestroyClientContext
RpcStringBindingComposeA
RpcBindingFree
RpcBindingFromStringBindingA
scew_uls
ord109
ord137
ord140
ord128
ord116
ord152
ord151
ord101
ord146
ord139
ord127
ord141
kernel32
MultiByteToWideChar
Sleep
GetTempPathA
GetModuleHandleExA
CopyFileA
GetFileAttributesA
SetEvent
FileTimeToSystemTime
GetCurrentThread
TerminateThread
GetVersionExA
DeleteFileA
GetDateFormatA
lstrcpyA
GlobalFree
GetSystemInfo
CreateThread
ResetEvent
SetThreadPriorityBoost
GetFileSize
VerSetConditionMask
GetComputerNameW
GetCurrentProcessId
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
FormatMessageA
GetTempFileNameA
CreateEventA
MapViewOfFile
QueryPerformanceCounter
GetTickCount
GetComputerNameA
FlushFileBuffers
PeekNamedPipe
GetCommandLineW
LoadLibraryExA
GetLocalTime
SwitchToThread
ExitProcess
lstrcmpA
SetUnhandledExceptionFilter
SetEndOfFile
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapReAlloc
HeapSize
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetDriveTypeW
SetConsoleCtrlHandler
WriteConsoleW
GetModuleFileNameW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
RtlUnwind
ReadConsoleA
SetConsoleMode
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
LoadLibraryW
CreateFiber
DeleteFiber
SwitchToFiber
GetFileType
GetEnvironmentVariableW
TlsFree
TlsSetValue
GetLocaleInfoA
GetModuleHandleA
GetCurrentThreadId
CreateFileW
WaitForSingleObject
CreateMutexA
FindClose
lstrlenA
InitializeCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetUserDefaultUILanguage
WaitForMultipleObjects
OutputDebugStringA
GetSystemDefaultUILanguage
WriteFile
GetStdHandle
FindNextFileW
EnterCriticalSection
FindFirstFileA
FindFirstFileW
GetModuleFileNameA
ReadFile
GetFullPathNameW
GetProcessHeap
LocalFree
HeapAlloc
LocalAlloc
GetCurrentProcess
HeapFree
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteCriticalSection
DecodePointer
RaiseException
CloseHandle
CreateFileA
GetLastError
InitializeCriticalSectionEx
DeviceIoControl
SetLastError
TlsGetValue
TlsAlloc
GetModuleHandleExW
SystemTimeToFileTime
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
GetCurrentDirectoryW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
UnhandledExceptionFilter
UnmapViewOfFile
ReadConsoleW
GetFileSizeEx
SetFilePointerEx
GetTimeZoneInformation
OutputDebugStringW
IsDebuggerPresent
GetStringTypeW
GetCPInfo
CompareStringEx
LCMapStringEx
EncodePointer
ReleaseMutex
FindFirstFileExW
IsValidCodePage
GetACP
OpenFileMappingA
user32
EnableWindow
RegisterClassExA
GetDesktopWindow
PeekMessageA
GetDlgItem
SendMessageA
SetDlgItemTextA
TranslateMessage
SetFocus
GetProcessWindowStation
CreateWindowExA
DefWindowProcA
GetForegroundWindow
MessageBoxA
SendDlgItemMessageW
GetWindowLongA
SetWindowLongA
GetDlgItemTextA
IsWindow
ShowWindow
wsprintfA
MsgWaitForMultipleObjects
DialogBoxParamA
GetUserObjectInformationW
EndDialog
PostMessageA
LoadStringA
DestroyWindow
DispatchMessageA
MessageBoxW
GetActiveWindow
gdi32
GetStockObject
advapi32
CheckTokenMembership
OpenSCManagerA
CloseServiceHandle
QueryServiceStatus
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
GetTokenInformation
AddAccessAllowedAce
IsValidAcl
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
FreeSid
OpenProcessToken
IsValidSecurityDescriptor
IsValidSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
GetSidSubAuthorityCount
GetSidSubAuthority
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegEnumKeyExA
OpenServiceA
shell32
SHChangeNotify
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitialize
oleaut32
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantClear
SysStringLen
SysStringByteLen
VariantInit
iphlpapi
GetBestRoute
GetIpAddrTable
comctl32
InitCommonControlsEx
ord17
wininet
InternetReadFile
InternetConnectA
HttpSendRequestA
InternetCloseHandle
InternetOpenA
HttpAddRequestHeadersA
InternetSetOptionA
InternetErrorDlg
InternetSetStatusCallback
HttpQueryInfoA
InternetQueryDataAvailable
InternetQueryOptionA
HttpOpenRequestA
ws2_32
getaddrinfo
getsockname
socket
send
ntohs
connect
recvfrom
recv
getsockopt
WSAAddressToStringA
inet_ntoa
getnameinfo
inet_addr
WSAStartup
ntohl
WSACleanup
WSAGetLastError
setsockopt
ioctlsocket
sendto
htonl
inet_pton
listen
shutdown
select
gethostbyname
closesocket
bind
accept
__WSAFDIsSet
WSAStringToAddressA
WSASetEvent
WSASetLastError
freeaddrinfo
htons
crypt32
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertGetNameStringA
CertGetCertificateContextProperty
CertFindCertificateInStore
CertCompareCertificate
CertOpenStore
CertFreeCertificateChain
CertCloseStore
CertDuplicateCertificateContext
CryptFindOIDInfo
CertFreeCertificateContext
CertGetCertificateChain
CertAddEncodedCertificateToStore
CertFindChainInStore
CertVerifyCertificateChainPolicy
CertCreateCertificateContext
winmm
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
bcrypt
BCryptGenRandom
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
657KB
Virtual Size
657KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
129KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=259, version=27412,
count=200, id=261, version=27412,
count=21, productName=Unmarked objects (old),
count=555, id=260, version=29912,
count=19, id=260, version=29804,
count=25, id=259, version=29804,
count=85, id=261, version=29804,
count=29, id=260, version=27412,
count=2, id=257, version=29912,
count=35, id=257, version=27412,
count=421, id=1, productName=Unmarked objects,
count=20, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5FltDrv.sys
- IMPHASH 5ed3cd6181b925290a5aa4018a9a08be
- SHA256 acc6408c5d90b4c208507fc0291557189d937fc5bd63eedf3dd8498f546cdc0c
- MD5 c5c798582bce0cede113102a0ffe098e
- SHA1 bb5c782050f96e3ff25f433d405e6b2ae36d5eb4
- SHA512 a8b9dedbcab1f0cce2b246f4fba5e831f8bd9b18ea91d482ab977c34930e01c70756a3f3acdcbc54c2c16af49d9e7ea273627aa3ccfd4b67def20c87b9131b45
- SSDEEP 768:+fFKDkSJliidOgbF1Ems1kgT81k/sfc/OtWpw9QKXOPL6MoJpg:wFGt3iiUgbF1EJ/AuwWL6MCpg
- TLSH T19B238EA6BAA80062E8D3593017EDF2177D3CF3A16E62452ACB18D9584DA1FD1E72035F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
75:fe:d0:b5:a0:77:3a:9d:21:65:1b:86:a0:09:2b:25:b8:50:b2:82:05:87:f9:0f:d0:aa:65:ac:10:b6:30:31
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 11, 2018
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
98:12:24:21:fd:dd:23:5b:c0:39:cf:21:2e:0b:1f:05:34:43:ea:ce
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
Chains
Apr 26, 2018
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
Serial Number
12:3b:92:d6:69:6f:02:74:00:00:00:00:55:66:25:5d
Issuer
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 25, 2017 - Dec 12, 2019
Subject
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
43:c1:0b:1c:00:00:00:00:51:d3:73:da
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 10, 2015 - Nov 10, 2030
Subject
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2015 - Jul 7, 2025
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58
Issuer
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 1, 2017 - Nov 1, 2018
Subject
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0b:aa:c1:00:00:00:00:00:09
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ac:8a:21:bc:7a:d2:9b:72:f4:00:00:00:00:00:ac
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
10
Entry point
37092
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apm-main-win\1003745\src\rh\TerminalProxy\AppTunnelPortRedirector\driver\out\Release\Win32\F5FltDrv.pdb
ntoskrnl.exe
MmGetSystemRoutineAddress
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoGetDeviceObjectPointer
ObfDereferenceObject
IoAttachDeviceToDeviceStackSafe
memset
KeClearEvent
KeSetEvent
KeWaitForMultipleObjects
KeWaitForSingleObject
ExfInterlockedInsertTailList
ExfInterlockedRemoveHeadList
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ZwClose
sprintf
KeQueryTimeIncrement
InterlockedPushEntrySList
ExInitializeNPagedLookasideList
PsGetCurrentProcessId
IoAllocateIrp
IofCallDriver
IoFreeIrp
RtlCompareMemory
MmAllocateNonCachedMemory
MmFreeNonCachedMemory
KeTickCount
MmProbeAndLockPages
IoAllocateMdl
IoBuildDeviceIoControlRequest
IoFreeMdl
IoGetRelatedDeviceObject
ZwCreateFile
KeBugCheckEx
RtlUnwind
KeInitializeEvent
RtlIsNtDdiVersionAvailable
RtlInitUnicodeString
MmIsAddressValid
InterlockedPopEntrySList
IofCompleteRequest
ZwSetSecurityObject
IoDeviceObjectType
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
ExFreePoolWithTag
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
ExAllocatePoolWithTag
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
memcpy
ZwOpenKey
ZwSetValueKey
ZwQueryValueKey
ZwCreateKey
RtlFreeUnicodeString
RtlAnsiCharToUnicodeChar
hal
KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql
tdi.sys
TdiMapUserRequest
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
596B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
780B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=262, version=24610,
count=76, id=1, productName=Unmarked objects,
count=7, id=257, version=24610,
count=4, id=259, version=24610,
count=4, id=261, version=24610,
count=15, id=260, version=24610,
count=8, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
big_ip_client_2026/F5 VPN/F5FltSrv.exe
- IMPHASH e14fe0e785d670777472e693c04986c4
- SHA256 97acf70c36b18e266f342bff4f6d7b7a01c9902631197657a9965cd6c422e591
- MD5 109216b2eaf82446d85b37886762e3d0
- SHA1 f867c332679ffd36f7d1c29cda4e3a510fc8f6f6
- SHA512 f682301e4edcfaf5f05a8c1233e830d33ff9e7f6b420f768b3bb5fdf924295bfaae0634b6f8004347c96e92ed204ec7bece24aeeab9854066a3277b121973f29
- SSDEEP 12288:qKahQHxLdG1A5tY2eAyMf5BHzuNGrPu94wSs:qzetYfMf5hrxwSs
- TLSH T1BCD44A3162A98128F67A71B05669BBB7C16E79315B7184CB93C8453C2CA58F37E31B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ae:16:a7:cc:b0:06:86:aa:65:41:f6:0b:ac:e7:44:a3:60:18:2f:8a:e0:ba:d5:b9:6d:66:bf:4c:7b:03:b4:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
328016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\AppTunnelPortRedirector\out\Release\f5FltRedirSrv.pdb
rpcrt4
NdrServerCall2
RpcBindingSetAuthInfoExW
RpcMgmtStopServerListening
RpcServerUseProtseqEpW
RpcServerRegisterIfEx
RpcServerListen
RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingFree
NdrClientCall2
ws2_32
WSAEventSelect
WSAStringToAddressW
sendto
recvfrom
recv
listen
inet_addr
bind
accept
WSACleanup
WSAStartup
WSAAddressToStringW
ntohs
ntohl
htons
inet_ntoa
WSAResetEvent
WSARecv
WSAGetOverlappedResult
WSACreateEvent
socket
send
connect
closesocket
inet_pton
htonl
InetNtopW
WSAGetLastError
WSAEnumNetworkEvents
iphlpapi
GetAdaptersAddresses
CancelMibChangeNotify2
GetUnicastIpAddressEntry
NotifyUnicastIpAddressChange
dnsapi
DnsReplaceRecordSetW
DnsAcquireContextHandle_W
kernel32
GetTempPathW
GetLastError
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetSystemTime
GetTickCount
GetVersionExW
VerSetConditionMask
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageW
lstrlenW
CopyFileW
GetComputerNameW
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
DeviceIoControl
SetUnhandledExceptionFilter
GetLocalTime
DuplicateHandle
GetHandleInformation
TerminateThread
GetSystemTimeAsFileTime
GetCommandLineA
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwind
RaiseException
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
FindFirstFileW
FindClose
CloseHandle
DeleteFileW
CreateFileW
FlushFileBuffers
GetModuleHandleExW
GetCommandLineW
GetACP
GetStringTypeW
GetFileType
CompareStringW
LCMapStringW
GetConsoleCP
GetConsoleMode
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetEndOfFile
WriteConsoleW
DecodePointer
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
user32
LoadStringW
wsprintfW
advapi32
RegNotifyChangeKeyValue
LogonUserW
RevertToSelf
ImpersonateLoggedOnUser
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
ConvertStringSidToSidW
StartServiceW
QueryServiceStatusEx
QueryServiceStatus
CreateServiceW
LookupAccountSidW
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Name
.text
Size
455KB
Virtual Size
454KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=151, id=261, version=24610,
count=19, id=260, version=29804,
count=20, id=259, version=29804,
count=48, id=261, version=29804,
count=19, id=257, version=24610,
count=311, id=1, productName=Unmarked objects,
count=19, id=260, version=24610,
count=8, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5InstallerService.exe
- IMPHASH 744fef6cea496dd4855bf00b98c8f46b
- SHA256 5f9bca748a5277da379810d930a9dbad34dd41274a7ccbe74bff1a9e9549206f
- MD5 db62b0cb9c67ef9523972c68280d1d7e
- SHA1 25bd6f35358fec8473baea94654de5631647fa05
- SHA512 84a8ace97af1499daaa0a35f18291d4450123077333b36984ecc57ef367c7078deb784e2dc644ed306b85bb84954b45137bdd179b41be2f51d28163692d2b13a
- SSDEEP 12288:7LZ2hfBb+6WCjnFoZ/pd9IzgXG6RTe66Cq8LEnwPTzapGAe6fDJkOQsmA385/y:vQnbR5qpd9IzgXUH8LEwPyGAeElXap56
- TLSH T11BD44B25B025E876EA71B0F066299777F469953053681DC3B3C45BB86C2C8E2673BE0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a4:d9:15:5b:f3:12:39:a3:f5:1b:80:82:77:20:86:b5:d2:b0:f2:b5:33:81:7e:54:10:bf:90:0a:40:67:be:57
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
330816
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InstallerService\out\Release\f5InstallerService.pdb
shlwapi
PathFileExistsA
wininet
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
InternetReadFile
InternetConnectA
InternetQueryOptionA
InternetErrorDlg
InternetSetCookieA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetStatusCallback
InternetSetOptionA
setupapi
SetupOpenInfFileA
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitDefaultQueueCallback
SetupCloseInfFile
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
psapi
GetProcessImageFileNameA
bcrypt
BCryptGenRandom
kernel32
SetFileAttributesA
SetFileTime
WriteFile
GetTempPathA
GetTempFileNameA
CloseHandle
GetLastError
SetLastError
SetNamedPipeHandleState
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetExitCodeProcess
GetCurrentThread
GetCurrentThreadId
TerminateThread
CreateProcessA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
LocalAlloc
LocalFree
DosDateTimeToFileTime
FormatMessageA
lstrcmpA
lstrcpyW
RemoveDirectoryA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
CopyFileA
MoveFileExA
CallNamedPipeA
WaitNamedPipeA
VerifyVersionInfoW
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
SetUnhandledExceptionFilter
OpenEventA
GetLocalTime
SetConsoleCtrlHandler
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
CancelIo
OpenProcess
CreateNamedPipeA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetFileTime
GetFileSize
GetStringTypeW
GetACP
GetCommandLineW
GetCommandLineA
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileType
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlUnwind
RaiseException
InitializeSListHead
ReadFile
lstrlenA
GetFileAttributesExA
GetFileAttributesA
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
DeleteFileA
CreateFileW
CreateFileA
CreateDirectoryA
CompareFileTime
GetCurrentDirectoryA
SetCurrentDirectoryA
ExpandEnvironmentStringsA
VerSetConditionMask
SetStdHandle
SetEndOfFile
LocalFileTimeToFileTime
CompareStringW
LCMapStringW
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
TerminateProcess
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
HeapReAlloc
DecodePointer
IsProcessorFeaturePresent
user32
TranslateMessage
DispatchMessageA
PeekMessageA
PostMessageA
wsprintfA
MessageBoxA
GetForegroundWindow
MsgWaitForMultipleObjects
IsWindow
advapi32
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
GetSecurityDescriptorSacl
AddAccessAllowedAce
StartServiceA
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
QueryServiceStatus
DeleteService
CreateServiceA
ConvertStringSecurityDescriptorToSecurityDescriptorA
OpenServiceA
OpenSCManagerA
ControlService
CloseServiceHandle
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
SetSecurityDescriptorSacl
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
MapGenericMask
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetLengthSid
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
OpenProcessToken
IsValidSid
SetSecurityDescriptorDacl
IsValidAcl
ole32
CoInitialize
StringFromGUID2
CoCreateInstance
CoUninitialize
CoGetObject
Name
.text
Size
436KB
Virtual Size
436KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=149, id=261, version=24610,
count=18, id=260, version=29804,
count=20, id=259, version=29804,
count=46, id=261, version=29804,
count=2, id=262, version=24610,
count=19, id=260, version=24610,
count=23, id=257, version=24610,
count=300, id=1, productName=Unmarked objects,
count=3, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5LogonUI.exe
- IMPHASH 5cdd591602d3042faff57d2c9dff52d1
- SHA256 4600c7e21d7ed1d9c992b387122c42b78475f182f06283a9d6fee00a773ee6d2
- MD5 d98ed330de2d0ae246a2ab5a2ea12dcb
- SHA1 87e95fcb143cc22b6f07847c6989e098e39b041f
- SHA512 0972451feaf2a1d70a0cb6406f56aa6bdea03078437a3baa50541b90353de3bb05870a2bef0550cb3d75f655eb6086992a664a02e281e50b2d6a9cdc6a35a1d8
- SSDEEP 3072:9EAwU2RfDyRtDzUP604M+WA5C/zvEnb8QKZiyrOPjOwt/jur/Jm5ETXJqAD4KT8:yAwUKb0v10p++zEnb8ERryA5oqAD5Y
- TLSH T1A1248D317A80C072D963043CA4F8D7BBE42DB6B50B2994C7B398176C6E505D27A3BE5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1d:17:a0:6c:38:a9:89:76:af:56:8c:40:25:ae:5c:1d:70:19:23:51:e2:52:ef:28:35:98:19:91:89:10:84:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
65152
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\CustomDialer\out\Release\f5LogonUI.pdb
comctl32
InitCommonControlsEx
urlmon
ObtainUserAgentString
kernel32
GetTempPathA
GetModuleHandleExA
CopyFileA
GetLastError
GetVersionExA
DeleteFileA
CloseHandle
GetSystemInfo
HeapAlloc
GetProcAddress
LocalFree
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
FreeLibrary
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
FormatMessageA
MultiByteToWideChar
MapViewOfFile
QueryPerformanceCounter
FlushFileBuffers
OpenFileMappingA
SetErrorMode
GetCommandLineA
DecodePointer
WriteConsoleW
ReadConsoleW
ReadFile
SetEndOfFile
HeapReAlloc
HeapSize
SetFilePointerEx
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
GetModuleHandleA
FindFirstFileExA
GetConsoleMode
GetConsoleCP
GetFileType
LCMapStringW
CreateFileW
FindClose
lstrlenA
InitializeCriticalSection
LeaveCriticalSection
FindNextFileA
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetCurrentProcess
EnterCriticalSection
HeapFree
FindFirstFileA
GetModuleFileNameA
UnmapViewOfFile
GetStringTypeW
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
ReleaseMutex
IsValidCodePage
GetCurrentThreadId
user32
TranslateMessage
CreateWindowExA
DefWindowProcA
ShowWindow
RegisterClassExA
SetWindowPos
LoadCursorA
DispatchMessageA
UpdateWindow
GetMessageA
PostMessageA
LoadIconA
PostQuitMessage
advapi32
RegOpenKeyExA
RegEnumKeyExA
CryptAcquireContextW
CryptGetProvParam
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
SysStringLen
ws2_32
WSACleanup
WSAStartup
crypt32
CertAddCertificateContextToStore
CertFreeCertificateContext
CertOpenSystemStoreA
CertEnumCertificatesInStore
CertGetCertificateContextProperty
CertCloseStore
Name
.text
Size
142KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=24610,
count=147, id=261, version=24610,
count=18, id=260, version=24610,
count=18, id=260, version=29804,
count=20, id=259, version=29804,
count=50, id=261, version=29804,
count=2, id=262, version=24610,
count=21, id=257, version=24610,
count=250, id=1, productName=Unmarked objects,
count=4, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5PrelogonHelperService.exe
- IMPHASH fc52511829383aa95d80dc287a677bed
- SHA256 cb3be18788b1212b19b6676ab915a1eacb448daa42234c159cc13d47f4ae3c1d
- MD5 70186048341ad682a7cc40598234ec08
- SHA1 bdc0b1b01f6280acc6fc4d84dd93185ded3ed038
- SHA512 bc8e2556dbc808afe2142cbfb791644638bed7ae1be33b6ce5a17047c2c2827413c089eecfe25b143b20f2443813c52ca29397017f2bde945169b1ac05de54e0
- SSDEEP 6144:iUENL+wMu7zz6maeVvtf46rU1iF7fb46ACZQwJXN0YhAOACgXg:iUENLXMuTR46rU8F7fbZQwFMXg
- TLSH T1F9744C1077E58435F4B316329DB9CBA6893EB9600F7186DF6394166E8E306C19E32B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:22:26:63:13:16:ca:fe:5f:ff:d4:a8:9b:70:7e:8d:c6:24:9f:2b:13:d7:ad:a1:fa:4f:ec:55:50:f5:b6:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
88154
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\F5PreLogonHelperService\Release\F5PrelogonHelperService.pdb
advapi32
RegQueryValueExW
RegOpenKeyExW
FreeSid
RegEnumKeyExW
AllocateAndInitializeSid
RegCloseKey
GetTokenInformation
OpenThreadToken
GetUserNameW
GetLengthSid
StartServiceCtrlDispatcherW
CreateProcessAsUserW
OpenProcessToken
ImpersonateLoggedOnUser
InitializeSid
RegisterServiceCtrlHandlerW
CopySid
GetSidLengthRequired
GetSidSubAuthority
SetServiceStatus
SetTokenInformation
EqualSid
PrivilegeCheck
RevertToSelf
secur32
LsaFreeReturnBuffer
LsaLogonUser
rpcrt4
RpcRevertToSelfEx
RpcMgmtStopServerListening
NdrServerCall2
RpcServerUseProtseqEpW
I_RpcBindingIsClientLocal
RpcServerListen
RpcServerUnregisterIf
RpcServerRegisterIfEx
RpcImpersonateClient
userenv
LoadUserProfileW
UnloadUserProfile
CreateEnvironmentBlock
DestroyEnvironmentBlock
kernel32
HeapReAlloc
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
FindFirstFileW
HeapFree
EnterCriticalSection
FindNextFileW
GetCurrentProcess
lstrlenW
GetModuleHandleExW
GetSystemDefaultUILanguage
GetModuleFileNameW
GetUserDefaultUILanguage
LeaveCriticalSection
InitializeCriticalSection
GetTempPathW
FindClose
GetLocaleInfoW
WaitForSingleObject
CreateFileW
GetCurrentThreadId
GetVersionExW
ReleaseMutex
CreateEventW
MultiByteToWideChar
FormatMessageW
GetLastError
OutputDebugStringW
SetEvent
GetACP
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
GetProcAddress
LocalFree
DeleteCriticalSection
VerSetConditionMask
GetProcessHeap
GetModuleHandleW
FreeLibrary
CopyFileW
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
QueryPerformanceCounter
FlushFileBuffers
GetVolumeInformationW
LocalAlloc
SetInformationJobObject
SetLastError
RegisterWaitForSingleObject
AssignProcessToJobObject
TerminateProcess
CreateJobObjectW
GetQueuedCompletionStatus
ResumeThread
DuplicateHandle
OpenProcess
QueueUserWorkItem
ProcessIdToSessionId
GetCurrentThread
CreateThread
UnregisterWaitEx
TerminateJobObject
CreateIoCompletionPort
GetConsoleOutputCP
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
FindFirstFileExW
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
HeapSize
WriteConsoleW
DeleteFileW
SetEndOfFile
user32
wvsprintfW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
crypt32
CertFreeCertificateContext
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CryptUnprotectMemory
CryptMsgClose
bcrypt
BCryptFinishHash
BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptCloseAlgorithmProvider
Name
.text
Size
206KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=27412,
count=177, id=261, version=27412,
count=22, id=260, version=27412,
count=19, id=260, version=29804,
count=21, id=259, version=29804,
count=80, id=261, version=29804,
count=23, id=257, version=27412,
count=283, id=1, productName=Unmarked objects,
count=4, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5TrafficSrv.exe
- IMPHASH 63722e1c1f68f7b5ec9ccf9659aa24f8
- SHA256 9162ca0707bfb24fea119304901ebf93c14d18f2a235587668ce29eada61fba3
- MD5 e3a38fbbc567705e59f80f117dc2cfd5
- SHA1 c7c6555c6eb76881a0e61ff69f5ebb703e40d775
- SHA512 9a5069592ad9a295f4a9fc427b8b3c77141dd1cbb485745b4d5b2e1517ca4915c15fa8a13320703191a74d2ca5e685152b80330d5cfff2a5b0c17fba5f7a6dec
- SSDEEP 6144:mt2Ay7DgpJDKlNKXEsLS9B1t0zKpoZZTIcx4CW3:mc53gpJDKwa9B1teF804CW3
- TLSH T127446C31777AC871E97304F9A9A8D7F6F51898344B2288CB63850738BD358E3573792A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e2:1d:4a:d6:17:30:3e:98:d0:94:77:70:36:9d:e4:23:f5:2f:1d:08:1a:63:89:bc:e1:06:75:f3:f2:c9:b4:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
96048
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\TrafficMgr\out\Release\f5TrafficMgr.pdb
traffic
TcDeregisterClient
TcDeleteFlow
TcAddFilter
TcAddFlow
TcCloseInterface
TcOpenInterfaceW
TcEnumerateInterfaces
TcDeleteFilter
TcRegisterClient
rpcrt4
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
RpcServerUseProtseqEpA
RpcServerRegisterIfEx
RpcServerListen
NdrServerCall2
kernel32
GetTempPathA
CloseHandle
GetLastError
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ReleaseMutex
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetSystemTime
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
LocalFree
FormatMessageA
lstrlenA
CopyFileA
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
FindFirstFileExA
HeapReAlloc
GetConsoleMode
GetConsoleCP
GetFileType
LCMapStringW
CompareStringW
GetStringTypeW
GetACP
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
DecodePointer
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateFileW
VerSetConditionMask
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
HeapSize
WriteConsoleW
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReadFile
ReadConsoleW
advapi32
RegCloseKey
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ws2_32
htonl
htons
WSASetEvent
Name
.text
Size
175KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=24610,
count=148, id=261, version=24610,
count=18, id=260, version=29804,
count=20, id=259, version=29804,
count=46, id=261, version=29804,
count=19, id=260, version=24610,
count=19, id=257, version=24610,
count=250, id=1, productName=Unmarked objects,
count=4, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5_TMP/InstallerControl.cab
- SHA256 5e71176f999db7e402087ac90ee6d6ac903ae00ebf14b954622a0202801403a7
- MD5 9905641ea91d49df5e1c5b38e3f7c0b7
- SHA1 d3e1c049f6ae183b7e2b4462d050f0708bdf6fb8
- SHA512 5f495ae7dfcab64474618c4db2a069614d3d3f07b07798497e8380abe0eb14b5509013d65c0ba1d3be747db79fc73157c58f5ec7493741a55bdd8bde8c2e8fdd
- SSDEEP 49152:xWGbPRz373/Rb8xkl0oHMhd2UWVF8I8/ZpORLSkRqIFtzP4oWiSkLSDGD:QKPFLPR23d2UU8IWIRLdL95WhD
- TLSH T13DA53332F8B854ABAA514677578A14BA2502D4F3E07C508BCDF53DD0076A7EC6FBD260
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
769a82533ab19e5ef05902423088aef00088c16fa923c027edb307d65bd3c1ec
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
F5InstH.exe
- IMPHASH 4a57d18caa3db756d81edbf107bd38ad
- SHA256 23237f2de77cf6f3fb3090201659cbfe18ceee3dd9cc665f399e0a72385c5699
- MD5 c3e9d921a740f4e5b1a6d223b59f8eb4
- SHA1 742f104d6cb0dd0b4cab82f6162bb2c22f2a01b4
- SHA512 fa17da689b091fa90b05a7a3ee3b1dfa0414e7ad332400e41a2f680e1d07025cef43d811d1c955e09d003d105f7418ad51b0376eae5df1db6796e5962d7ec036
- SSDEEP 6144:QDS0yOBuMvIHqt9WJi7DWgBZc819yM+JalkIlULv7:yld1v6qt9KgH919Cal/lULv7
- TLSH T1D7747D1276D08072E573053448FA9B7BEB3AF82157219ADF6368072D4F327C16E36B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:d3:e5:1a:1e:f5:6b:9a:ee:f7:fc:1f:82:ea:40:1c:17:b8:68:ef:0d:01:ba:68:07:cf:ef:dc:65:ba:cf:65
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
80432
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InstallerHelper\out\Release\F5InstH.pdb
kernel32
GetLocaleInfoW
WaitForSingleObject
LocalAlloc
CreateFileW
GetVersionExW
ReleaseMutex
CreateEventW
MultiByteToWideChar
Sleep
FormatMessageW
OutputDebugStringW
SetEvent
DeleteFileW
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
DecodePointer
GetProcAddress
LocalFree
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
CreateProcessW
GetModuleHandleW
FreeLibrary
CopyFileW
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
FindClose
QueryPerformanceCounter
FlushFileBuffers
SizeofResource
GetCommandLineW
WriteFile
LockResource
CreateThread
LoadResource
FindResourceW
GetLocalTime
lstrcmpiW
IsWow64Process
LoadLibraryExW
SetUnhandledExceptionFilter
CallNamedPipeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
HeapSize
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
GetStringTypeW
LCMapStringW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetTempPathW
CreateMutexW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetUserDefaultUILanguage
WaitForMultipleObjects
GetModuleFileNameW
GetSystemDefaultUILanguage
lstrlenW
FindNextFileW
EnterCriticalSection
HeapFree
FindFirstFileW
SetLastError
VirtualQuery
FlushInstructionCache
GetLastError
GetCurrentThreadId
VirtualAlloc
GetCurrentProcess
VirtualFree
VirtualProtect
GetACP
GetStdHandle
GetModuleHandleExW
ExitProcess
SetEndOfFile
GetFileType
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
user32
PostThreadMessageW
wsprintfW
GetMessageW
CharNextW
DispatchMessageW
advapi32
RegCloseKey
RegQueryInfoKeyW
GetSidSubAuthorityCount
RegDeleteKeyW
GetSidSubAuthority
RegCreateKeyExA
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
OpenProcessToken
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
GetTokenInformation
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoRegisterClassObject
CoTaskMemRealloc
CoRevokeClassObject
CoTaskMemAlloc
oleaut32
VarUI4FromStr
SysAllocString
SysFreeString
Name
.text
Size
159KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=151, id=261, version=24610,
count=18, id=260, version=24610,
count=53, id=261, version=29804,
count=19, id=260, version=29804,
count=19, id=259, version=29804,
count=1, id=262, version=24610,
count=15, id=257, version=24610,
count=253, id=1, productName=Unmarked objects,
count=7, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
F5InstP.dll
- IMPHASH 2a43c02f3b51e56e0b917ca4beaf5585
- SHA256 1a701dd0d1ee75714ef9ed991bf0ec569132baae187b4b9854112fd735723881
- MD5 031ebb538d69691d65279b16717c2c3b
- SHA1 731c325f776da6c7dc8da0b17678845b048cdad3
- SHA512 2d22367dc0d9b62d02027f4d65e3f11b14a8dd74b26b6636788eb39f70e5b1e5726693397efd8d34563d7acb65fe0ee74499f0a52ad18b216e420a3f78060933
- SSDEEP 1536:lSm1WBFqxYuhetlvYlzGgy/aqzbJuNsW9cdQmw6ejpu/3tOKxnZDStyr:8+xbhePYlzGrzbYMQmw6ejpm3tOKT/
- TLSH T123936B00B6D09070E9BE4D3914B4C5614F7C7950CFE19EEB2B96466A4F742E0EE32E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:fb:15:31:94:f8:fc:20:9a:45:a3:9b:d6:d3:b4:c0:b0:0a:ea:c9:13:77:38:0d:b7:35:5a:cb:33:02:6f:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
5504
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InstallerHelper\out\Release\F5InstP.pdb
rpcrt4
NdrDllRegisterProxy
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllUnregisterProxy
kernel32
RaiseException
CreateFileW
CloseHandle
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
DisableThreadLibraryCalls
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
WriteConsoleW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
228B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=125, id=261, version=24610,
count=18, id=260, version=24610,
count=29, id=261, version=29804,
count=15, id=260, version=29804,
count=18, id=259, version=29804,
count=5, id=257, version=24610,
count=102, id=1, productName=Unmarked objects,
count=3, id=264, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
InstallerControl.dll
- IMPHASH 0a9a723577d5f9cac72e69807cc55359
- SHA256 fb80afc2d5da679adc2458882943534bb3888f7942cd006bde96bd3ea9a2f776
- MD5 d6bf08a5c3936c62038833dd1e49829c
- SHA1 633a88531d785b68f5374debd9b075f935334735
- SHA512 ba7aa8afc078540e04ba5c24121246c1da22abd2ebd1d800c823467ec73d5f74f2117855018efb93a911c1107736bbff4997e8d09f48a2865b59e41e23e89e60
- SSDEEP 12288:rGp07CjQdOkTHZH+QMNhEVgzOWFzzw1jzQ6cYw:iEqXkTHWhEVxWdAuYw
- TLSH T156F47D336246C370FA7E10746A2CAB7BD16CD9722B3025C7EB945E6C6D704D26A36E07
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:a8:9a:2c:14:27:3d:0b:8e:45:03:21:74:a5:69:de:d3:f1:ba:f6:4a:49:31:c2:17:68:ea:71:39:12:83:d2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
371408
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InstallerControl\out\Release\InstallerControl.pdb
kernel32
WriteFile
GetTempPathA
GetTempFileNameA
CloseHandle
SetNamedPipeHandleState
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetExitCodeProcess
GetCurrentThread
TerminateThread
CreateProcessA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
LoadLibraryA
LocalAlloc
LocalFree
DosDateTimeToFileTime
FormatMessageA
lstrcmpA
lstrcpyW
lstrlenA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
CopyFileA
MoveFileExA
WaitNamedPipeA
SetFileTime
VerifyVersionInfoW
FileTimeToSystemTime
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetEndOfFile
SetStdHandle
GetStringTypeW
GetStdHandle
GetACP
LCMapStringW
HeapReAlloc
HeapSize
ExitProcess
GetFileType
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualProtect
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
GetStartupInfoW
SetFileAttributesA
RemoveDirectoryA
ReadFile
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesExA
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
CreateFileW
DeleteFileA
CreateFileA
CreateDirectoryA
CompareFileTime
GetCurrentDirectoryA
SetCurrentDirectoryA
ExpandEnvironmentStringsA
VerSetConditionMask
CallNamedPipeA
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
lstrcmpiA
MulDiv
SizeofResource
LockResource
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RaiseException
DecodePointer
EncodePointer
OutputDebugStringA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
FlushFileBuffers
WriteConsoleW
user32
UnregisterClassA
CallWindowProcA
RegisterClassExA
GetClassInfoExA
CreateWindowExA
IsWindow
IsChild
DestroyWindow
ShowWindow
SetWindowPos
CharNextA
SetFocus
GetFocus
GetKeyState
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
InvalidateRect
GetClientRect
IntersectRect
UnionRect
OffsetRect
EqualRect
PtInRect
GetWindowLongA
SetWindowLongA
LoadCursorA
PostMessageA
LoadStringA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
MsgWaitForMultipleObjects
GetForegroundWindow
DefWindowProcA
gdi32
SetWindowOrgEx
SetViewportOrgEx
LPtoDP
SetMapMode
SaveDC
RestoreDC
GetDeviceCaps
DeleteDC
CreateRectRgnIndirect
CreateDCA
advapi32
RegSetValueExA
RegCreateKeyExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA
MapGenericMask
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
OpenProcessToken
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
ole32
CoGetObject
CoInitialize
StringFromGUID2
OleRegEnumVerbs
OleRegGetMiscStatus
CoCreateInstance
StringFromCLSID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
OleRegGetUserType
CreateOleAdviseHolder
CoUninitialize
oleaut32
VariantChangeType
VarUI4FromStr
LoadTypeLi
VariantClear
OleCreatePropertyFrame
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
LoadRegTypeLi
SysAllocString
SysFreeString
SysStringLen
VariantInit
bcrypt
BCryptGenRandom
shlwapi
PathFileExistsA
urlmon
CoInternetParseUrl
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
setupapi
SetupInitDefaultQueueCallbackEx
SetupInitDefaultQueueCallback
SetupCloseInfFile
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupTermDefaultQueueCallback
wininet
InternetCrackUrlA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetQueryDataAvailable
InternetQueryOptionA
InternetSetOptionA
InternetSetStatusCallback
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetSetCookieA
InternetErrorDlg
crypt32
CertFreeCertificateContext
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Name
.text
Size
480KB
Virtual Size
480KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=168, id=261, version=24610,
count=16, id=260, version=29804,
count=20, id=259, version=29804,
count=47, id=261, version=29804,
count=19, id=260, version=24610,
count=9, id=262, version=24610,
count=29, id=257, version=24610,
count=360, id=1, productName=Unmarked objects,
count=5, id=261, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
InstallerControl.inf
- SHA256 87c8885277d137a38e6887a0c373fb2d157d1bca40e2526134e884cf1465551c
- MD5 d4521a48067ea4032c93fce88efb450b
- SHA1 4cc289da6e75a0dc81e29634c96bd0a2aefe11d0
- SHA512 d1af9664d17ad6b4e9a91749477224b3e695649ba799eeb5249958447fce3e53d6acf47796378bda97216c374843d779961ea9649437a180b26bdc60151d8678
- TLSH T193110625C10F03F915902B25C2A11BE0B7EF62D84F2525487247BD5701D3D2C9BA44FF
- MD5 SHA1 SHA512 TLSH
f5instd.exe
- IMPHASH a57aecca902e5ce45c3fcb6acb70c085
- SHA256 4b980c8e4397c9c3500c5a073cbbb646a3acde2365fd8d171edde4e96a3978ef
- MD5 3a2ce76083dc116c283c0d09e1e8aa23
- SHA1 03af13c184c11812582c381ed3a93f39981e9cab
- SHA512 a7f114ad837389759c68da0ff40a771a9dafba12240b8571e17d1a1197f8d4066fcdab70df9b4d3c76432bd990256ef4838e1f2d09433b038ec71eab7cfcbb54
- SSDEEP 12288:qsLokCdkgkjC+NZZboB7lUIYLXopY4/Go5Hs7YjPeFDC:VLFkklNZIUIEYBGo5HsUj0C
- TLSH T177D45B21B439E975DEB2A0F45E0AD776E59C9830176A04C3F3C84674AC6C4F2673AA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6a:56:8e:e5:41:88:37:ed:af:a3:f5:ab:7b:7c:cc:4c:49:2e:cc:9e:4b:0d:5a:7d:d1:93:0f:42:f2:86:54:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
315040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InstallerVI\out\Release\f5Installer.pdb
shlwapi
PathFileExistsA
setupapi
SetupOpenInfFileA
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitDefaultQueueCallback
SetupCloseInfFile
kernel32
SetNamedPipeHandleState
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
Sleep
WaitForMultipleObjects
GetCurrentProcessId
GetExitCodeProcess
GetCurrentThread
GetCurrentThreadId
TerminateThread
CreateProcessA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
LocalAlloc
LocalFree
DosDateTimeToFileTime
FormatMessageA
lstrcmpA
lstrcpyW
lstrlenA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
SetLastError
MoveFileExA
CallNamedPipeA
WaitNamedPipeA
VerifyVersionInfoW
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
CancelIo
OpenProcess
CreateNamedPipeA
CreateToolhelp32Snapshot
Process32First
Process32Next
K32GetProcessImageFileNameA
TlsAlloc
HeapSize
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
EncodePointer
GetOEMCP
IsValidCodePage
FindFirstFileExA
LCMapStringW
SetStdHandle
GetStringTypeW
GetACP
GetStdHandle
GetLastError
GetTempFileNameA
GetTempPathA
WriteFile
SetFileTime
SetFileAttributesA
RemoveDirectoryA
ReadFile
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesExA
GetFileAttributesA
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
DeleteFileA
CreateFileW
CreateFileA
CreateDirectoryA
CompareFileTime
GetCurrentDirectoryA
SetCurrentDirectoryA
ExpandEnvironmentStringsA
VerSetConditionMask
LoadLibraryA
SetDefaultDllDirectories
GetProcAddress
FreeLibrary
CreateThread
GetCurrentProcess
CloseHandle
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetEndOfFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
HeapReAlloc
CopyFileA
DecodePointer
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetFileType
RaiseException
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
CreateEventW
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
GetConsoleCP
user32
TranslateMessage
DispatchMessageA
PeekMessageA
PostQuitMessage
MsgWaitForMultipleObjects
LoadCursorA
SetWindowLongA
GetWindowLongA
MessageBoxA
GetWindowRect
GetClientRect
SetWindowTextA
GetForegroundWindow
DestroyWindow
SetWindowPos
ShowWindow
IsWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
PostMessageA
LoadStringA
gdi32
GetStockObject
advapi32
SetSecurityDescriptorSacl
SetSecurityDescriptorDacl
IsValidSid
IsValidSecurityDescriptor
IsValidAcl
InitializeSecurityDescriptor
InitializeAcl
GetSecurityDescriptorSacl
AddAccessAllowedAce
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
MapGenericMask
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetLengthSid
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
OpenProcessToken
ole32
CoCreateInstance
StringFromGUID2
CoInitialize
CoGetObject
CoUninitialize
Name
.text
Size
421KB
Virtual Size
421KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
116KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=170, id=261, version=24610,
count=18, id=260, version=29804,
count=20, id=259, version=29804,
count=49, id=261, version=29804,
count=2, id=262, version=24610,
count=19, id=260, version=24610,
count=15, id=257, version=24610,
count=295, id=1, productName=Unmarked objects,
count=4, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
f5unistall.exe
- IMPHASH e9ce28c2df398f69e2d24bef2efef85c
- SHA256 60770c90fb0835bbbf18ea465f132f6c6c9c6e69221e4bbf68f04beb67b04465
- MD5 2ef76969d033ed88b53a0c65fc17f011
- SHA1 be7a5b4d23ae6111370c447766bf6f8aa433a146
- SHA512 35b011d3047d859e46d8ea4286ae0a1265d9dff2528c953597643f43702bf390ecb8a97bef85ada73d6eee2f0767bd3abb1840110c883c349fcb9e5a5ed25426
- SSDEEP 98304:OGVZIjv/giT+tdOMKZe0ookcVm5s2N25UxJw350OvOPdGpGWOPJ:OGrsXgiT+tdxuIsP30OvOPdGU
- TLSH T1AE067B323D48C077D56A033A961CEA7EA26CBC341FF600E752A4BA1D6D716E20FB5647
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ae:d3:a4:a6:83:32:a6:1b:11:f8:25:91:60:ed:f4:cb:20:04:c8:f3:f6:10:b2:06:93:34:9a:df:38:5a:c9:f2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
2149104
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\WinInfo\out\Release\f5WinInfo.pdb
setupapi
SetupTermDefaultQueueCallback
ws2_32
WSAStartup
WSACleanup
getaddrinfo
freeaddrinfo
getnameinfo
closesocket
socket
shlwapi
PathIsUNCA
PathRemoveFileSpecW
StrFormatKBSizeA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
SHDeleteKeyA
psapi
GetProcessImageFileNameA
EnumProcesses
kernel32
EncodePointer
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
GetFullPathNameA
LockFile
SetEndOfFile
UnlockFile
GetVolumeInformationA
MoveFileA
GetThreadLocale
GetStringTypeExA
SetThreadPriority
SuspendThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
ReplaceFileA
GetUserDefaultLCID
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemDefaultUILanguage
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetLocaleInfoW
GlobalFlags
VirtualProtect
GetOEMCP
GetCPInfo
GetFileSizeEx
GetACP
FindResourceExW
VerifyVersionInfoA
GetProfileIntA
SearchPathA
GetStringTypeW
InitializeCriticalSectionEx
LCMapStringEx
GetLocaleInfoEx
CompareStringEx
WaitForSingleObjectEx
CreateEventW
GetCommandLineA
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetLocaleInfoA
VerifyVersionInfoW
QueryDosDeviceA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
lstrlenA
lstrcpyW
lstrcpyA
lstrcpynA
GetShortPathNameA
LocalAlloc
MapViewOfFile
VirtualFree
VirtualAlloc
GetVersionExA
GetModuleHandleW
GetModuleFileNameW
GlobalSize
LoadLibraryW
OutputDebugStringW
GetCurrentDirectoryW
GetFileAttributesW
GetFileAttributesExW
SetFilePointerEx
DeviceIoControl
AreFileApisANSI
RtlUnwind
InterlockedPushEntrySList
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
CreateMutexA
ReleaseMutex
ResetEvent
InitializeCriticalSection
QueryPerformanceCounter
SetErrorMode
SetLastError
OutputDebugStringA
GetTempFileNameA
SetFileTime
LocalFileTimeToFileTime
GetLongPathNameA
GetFileAttributesExA
FlushFileBuffers
FindNextFileW
FindFirstFileW
FileTimeToLocalFileTime
CreateFileW
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
MulDiv
GlobalFree
GetFileTime
GetDiskFreeSpaceA
WaitNamedPipeA
CallNamedPipeA
OpenMutexA
GetCurrentThread
OpenEventA
IsDBCSLeadByte
FindResourceA
FormatMessageW
FormatMessageA
LocalFree
SetDefaultDllDirectories
LoadLibraryExA
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
GetUserDefaultUILanguage
GetTempPathA
CopyFileA
CreateFileMappingA
lstrcmpiA
lstrcmpA
GetProcAddress
GetModuleHandleA
UnmapViewOfFile
MapViewOfFileEx
GetFileSize
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
GetModuleFileNameA
WriteProcessMemory
VirtualProtectEx
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
ExitProcess
GetCurrentProcess
Sleep
DuplicateHandle
GetExitCodeThread
MultiByteToWideChar
TerminateProcess
DeleteFileA
LoadLibraryA
FreeLibrary
GetWindowsDirectoryA
WriteFile
SetFilePointer
ReadFile
CreateFileA
GlobalLock
GlobalUnlock
GlobalAlloc
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
TerminateThread
WaitForMultipleObjects
CreateEventA
WaitForSingleObject
SetEvent
CompareFileTime
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
CreateProcessA
OpenProcess
GetLastError
CloseHandle
GetCommandLineW
VirtualQuery
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetFileType
SetStdHandle
HeapQueryInformation
QueryPerformanceFrequency
GetStdHandle
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetDriveTypeW
FindFirstFileExA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
TlsFree
InitializeSListHead
user32
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
GetNextDlgGroupItem
CopyAcceleratorTableA
LoadAcceleratorsW
SetWindowRgn
LockWindowUpdate
GetDCEx
UnionRect
LoadImageW
TrackMouseEvent
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
DestroyCursor
LoadCursorW
SetCursorPos
SetCapture
IsZoomed
WindowFromPoint
DeleteMenu
GetSystemMenu
ReuseDDElParam
UnpackDDElParam
LoadImageA
InsertMenuItemA
CreatePopupMenu
LoadMenuA
ReleaseCapture
BringWindowToTop
GetMessageA
IntersectRect
GetActiveWindow
GetNextDlgTabItem
CreateDialogIndirectParamA
SetRectEmpty
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
CharUpperA
IsDialogMessageA
SendDlgItemMessageA
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextA
MoveWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
DefFrameProcA
EndPaint
BeginPaint
GetMenuDefaultItem
TabbedTextOutA
GrayStringA
DrawTextExA
IsWindowEnabled
SetFocus
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
SetParent
SetWindowTextA
GetForegroundWindow
MsgWaitForMultipleObjects
EndDialog
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExA
DefWindowProcA
PeekMessageA
LoadStringA
GetDialogBaseUnits
GetDlgItem
GetClassNameA
GetWindowTextA
CheckMenuItem
GetAsyncKeyState
CharNextA
RegisterClipboardFormatA
PostQuitMessage
wsprintfA
UnregisterClassA
LoadStringW
LoadBitmapW
DrawIcon
IsIconic
CopyIcon
LoadCursorA
SetCursor
GetWindowThreadProcessId
EnumWindows
EnumChildWindows
ClientToScreen
SetMenuItemBitmaps
EnumDisplayMonitors
DrawStateA
SetClassLongA
DrawEdge
FrameRect
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
EnableMenuItem
CharNextExA
CharNextW
IsRectEmpty
OffsetRect
InflateRect
SetRect
ScreenToClient
RedrawWindow
InvalidateRgn
GetSystemMetrics
GetKeyState
IsCharAlphaNumericA
DispatchMessageA
TranslateMessage
DestroyIcon
GetScrollBarInfo
LoadIconW
LoadIconA
GetDesktopWindow
GetCursorPos
MessageBeep
GetWindowRect
UpdateWindow
GetSubMenu
LoadMenuW
TranslateAcceleratorA
LoadAcceleratorsA
KillTimer
SetTimer
GetFocus
EmptyClipboard
SetClipboardData
CloseClipboard
DefMDIChildProcA
OpenClipboard
IsWindow
PostMessageA
GetParent
SetWindowLongA
GetWindowLongA
PtInRect
CopyRect
DrawFocusRect
GetSysColor
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextA
EnableWindow
CallWindowProcA
SendMessageA
DrawFrameControl
MessageBoxA
IsWindowVisible
TranslateMDISysAccel
SubtractRect
NotifyWinEvent
CreateAcceleratorTableA
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
GetWindowDC
DrawMenuBar
CreateMenu
GetWindowRgn
FillRect
GetPropA
gdi32
SetRectRgn
DPtoLP
CreateCompatibleBitmap
GetBkColor
CreateFontA
GetCharWidthA
StretchDIBits
CreateEllipticRgn
Ellipse
LPtoDP
GetTextColor
GetRgnBox
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
SetBkMode
Polygon
Polyline
GetMapMode
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
GetTextExtentPoint32A
PatBlt
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
GetStockObject
GetObjectA
CreateDIBSection
SelectObject
GetCurrentObject
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
TextOutA
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
DeleteObject
CreateRectRgnIndirect
CreateFontIndirectA
CreateCompatibleDC
CombineRgn
BitBlt
ExtTextOutA
GetTextMetricsA
SetTextColor
SetBkColor
CreateRoundRectRgn
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
advapi32
GetSidSubAuthorityCount
RegEnumKeyExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
CloseServiceHandle
OpenSCManagerA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegSetValueA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyA
RegEnumValueA
MapGenericMask
RegCloseKey
GetSidSubAuthority
GetUserNameA
DeleteService
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
StartServiceA
ControlService
RegSetValueExA
RegQueryInfoKeyW
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
QueryServiceStatus
OpenServiceA
shell32
ShellExecuteExA
ord680
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteA
comctl32
ImageList_GetImageCount
ImageList_Draw
ImageList_GetImageInfo
ord8
ImageList_AddMasked
ImageList_ReplaceIcon
ole32
CoDisconnectObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleLockRunning
CoInitializeSecurity
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
StringFromCLSID
CoSetProxyBlanket
CoInitializeEx
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromString
CoGetClassObject
CoInitialize
CoCreateInstance
CoUninitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
oleaut32
OleCreateFontIndirect
VarBstrFromDate
SafeArrayDestroy
SysAllocStringLen
LoadTypeLi
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysAllocString
VarBstrCat
VarUI4FromStr
SysStringLen
SysFreeString
oledlg
ord8
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
545KB
Virtual Size
545KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
48KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
232B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
458KB
Virtual Size
457KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=28, id=259, version=24610,
count=25, id=260, version=24610,
count=223, id=261, version=24610,
count=20, id=260, version=29804,
count=25, id=259, version=29804,
count=18, id=262, version=24610,
count=33, id=257, version=24610,
count=991, id=1, productName=Unmarked objects,
count=412, id=261, version=29804,
count=1, id=260, version=29912,
count=29, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
uregsvr.exe
- IMPHASH 13e39e35ff5e086530bcc63737954880
- SHA256 d77e76b8389408fd2b224ae7b7beaaf2cd06999aa6179051abfe0cff0b405508
- MD5 f128eb0cb3abda1ad076039d453c53ac
- SHA1 1b23b714d5f1fc59ee2110faa9d4e153340ca61d
- SHA512 ebae7ecacf30308dd8c2c3a93a76afe503149ad12459901bba82fb93f06029cc869e9fd7cbddb278df3ffdbb92ca1c72ed926d3b281ff4ce3a284891c874c630
- SSDEEP 3072:lDCfoyeBiMysHw7R+S6wWcCcB4zYBmt5//ZmMsgHTSmyZ+zKTHl:yNfsm6wsc2JmWSTZ+OJ
- TLSH T1E3C37D0275C9C472F9B20D3514B48AB34A3EF9305F70AED737A826798F642D06A35F66
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
97:3a:83:f8:09:f1:ce:9a:fe:df:2c:09:e6:95:28:f5:01:90:f4:1b:c6:0c:c9:99:a8:f6:4e:ad:e9:f4:1c:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
11632
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\Tools\uregsvr\out\Release\f5uregsvr.pdb
kernel32
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
GetCurrentThreadId
SetLastError
GetCommandLineW
GetProcAddress
LoadLibraryW
GlobalAlloc
GlobalFree
CreateFileW
CloseHandle
DecodePointer
GetCurrentThread
GetCurrentProcess
VirtualQuery
GetLastError
FlushFileBuffers
SetFilePointerEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
WriteConsoleW
user32
MessageBoxW
advapi32
RegOverridePredefKey
RegCloseKey
RegOpenKeyW
ole32
CoInitialize
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=129, id=261, version=24610,
count=39, id=261, version=29804,
count=17, id=260, version=29804,
count=18, id=259, version=29804,
count=9, id=257, version=24610,
count=99, id=1, productName=Unmarked objects,
count=19, id=260, version=24610,
count=3, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5_TMP/OesisInspector.cab
- SHA256 9fb9fbdb600fc798a6e362925bb372c806a6cee09038b405c1ded45b2425f2c8
- MD5 08cc350dd8d1c412ae5e1c90ef209214
- SHA1 3eb8382a00903d53107b03f58ba34b7485ebacf8
- SHA512 02767cd18056c3b1f72c9ddeb9a88f1d8ff1b6377a06774cf127c82ca56a347bb57f2a6cc3d1384865b7ab884a830e3691241b241847f6bc875b713d4f2efd6a
- SSDEEP 196608:2/8WxJ1rpRQtJ3HbaXJrKNAhUulkzG1ISKcqQZrQ4Vgwz6BtSTmd775:g8U63HbapKNA2t8VqeQ4V36BtSmd
- TLSH T1BCB633A939A0101CFE376ABA2D4DDEDD1F81B5E590A5D5770CB9B8020707A8D23C86DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1e8827e8955c7110aa3b82d7c96a47c962f6193f977e0b48e9a9088b0fa5753c
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 16, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
OesisInspector.inf
- SHA256 1d9b1f2cd35bfd69c9d679fc741db406fed3d9eef646de8d33a821a59b03f5df
- MD5 36964880161b677c04787aaed77f391a
- SHA1 0ecf2ee7bbe898e036a13b6d632f8cc3c53c3fd6
- SHA512 787cf2cc90f0f3833d23dd3d3b77067ddb7986874eb844f8f0f09cc33e9b7b2fddc04d71ed45d75223b98c24916d1c39845aad4fa6296190a193d91eb47eff7f
- TLSH T136210309815746FAA798BFD8C481750CEB8B11FEAE363418F218888759EB52E0B445FB
- MD5 SHA1 SHA512 TLSH
f5OesisInspectorCom4.dll
- IMPHASH 07a0c0de991fdb359e5c077605b0fe4b
- SHA256 e759311a25b46d71da47c952f4347c333cff3dfdb701a607bbde92a66c84e541
- MD5 e1ff3438fd2bc802ae4d3bff62c76107
- SHA1 49dce0b87dc26bcfca510af3bcc709d42d359db4
- SHA512 7f2bd5065d756a6a91f8c00f4c036c3af0ba03840ab5f09b4c8b25cc7e95fc1defdee991214ee3c65ad90522e482b0d7744441ae2c54468b03b32c6656652265
- SSDEEP 12288:nrwxGNfkPwGYlYBYg22wNkZjepR+knDCpxtQINuTvLx/Gu8SpG:nrwxEkPwGYlYBbDwNkZje/WtQ1LxpG
- TLSH T1D1058E213A4DC035F25D01715828BBB5C1BEBD224FB14ADB77845F5E5E302D2AB36A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
66:a8:7d:a2:a8:65:c7:90:1d:20:0a:4c:bf:65:77:3f:33:3d:a9:c0:84:61:95:50:26:b4:0b:0c:42:9d:59:fa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 16, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
333041
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\epsec1.0.0-win\1534095\src\rh\FarEnd\OesisInspector\OesisInspectorCom4\out\Release\f5OesisInspectorCom4.pdb
kernel32
MultiByteToWideChar
Sleep
FormatMessageW
GetLastError
OutputDebugStringW
SetEvent
CloseHandle
GetSystemInfo
LoadLibraryW
ResetEvent
HeapAlloc
GetProcAddress
LocalFree
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
CopyFileW
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
QueryPerformanceCounter
CreateEventW
SetThreadLocale
GetThreadLocale
EncodePointer
InitializeCriticalSectionEx
RaiseException
DecodePointer
SetDllDirectoryW
SizeofResource
LoadResource
FindResourceW
lstrcmpiW
LoadLibraryExW
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
FlushFileBuffers
GetSystemDirectoryW
ReleaseMutex
GetVersionExW
GetCurrentThreadId
CreateFileW
LocalAlloc
WaitForSingleObject
GetLocaleInfoW
FindClose
CreateMutexW
GetTempPathW
LeaveCriticalSection
GetUserDefaultUILanguage
GetModuleFileNameW
GetSystemDefaultUILanguage
GetModuleHandleExW
ReleaseSemaphore
lstrlenW
GetCurrentProcess
FindNextFileW
EnterCriticalSection
HeapFree
FindFirstFileW
TryEnterCriticalSection
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
HeapReAlloc
HeapSize
ReadConsoleW
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetStdHandle
SetFilePointerEx
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentThread
GetThreadTimes
FreeLibraryWhenCallbackReturns
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FreeLibraryAndExitThread
GetModuleHandleA
SetLastError
CreateTimerQueue
CreateEventExW
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount64
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FlushProcessWriteBuffers
GetCurrentProcessorNumber
VirtualAlloc
VirtualProtect
VirtualFree
DuplicateHandle
CreateSemaphoreExW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
GetFileType
SetEndOfFile
ExitProcess
SetStdHandle
user32
CharNextW
advapi32
RegCloseKey
RegQueryInfoKeyW
GetSidSubAuthorityCount
RegDeleteKeyW
AllocateAndInitializeSid
GetSidSubAuthority
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
OpenProcessToken
FreeSid
CheckTokenMembership
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
GetTokenInformation
ole32
CoInitializeEx
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
oleaut32
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
SysFreeString
RegisterTypeLi
SysAllocString
SysStringLen
UnRegisterTypeLi
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Name
.text
Size
618KB
Virtual Size
618KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
144KB
Virtual Size
143KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=178, id=261, version=27412,
count=19, id=259, version=27412,
count=17, id=260, version=29804,
count=23, id=259, version=29804,
count=143, id=261, version=29804,
count=25, id=260, version=27412,
count=13, id=257, version=27412,
count=287, id=1, productName=Unmarked objects,
count=4, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
libwaapi.dll
- IMPHASH 474ae300888746d9eae161ec009c7cee
- SHA256 51c35022ed02da7adedabbf2c69a8f527a679a8006b7924326e3f86918f065b9
- MD5 9e89536b14da7ef8477fc20f963dd14e
- SHA1 a0302d68342f9886a6bb1f890ed1bd96fbc9e5cc
- SHA512 104e68d387da4db5f3b70d3d9c088cd52d67abaf1c6cc11bae57b2103fe2b700bfc499ac61efd3b453b952a350bf6d5242792100a3e7cd35acac7e5c75c300cb
- SSDEEP 24576:ECNch8wbH84Eq5x2ZFdrN+xsl/GE2LwQ72dGk1Ih8TbjP97aio66tA:4rhENrgxsl/GE2LwQ72dG9hAbjP9Wiom
- TLSH T144058E223EDAC033F5AF0335582CAA7A10BEB9610F3185DBA7D45B3D5E745C29A31A53
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f8:58:2c:59:1b:7c:4b:11:83:f0:17:4b:76:2b:b4:8a:fd:35:81:fb:a9:98:d9:a2:47:4e:4f:ba:22:08:7e:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Chains
Dec 16, 2025
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0d:ad:d7:6d:c4:42:db:11:4e:a3:74:8e:94:b2:88:d8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2024 - May 26, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
274656
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
libwaapi.pdb
libwaheap
_wa_getHeap@0
crypt32
CryptQueryObject
CertFindCertificateInStore
CryptMsgClose
CertFreeCertificateContext
CertCloseStore
CryptMsgGetParam
wintrust
WinVerifyTrust
kernel32
WriteConsoleW
WideCharToMultiByte
EnterCriticalSection
GetCurrentProcess
InitializeCriticalSectionEx
LocalAlloc
CreateToolhelp32Snapshot
GetLastError
Process32NextW
Process32FirstW
CloseHandle
RaiseException
DecodePointer
LocalFree
DeleteCriticalSection
GetCurrentProcessId
GetExitCodeProcess
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
DuplicateHandle
CreateFileW
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapSize
GetTimeZoneInformation
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
ExitThread
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
SetEvent
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetProcAddress
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
GetStringTypeW
QueueUserWorkItem
IsProcessorFeaturePresent
EncodePointer
QueryPerformanceCounter
GetNativeSystemInfo
GetExitCodeThread
GetCurrentThread
Sleep
WaitForSingleObjectEx
MultiByteToWideChar
libwautils
?destroy@?$Singleton@VWaWMIManager@@@@SAXXZ
?instance@?$Singleton@VWaWuaProgressReceiver@@@@SAPAVWaWuaProgressReceiver@@XZ
?isRemoteConnected@WaEndPointManager@@QAE_NXZ
?setVersionStamp@WaHttp@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?destroy@DIContainer@@QAEXXZ
?enable@WaRevocationCheck@WaCertificate@@QAEXXZ
?disable@WaRevocationCheck@WaCertificate@@QAEXXZ
?isLicensed@WaLicense@@QBEHH@Z
?validateInvokeInput@WaValidator@@SAHAAVWaJson@@AAH@Z
?setComponentAllocation@WaComponentManager@@QAEHPA_WAAPAVWaExternalComponent@@@Z
?initModule@WaComponentManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WAAVWaJson@@@Z
?getComponent@WaComponentManager@@QBEHPB_WPAPAVWaExternalComponent@@@Z
?end@WaComponentManager@@QBE?AV?$_List_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaExternalComponent@@@std@@@std@@@std@@@std@@XZ
?begin@WaComponentManager@@QBE?AV?$_List_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaExternalComponent@@@std@@@std@@@std@@@std@@XZ
?getMethodDefinition@WaProductUtils@@YAHHHAAVWaJson@@@Z
?get@WaDatabase@@SAHABW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?cachedInvoke@WaExternalComponent@@QBEHAAVWaJson@@PAPA_W@Z
?getDllName@WaExternalComponent@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getModuleName@WaExternalComponent@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?fileContents@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_NHHAB_N@Z
?remove@WaJson@@UAEXPB_W@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?get@WaJson@@UBEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?put@WaJson@@UAEXPB_WABV1@@Z
?size@WaJson@@UBEIXZ
?getType@WaJson@@UBE?AW4WaJsonType@@XZ
??0WaJson@@QAE@ABV0@@Z
??0WaJson@@QAE@$$QAUObjectConstructor@0@@Z
??1PerfLoggingScope@@QAE@XZ
??0PerfLoggingScope@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setEventPreStop@WaEventManager@@QAEXABW4WaEventType@1@$$QAV?$function@$$A6AHH@Z@std@@@Z
?setEventPreLaunch@WaEventManager@@QAEXABW4WaEventType@1@$$QAV?$function@$$A6AHP6AXPA_W@ZHVWaJson@@@Z@std@@@Z
?setEventSink@WaEventManager@@QAEXABW4WaEventType@1@$$QAV?$function@$$A6AHP6AXPA_W@ZV?$shared_ptr@VWaSignalLock@@@std@@HVWaJson@@@Z@std@@@Z
?_dotRetrieve@WaJson@@EAEHPB_WAAV1@W4WaJsonType@@@Z
?_dotInsert@WaJson@@EAEHPB_WABV1@W4WaJsonType@@@Z
?_dotInsert@WaJson@@EAEHPB_W$$QAV1@W4WaJsonType@@@Z
?_encodeString@WaJson@@EBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?_toPrettyString@WaJson@@EBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_N@Z
?_set@WaJson@@EAEXAB_J@Z
?_set@WaJson@@EAEX_N@Z
?_set@WaJson@@EAEXPB_W@Z
?_set@WaJson@@EAEX$$QAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_set@WaJson@@EAEXABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
?_set@WaJson@@EAEXABV?$unordered_map@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@Uwa_map_hasher@@Uwa_map_equal_to@@V?$wa_allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@@std@@@@@std@@@Z
?_init@WaJson@@EAEXXZ
?removeRecursive@WaJson@@UAEXPB_W@Z
?first@WaJson@@UAE?AV1@XZ
?val@WaJson@@UBEHAAH@Z
?val@WaJson@@UBEHAA_J@Z
?val@WaJson@@UBEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?val@WaJson@@UBEHAA_N@Z
?val@WaJson@@UBEHAAV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
?keys@WaJson@@UBE?AV?$set@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ
?contains@WaJson@@UBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?remove@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?remove@WaJson@@UAEXH@Z
?dotAdd@WaJson@@UAEHPB_W$$QAV1@@Z
?dotAdd@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?dotAdd@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV1@@Z
?dotPut@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?dotAt@WaJson@@UAEHPB_WAAV1@@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?dotAt@WaJson@@UAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?dotAt@WaJson@@UAEHPB_WAAH@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?dotAt@WaJson@@UAEHPB_WAA_J@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?dotAt@WaJson@@UAEHPB_WAA_N@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?dotGet@WaJson@@UAEHPB_WAAV1@@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?dotGet@WaJson@@UAEHPB_WAAH@Z
?dotGet@WaJson@@UAEHPB_WAA_J@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?getBool@WaJson@@UBE_NXZ
?getString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getInt@WaJson@@UBE_JXZ
?get@WaJson@@UBE?AV1@PB_W@Z
?get@WaJson@@UBE?AV1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?destroy@?$Singleton@VWaRegistry@@@@SAXXZ
?get@WaJson@@UBEHPB_WAA_J@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?put@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?put@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV1@@Z
?put@WaJson@@UAEXV?$initializer_list@U?$pair@PB_WVWaJson@@@std@@@std@@@Z
?at@WaJson@@UBE?AV1@I@Z
?add@WaJson@@UAEXABV1@@Z
?add@WaJson@@UAEX$$QAV1@@Z
?add@WaJson@@UAEXV?$initializer_list@VWaJson@@@std@@@Z
?isObjKeyType@WaJson@@UBE_NPB_WABW4WaJsonType@@@Z
?getObjKeyType@WaJson@@UBE?AW4WaJsonType@@PB_W@Z
?convert@WaJson@@UAEXABW4WaJsonType@@@Z
??MWaJson@@UBE_NABV0@@Z
??9WaJson@@UBE_NABV0@@Z
??8WaJson@@UBE_NABV0@@Z
??AWaJson@@UAEAAV0@I@Z
??AWaJson@@UBEABV0@I@Z
??AWaJson@@UAEAAV0@PB_W@Z
??AWaJson@@UBEABV0@PB_W@Z
??AWaJson@@UAEAAV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??AWaJson@@UBEABV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??YWaJson@@UAEAAV0@ABV0@@Z
??4WaJson@@UAEAAV0@$$QAV0@@Z
??4WaJson@@UAEAAV0@ABV0@@Z
??4WaJson@@UAEAAV0@PB_W@Z
??4WaJson@@UAEAAV0@ABH@Z
??4WaJson@@UAEAAV0@AB_J@Z
??4WaJson@@UAEAAV0@_N@Z
??4WaJson@@UAEAAV0@ABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
??4WaJson@@UAEAAV0@ABV?$unordered_map@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@Uwa_map_hasher@@Uwa_map_equal_to@@V?$wa_allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@@std@@@@@std@@@Z
??0WaJson@@QAE@$$QAV0@@Z
??0WaJson@@QAE@W4WaJsonType@@@Z
??0WaJson@@QAE@AB_J@Z
?detectionCall@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@_N@WaDbgCallTracker@@@std@@XZ
?getOSInfo@WaOSUtils@@QAEHABVWaJson@@AAV2@@Z
?getMultiFactorUnlockStates@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z
?getUserPasswordProtected@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AA_NAAW4PasswordProtectionInfo@@@Z
?generateUUID@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getDeviceID@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?revertImpersonation@WaOSUtils@@QAEHXZ
?impersonateCurrentUser@WaOSUtils@@QAEHXZ
?getUserPrincipalName@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@@Z
?getUserName@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?instance@WaWmiThread@@SAPAV1@XZ
?getLicenseStatus@WaLicense@@QAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?terminateProcess@WaTaskManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_NH@Z
?isProcessRunning@WaTaskManager@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?getListCerts@WaFileInfo@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@3@@Z
?getExeArchitecture@WaFileInfo@@SAHHAAVWaJson@@AB_N@Z
?getInfo@WaFileInfo@@QAEHPB_WW4VI_STR@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AB_N@Z
??1WaFileInfo@@QAE@XZ
??0WaFileInfo@@QAE@XZ
?Matches@WaRegex@@SA_NPB_W0@Z
?Match@WaRegex@@SAHPB_W0AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?open@WaRegKey@@QAEHXZ
?getPath@WaRegKey@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??1WaRegKey@@QAE@XZ
?getWscAvProducts@WaWmi@@UAEHAAVWaJson@@@Z
??1WaWmi@@UAE@XZ
??0WaWmi@@QAE@XZ
?get@WaStringResourceManager@@QAEHIAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?reset@WaLabelManager@@SAHH@Z
?set@WaLabelManager@@SAHHABVWaJson@@@Z
?get@WaLabelManager@@SAHHAAVWaJson@@@Z
?launchProduct@WaProductUtils@@YAHH@Z
?getComponents@WaProductUtils@@YAHHAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?getInstalledLanguage@WaProductUtils@@YAHABHAAVWaJson@@@Z
?getDefaultBrowserPath@WaProductUtils@@YAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?verifyMainComponentDigitalSignature@WaProductUtils@@YAHABHAAVWaJson@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AB_N@Z
?getMainInstallPath@WaProductUtils@@YAHHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?getMainComponent@WaProductUtils@@YAHHAAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?getUninstallHiveInfo@WaProductUtils@@YAHHAAVWaJson@@@Z
?create@WaJsonFactory@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z
?getSha2HashForFile@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?getMd5HashForFile@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?evalDefinition@WaDetectionEngine@@SAHHABV?$vector@HV?$allocator@H@std@@@std@@AAVWaJson@@_N22@Z
?setShowBundleInfo@WaDetectionEngine@@QAEXAB_N@Z
?setShowUninstallHive@WaDetectionEngine@@QAEXAB_N@Z
?setProductDigitalSignatureVerification@WaDetectionEngine@@QAEX_N@Z
?setSingleThreaded@WaDetectionEngine@@QAEX_N@Z
?setAddInstallDateToResults@WaDetectionEngine@@QAEX_N@Z
?setAddInstallDirsToResults@WaDetectionEngine@@QAEX_N@Z
?setAddMethodsToResults@WaDetectionEngine@@QAEX_N@Z
?detectProducts@WaDetectionEngine@@QAEHABV?$vector@HV?$allocator@H@std@@@std@@AAVWaJson@@@Z
??1WaDetectionEngine@@QAE@XZ
??0WaDetectionEngine@@QAE@XZ
?getPathListFromFilePathJson@WaEvaluator@@SA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABVWaJson@@@Z
?evaluateRegistryPath@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@VWaRegKey@@V?$allocator@VWaRegKey@@@std@@@3@@Z
?evaluateFilePath@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAAVWaJson@@ABH0@Z
?evaluateFilePath@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAAV23@ABH0@Z
?splitExpressionFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAW4WaDatabaseKey@@AAV23@@Z
?evaluateFact@WaEvaluator@@SAHW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVWaJson@@@Z
?evaluateExpression@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?canExecuteByAllUsers@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?verifyFileAuthenticity@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_NAAV23@AB_N@Z
?getSigningStatus@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAA_NAAV23@@Z
?getFileVersionFromPath@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABHAAV23@AB_N3@Z
?directoryExists@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NAB_N@Z
?fileExists@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NAB_N@Z
?deallocate@WaMemoryPoolManager@@QAEXIPAX@Z
??0WaJson@@QAE@_N@Z
??0WaJson@@QAE@ABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
?getServiceSnapshot@WaServiceManager@@QAEHAAVWaJson@@@Z
?getService@WaServiceManager@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAUWaService@@@Z
?instance@?$Singleton@VWaStringResourceManager@@@@SAPAVWaStringResourceManager@@XZ
?getCurrentEpochTime@WaTime@@YAHXZ
?writeToFile@WaDebugInfo@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NW4LOG_LEVEL@1@V?$set@W4LOG_COMPONENT@WaDebugInfo@@U?$less@W4LOG_COMPONENT@WaDebugInfo@@@std@@V?$allocator@W4LOG_COMPONENT@WaDebugInfo@@@4@@3@11@Z
?setCurrentSignatureId@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@H@WaDbgCallTracker@@@std@@H@Z
?instance@?$Singleton@VWaRegistry@@@@SAPAVWaRegistry@@XZ
?destroy@?$Singleton@VWaEndPointManager@@@@SAXXZ
?instance@?$Singleton@VWaEndPointManager@@@@SAPAVWaEndPointManager@@XZ
?destroy@?$Singleton@VEventRegistrationController@@@@SAXXZ
?instance@?$Singleton@VEventRegistrationController@@@@SAPAVEventRegistrationController@@XZ
?destroy@?$Singleton@VWaStringResourceManager@@@@SAXXZ
?destroy@?$Singleton@VWaSecuredTempFile@@@@SAXXZ
?destroy@?$Singleton@VWaNet@@@@SAXXZ
?destroy@?$Singleton@VWaCache@@@@SAXXZ
?instance@?$Singleton@VWaCache@@@@SAPAVWaCache@@XZ
?destroy@?$Singleton@VWaOSUtils@@@@SAXXZ
?instance@?$Singleton@VWaOSUtils@@@@SAPAVWaOSUtils@@XZ
?destroy@?$Singleton@VWaServiceManager@@@@SAXXZ
?instance@?$Singleton@VWaServiceManager@@@@SAPAVWaServiceManager@@XZ
?destroy@?$Singleton@VWaMemoryPoolManager@@@@SAXXZ
?instance@?$Singleton@VWaMemoryPoolManager@@@@SAPAVWaMemoryPoolManager@@XZ
?destroy@?$Singleton@VWaCryptoApiWrapper@@@@SAXXZ
?instance@?$Singleton@VWaCryptoApiWrapper@@@@SAPAVWaCryptoApiWrapper@@XZ
?instance@WaHttp@@SAPAV1@XZ
?destroy@WaHttp@@SAXXZ
?initialize@WaHttp@@QAEHXZ
?calculateVersionStamp@WaHttp@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?registerNotifier@WaServiceManager@@QAEHUWaServiceMgrParam@@@Z
?unregisterNotifier@WaServiceManager@@QAEXXZ
??0WaJson@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV0@@Z
??0WaJson@@QAE@ABH@Z
??0WaJson@@QAE@PB_W@Z
??0WaJson@@QAE@XZ
??1WaJson@@UAE@XZ
?isType@WaJson@@UBE_NABW4WaJsonType@@@Z
?clear@WaJson@@UAEXXZ
?put@WaJson@@UAEXPB_W$$QAV1@@Z
?get@WaJson@@UBEHPB_WAAV1@@Z
?get@WaJson@@UBEHPB_WAA_N@Z
?get@WaJson@@UBEHPB_WAAH@Z
?dotGet@WaJson@@UAEHPB_WAA_N@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?dotGet@WaJson@@UAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dotPut@WaJson@@UAEHPB_WABV1@@Z
?dotAdd@WaJson@@UAEHPB_WABV1@@Z
?contains@WaJson@@UBE_NPB_W@Z
?toString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toPrettyString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toCharPointer@WaJson@@UBEXPAPA_W@Z
?toPrettyCharPointer@WaJson@@UBEXPAPA_W@Z
?setObjectsPerPool@WaMemoryPoolManager@@QAEXI@Z
?initialize@WaCache@@QAEHXZ
?cache@WaCache@@QAEHXZ
?instance@WaEventManager@@SAPAV1@XZ
?destroy@WaEventManager@@SAXXZ
?registerEvent@WaEventManager@@QAEHABVWaJson@@P6AXPA_W@ZAAH@Z
?unregisterEvent@WaEventManager@@QAEHABH@Z
?getDeploymentPath@WaFileUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?invoke@WaExternalComponent@@QBEHAAVWaJson@@0@Z
?destroy@WaThirdPartyGatewayHandle@@SAXXZ
?registerNotifier@WaRegistry@@QAEHXZ
?unregisterNotifier@WaRegistry@@QAEXXZ
?instance@WaDatabase@@SAPAV1@XZ
?destroy@WaDatabase@@SAXXZ
?initialize@WaDatabase@@QAEHXZ
?switchToOnlineMode@WaDatabase@@QAEHXZ
?cache@WaDatabase@@QAEHXZ
?switchToOfflineMode@WaDatabase@@SAXXZ
?wCaseCmp@WaStringUtils@@YAHPB_W0@Z
?trim@WaStringUtils@@YAAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?create@WaJsonFactory@@SAHPB_WAAVWaJson@@@Z
?getActualError@WaCallTree@@SAHAAVWaJson@@@Z
?getCallTree@WaCallTree@@SAXAAVWaJson@@@Z
?evaluateResult@WaCallTree@@SAHH@Z
?instance@WaCallTree@@SAPAV1@ABVid@thread@std@@@Z
?destroy@WaCallTree@@SAXXZ
?removeThreadStack@WaCallTree@@SAXABVid@thread@std@@@Z
?encryptErrorSensitiveInfo@WaCryptoUtils@@SAHAAVWaJson@@_N@Z
?getTickCount@WaTime@@YA_JXZ
?instance@WaConfigurations@@SAPAV1@XZ
?destroy@WaConfigurations@@SAXXZ
?instance@WaComponentManager@@SAPAV1@XZ
?destroy@WaComponentManager@@SAXXZ
?initialize@WaComponentManager@@QAEHXZ
?getComponent@WaComponentManager@@QBEHABHPAPAVWaExternalComponent@@@Z
?freeComponentAllocation@WaComponentManager@@QAEHPA_W@Z
?initialize@WaEndPointManager@@QAEHABVWaJson@@@Z
?setInvokeOutput@WaValidator@@SAH_K_JHHHABVWaJson@@AAV2@@Z
?setSetupOutput@WaValidator@@SAH_KABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HABVWaJson@@AAV4@@Z
?instance@WaTaskManager@@SAPAV1@XZ
?destroy@WaTaskManager@@SAXXZ
?startTaskManager@WaTaskManager@@QAEHUWaTaskMgrParam@@@Z
?instance@DIContainer@@SAAAV1@XZ
?instance@WaLicense@@SAPAV1@XZ
?destroy@WaLicense@@SAXXZ
?init@WaLicense@@QAEHXZ
?renew@WaLicense@@QAEHXZ
?getUserId@WaLicense@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isPasskeyBlocked@WaLicense@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setModuleOutput@WaApiUtils@@YAH_KABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WHAAVWaJson@@@Z
?addUtilsOwnerTag@WaApiUtils@@YAHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getRequestType@WaApiUtils@@YA?AW4InvokeRequestType@1@ABVWaJson@@@Z
?isUtilsOwnerTagPresent@WaApiUtils@@YA_NPB_W@Z
?updateLicenseFile@WaApiUtils@@YAH_N0PAVWaJson@@@Z
?instance@WaRevocationCheck@WaCertificate@@SAPAV12@XZ
?destroy@WaRevocationCheck@WaCertificate@@SAXXZ
?setEnabled@WaRevocationCheckUtilsLocal@WaCertificate@@SAX_N@Z
?destroy@WaWmiThread@@SAXXZ
?destroy@WaCustomDetection@@SAXXZ
?initialize@WaOSUtils@@QAEXXZ
?instance@WaDebugInfo@@SAPAV1@XZ
?destroy@WaDebugInfo@@SAXXZ
?initializeCrypto@WaDebugInfo@@QAEHXZ
?setupCall@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@_N@WaDbgCallTracker@@@std@@PB_W@Z
?invokeCall@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@_N@WaDbgCallTracker@@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?teardownCall@WaDebugInfo@@QAEXXZ
?freeCall@WaDebugInfo@@QAEXXZ
?setCurrentMethodId@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@H@WaDbgCallTracker@@@std@@H@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
msi
ord70
wa_api_free
wa_api_invoke
wa_api_register_handler
wa_api_setup
wa_api_teardown
wa_api_unregister_handler
Name
.text
Size
539KB
Virtual Size
539KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
187KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=259, version=27412,
count=160, id=261, version=27412,
count=23, id=260, version=27412,
count=23, id=259, version=24237,
count=113, id=261, version=24237,
count=35, id=260, version=24237,
count=12, id=257, version=27412,
count=5, id=257, version=24247,
count=457, id=1, productName=Unmarked objects,
count=8, id=265, version=24247,
count=1, id=256, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
libwaheap.dll
- IMPHASH 1cbaa094a4c4ac00ce6bb31669d8f7a7
- SHA256 741218c62d03afd5f29efb85c2bcfc177449a2ee97f68320d3f91a43683fc1ee
- MD5 5df2f688ff45b3e26669e6ebbe1de35d
- SHA1 39f4927514a7a958c398e88c4972878c23ae70fe
- SHA512 d55ccea0cfe4966b1f36b0c4d8e52fe65489bf33fbcfe04bd2b8bb9099ee3f3d652c812b2e3ecaf1b5907fc1616e310f973c86128a82209e7de11e1b5a508652
- SSDEEP 1536:813QyAWvu6T2VQhB7Txw/jBLaUwv9DsWwcdboDTni9VjRr7e:oXiVQjxw/j0VzboDTi9VjRrC
- TLSH T1F7837C01B6D1D871F97E6D35246499616A3EB9224FE08CEB3B85023E4F303C1AE35D7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:eb:ff:93:17:f2:7e:f9:56:1f:90:e7:30:80:74:7f:7d:aa:70:14:ca:55:59:2e:7e:56:ac:60:95:a1:b7:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Chains
Dec 16, 2025
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0d:ad:d7:6d:c4:42:db:11:4e:a3:74:8e:94:b2:88:d8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2024 - May 26, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
5008
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
libwaheap.pdb
kernel32
HeapCreate
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
DecodePointer
RaiseException
_wa_getHeap@0
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=259, version=27412,
count=134, id=261, version=27412,
count=18, id=260, version=27412,
count=16, id=259, version=24237,
count=21, id=261, version=24237,
count=15, id=260, version=24237,
count=3, id=257, version=27412,
count=82, id=1, productName=Unmarked objects,
count=1, id=264, version=24247,
count=1, id=256, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
libwalocal.dll
- IMPHASH 15ea82ec7d49786850190a7d79bb8873
- SHA256 5d73496c4affe3f1cbb9d756a76c779d71fc7e1e0250ab679bb18e4090a555cc
- MD5 57b44bdcf4ef0d96f487b96d155a422f
- SHA1 a522ecea11c34909db6fadccbccfaa8bd632b73b
- SHA512 78e982fb13423c6ca19f7a5c7e85e70ba14904a8639ac9be40aa7db866330247212c1effd5b9ca322d5627453b6525064a205dcdd2e918007f809095ca0deb88
- SSDEEP 24576:6wzILNdnFigdpG3mmdPojOJCSuK0dO2sSDWGjhnOajrkUsk+MytCAc6oFFxElyxM:UF1dgW44O2VhnOajrkUsk+MywALoFFx8
- TLSH T1A765AE22BAC5C035E8AE1131997E6B2D29BEBA210B35C4DF73D41D0D99B09D2A737713
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5c:7b:9f:39:9a:4f:54:65:cb:39:80:b9:90:16:63:dc:5c:4f:8c:20:b3:a0:27:9a:24:38:bf:cf:9f:42:73:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Chains
Dec 16, 2025
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0d:ad:d7:6d:c4:42:db:11:4e:a3:74:8e:94:b2:88:d8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2024 - May 26, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
799376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
libwalocal.pdb
libwaapi
wa_api_invoke
wa_api_free
libwaheap
_wa_getHeap@0
kernel32
SetUnhandledExceptionFilter
GetCurrentProcess
UnregisterWaitEx
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
InitializeCriticalSectionEx
DecodePointer
ExpandEnvironmentStringsW
DeviceIoControl
TerminateProcess
IsProcessorFeaturePresent
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetFileSizeEx
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
InterlockedPushEntrySList
LoadLibraryExW
RtlUnwind
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
EncodePointer
GetStringTypeW
GetCurrentThread
DuplicateHandle
InitializeSListHead
GetStartupInfoW
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
oleaut32
VariantChangeType
VariantClear
SysFreeString
VariantInit
libwautils
?dotGet@WaJson@@UAEHPB_WAA_J@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?dotGet@WaJson@@UAEHPB_WAA_N@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?getBool@WaJson@@UBE_NXZ
?getString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getInt@WaJson@@UBE_JXZ
?get@WaJson@@UBE?AV1@PB_W@Z
?get@WaJson@@UBE?AV1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get@WaJson@@UBEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?get@WaJson@@UBEHPB_WAAH@Z
?get@WaJson@@UBEHPB_WAA_J@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?get@WaJson@@UBEHPB_WAA_N@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?get@WaJson@@UBEHPB_WAAV1@@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?put@WaJson@@UAEXPB_WABV1@@Z
?put@WaJson@@UAEXPB_W$$QAV1@@Z
?put@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?put@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV1@@Z
?put@WaJson@@UAEXV?$initializer_list@U?$pair@PB_WVWaJson@@@std@@@std@@@Z
?at@WaJson@@UBE?AV1@I@Z
?add@WaJson@@UAEXABV1@@Z
?add@WaJson@@UAEX$$QAV1@@Z
?add@WaJson@@UAEXV?$initializer_list@VWaJson@@@std@@@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?clear@WaJson@@UAEXXZ
?isObjKeyType@WaJson@@UBE_NPB_WABW4WaJsonType@@@Z
?isType@WaJson@@UBE_NABW4WaJsonType@@@Z
?getObjKeyType@WaJson@@UBE?AW4WaJsonType@@PB_W@Z
?getType@WaJson@@UBE?AW4WaJsonType@@XZ
?convert@WaJson@@UAEXABW4WaJsonType@@@Z
??MWaJson@@UBE_NABV0@@Z
??9WaJson@@UBE_NABV0@@Z
??8WaJson@@UBE_NABV0@@Z
??AWaJson@@UAEAAV0@I@Z
??AWaJson@@UBEABV0@I@Z
??AWaJson@@UAEAAV0@PB_W@Z
??AWaJson@@UBEABV0@PB_W@Z
??AWaJson@@UAEAAV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??AWaJson@@UBEABV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??YWaJson@@UAEAAV0@ABV0@@Z
??4WaJson@@UAEAAV0@$$QAV0@@Z
??4WaJson@@UAEAAV0@ABV0@@Z
??4WaJson@@UAEAAV0@PB_W@Z
??4WaJson@@UAEAAV0@ABH@Z
??4WaJson@@UAEAAV0@AB_J@Z
??4WaJson@@UAEAAV0@_N@Z
??4WaJson@@UAEAAV0@ABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
??4WaJson@@UAEAAV0@ABV?$unordered_map@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@Uwa_map_hasher@@Uwa_map_equal_to@@V?$wa_allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@@std@@@@@std@@@Z
??1WaJson@@UAE@XZ
??0WaJson@@QAE@XZ
??0WaJson@@QAE@ABV0@@Z
??0WaJson@@QAE@PB_W@Z
??0WaJson@@QAE@ABH@Z
??0WaJson@@QAE@ABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
??0WaJson@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV0@@Z
??0WaJson@@QAE@W4WaJsonType@@@Z
?instance@?$Singleton@VWaMemoryPoolManager@@@@SAPAVWaMemoryPoolManager@@XZ
?instance@?$Singleton@VWaSecuredTempFile@@@@SAPAVWaSecuredTempFile@@XZ
?instance@?$Singleton@VWaEndPointManager@@@@SAPAVWaEndPointManager@@XZ
?isUseRegularExpressionInDirectoryPath@WaEvaluator@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isRemoteConnected@WaEndPointManager@@QAE_NXZ
?byteArrayToEpoch@WaTime@@YGHABQAEAAH@Z
?bytesToWString@WaStringUtils@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAEI_N@Z
?evaluateRegistryFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?evaluateFilePath@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAAVWaJson@@ABH0@Z
?evaluateServiceFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?httpRequest@WaNet@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HAAV23@0ABW4RequestMethod@1@0_N3@Z
??0WaJson@@QAE@$$QAV0@@Z
?instance@?$Singleton@VWaNet@@@@SAPAVWaNet@@XZ
?create@WaJsonFactory@@SAHPB_WAAVWaJson@@@Z
?getActiveUserDirectory@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getUserName@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?getProcessSnapshot@WaTaskManager@@QAEHAAVWaJson@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getInternetState@WaEndPointManager@@QAEHV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@HHAA_N@Z
?Match@WaRegex@@SAHPB_W0AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?instance@?$Singleton@VWaOSUtils@@@@SAPAVWaOSUtils@@XZ
?Matches@WaRegex@@SA_NPB_W0@Z
?CaptureAll@WaRegex@@SAHPB_W0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?toRemotePath@WaEndPointManager@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?query@WaWMIManager@@QAEHPB_W0ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAVWaJson@@HH_N@Z
?getCurrentEpochTime@WaTime@@YGHAAH@Z
?timeStringToEpochTime@WaTime@@YGHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAH@Z
?getTimeString@WaTime@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@_NAB_J@Z
?split@WaStringUtils@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_WAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@_N@Z
?instance@?$Singleton@VWaWMIManager@@@@SAPAVWaWMIManager@@XZ
?base64Decode@WaBase64@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?Is64@WaOSUtils@@QAE_NXZ
?getExeArchitecture@WaFileInfo@@SAHHAAVWaJson@@AB_N@Z
?get@WaStringResourceManager@@QAEHIAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?instance@WaConfigurations@@SAPAV1@XZ
?getInstalledLanguage@WaProductUtils@@YAHABHAAVWaJson@@@Z
?create@WaJsonFactory@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z
?get@WaDatabase@@SAHABW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?instance@WaDatabase@@SAPAV1@XZ
?SendProxyMessage@WaThirdPartyGatewayHandle@@QBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@W4ImpersonationMode@1@@Z
??0WaThirdPartyGatewayHandle@@QAE@W4WaThirdPartyGatewayType@@@Z
?isRegistered@WaSelfProtection@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?registerModule@WaSelfProtection@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??1WaSelfProtection@@QAE@XZ
??0WaSelfProtection@@QAE@XZ
??0WaJson@@QAE@_N@Z
?instance@?$Singleton@VWaStringResourceManager@@@@SAPAVWaStringResourceManager@@XZ
??0WaJson@@QAE@AB_J@Z
?comErrorToString@WaComUtils@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@J@Z
?get@WaRegKey@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?open@WaRegKey@@QAEHPAUHKEY__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
??1WaRegKey@@QAE@XZ
??0WaRegKey@@QAE@PAUHKEY__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?setAddInstallDirsToResults@WaDetectionEngine@@QAEX_N@Z
?detectProducts@WaDetectionEngine@@QAEHABV?$vector@HV?$allocator@H@std@@@std@@AAVWaJson@@@Z
??1WaDetectionEngine@@QAE@XZ
??0WaDetectionEngine@@QAE@XZ
?getApiGuardKey@WaCache@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0WaJson@@QAE@$$QAUObjectConstructor@0@@Z
?instance@?$Singleton@VWaCache@@@@SAPAVWaCache@@XZ
?getWSCProductState@WaOSUtils@@QAEHW4_WSC_SECURITY_PROVIDER@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAW4WSC_SECURITY_PRODUCT_STATE@@@Z
?queryEventlog@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@ABH2@Z
?queryMsiProductInfo@WaMsiUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@@Z
?getMsiComponentPath@WaMsiUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@@Z
?getMsiProductInfo@WaMsiUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?getAllAsJsonObjectRecursive@WaRegKey@@QAEHAAVWaJson@@@Z
?open@WaRegKey@@QAEHXZ
?setPath@WaRegKey@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getRegLocationEnum@WaRegistry@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAH@Z
?getRegKeyFromLocation@WaRegistry@@SAHW4WaRegistryLocation@@AAVWaRegKey@@@Z
?instance@?$Singleton@VWaRegistry@@@@SAPAVWaRegistry@@XZ
?shellExecute@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0HAAKAAV23@H_N0@Z
?instance@WaWmiThread@@SAPAV1@XZ
?readArchitectureInfo@WaFileInfo@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@AAH@Z
?getLanguageInfo@WaProductUtils@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@ABW4LanguageInfo@@@Z
?trimRight@WaStringUtils@@YAAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?isCurrentPermissionGTE@WaProcessUtils@@SAHABHAA_N@Z
?shellExecuteAsUser@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0HAAKAAV23@H_N30@Z
?launchProcessAsUser@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAHHPAKPAV23@HH0@Z
?launchProcess@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAHHPAKPAV23@H0@Z
?dotGet@WaJson@@UAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?dotGet@WaJson@@UAEHPB_WAAV1@@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?dotAt@WaJson@@UAEHPB_WAA_N@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?dotAt@WaJson@@UAEHPB_WAA_J@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?dotAt@WaJson@@UAEHPB_WAAH@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?dotAt@WaJson@@UAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?dotAt@WaJson@@UAEHPB_WAAV1@@Z
?dotPut@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?dotPut@WaJson@@UAEHPB_WABV1@@Z
?dotAdd@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV1@@Z
?dotAdd@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?dotAdd@WaJson@@UAEHPB_W$$QAV1@@Z
?dotAdd@WaJson@@UAEHPB_WABV1@@Z
?remove@WaJson@@UAEXH@Z
?remove@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?remove@WaJson@@UAEXPB_W@Z
?contains@WaJson@@UBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?contains@WaJson@@UBE_NPB_W@Z
?keys@WaJson@@UBE?AV?$set@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ
?val@WaJson@@UBEHAAV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
?val@WaJson@@UBEHAA_N@Z
?val@WaJson@@UBEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?val@WaJson@@UBEHAA_J@Z
?val@WaJson@@UBEHAAH@Z
?toString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toPrettyString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toCharPointer@WaJson@@UBEXPAPA_W@Z
?toPrettyCharPointer@WaJson@@UBEXPAPA_W@Z
?first@WaJson@@UAE?AV1@XZ
?removeRecursive@WaJson@@UAEXPB_W@Z
?_init@WaJson@@EAEXXZ
?_set@WaJson@@EAEXABV?$unordered_map@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@Uwa_map_hasher@@Uwa_map_equal_to@@V?$wa_allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@@std@@@@@std@@@Z
?_set@WaJson@@EAEXABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
?_set@WaJson@@EAEX$$QAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_set@WaJson@@EAEXPB_W@Z
?_set@WaJson@@EAEX_N@Z
?_set@WaJson@@EAEXAB_J@Z
?_toPrettyString@WaJson@@EBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_N@Z
?_encodeString@WaJson@@EBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?_dotInsert@WaJson@@EAEHPB_W$$QAV1@W4WaJsonType@@@Z
?_dotInsert@WaJson@@EAEHPB_WABV1@W4WaJsonType@@@Z
?_dotRetrieve@WaJson@@EAEHPB_WAAV1@W4WaJsonType@@@Z
?allocate@WaMemoryPoolManager@@QAEPAXI@Z
?deallocate@WaMemoryPoolManager@@QAEXIPAX@Z
?isElevated@WaProcessUtils@@SA_NPAX@Z
?fileContents@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_NHHAB_N@Z
?fileContentsWithUtf8Encoding@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?binaryFileContents@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_NHHAB_N@Z
?fileContains@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@_N3AB_N@Z
?fileExists@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NAB_N@Z
?getFileVersionFromPath@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABHAAV23@AB_N3@Z
?getSigningStatus@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAA_NAAV23@@Z
?directoryContents@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@H_NAB_N@Z
?calculateDirectoryDepth@WaFileUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_NAAH@Z
?createTempFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?copyFileToTemp@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?deleteTempFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?evaluateDirectoryRegex@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?getHashString@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@W4WaHashAlg@@_N@Z
?ensurePathEnding@WaStringUtils@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isNumber@WaStringUtils@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?evaluateResult@WaCallTree@@SAHH@Z
?instance@WaCallTree@@SAPAV1@ABVid@thread@std@@@Z
?Capture@WaRegex@@SAHPB_W0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
??0WaFileInfo@@QAE@XZ
??1WaFileInfo@@QAE@XZ
?getLastModifiedTime@WaFileInfo@@QAEHPB_WAAHAB_N@Z
?getListCerts@WaFileInfo@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@3@@Z
?toRemoteTempFile@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?getEnvironmentFolder@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?instance@WaTaskManager@@SAPAV1@XZ
?terminateProcess@WaTaskManager@@QAEHH_NH@Z
?terminateProcess@WaTaskManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_NH@Z
?instance@WaDebugInfo@@SAPAV1@XZ
?writeToFile@WaDebugInfo@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NW4LOG_LEVEL@1@V?$set@W4LOG_COMPONENT@WaDebugInfo@@U?$less@W4LOG_COMPONENT@WaDebugInfo@@@std@@V?$allocator@W4LOG_COMPONENT@WaDebugInfo@@@4@@3@11@Z
?contents@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?binaryContents@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?contains@WaSecuredTempFile@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@_N@Z
?create@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?remove@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?execute@WaPowerShellGateway@@YGHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_NAAKW4ImpersonationMode@WaThirdPartyGatewayHandle@@@Z
?dotGet@WaJson@@UAEHPB_WAAH@Z
?size@WaJson@@UBEIXZ
wa_comp_free
wa_comp_setup
wa_comp_teardown
wa_local_invoke_script
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
268KB
Virtual Size
267KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
13B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=259, version=27412,
count=157, id=261, version=27412,
count=23, id=260, version=27412,
count=26, id=259, version=24237,
count=109, id=261, version=24237,
count=38, id=260, version=24237,
count=8, id=257, version=27412,
count=14, id=261, version=24247,
count=7, id=257, version=24247,
count=407, id=1, productName=Unmarked objects,
count=25, id=264, version=24247,
count=1, id=256, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
libwaresource.dll
- SHA256 652f94cc346a9676c6e05621d814ebe4ab66b90e7fe9d663321e0d276cb73ac7
- MD5 8a97cce0b3e726b4fc67980cbe904ffc
- SHA1 8b31ef13f4b8e9c69b81b17a1f30ce744fcd6ffd
- SHA512 465b09629af31d5f6c53ed8d6f29236de3ac688123e0a8a1119035488c28195dd1514b54eb354f79740721129740a66c7fdf9c59da204feb1751148899b9ee67
- SSDEEP 98304:Kr1JkogNItG4Fof17VzFEABoDjnvbZ/ZHVOCHkoDwBW95ZnGegQNr+cTDBuYLGCO:y1JkogN9Ld71FXoD7b5VVOCkhBAZJB+t
- TLSH T1D05633EEB5B44004FB359B777C1E8B8A7F4539A550EADB77146878021A92A4C338E0FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
40:13:55:96:85:71:86:5e:ff:3a:12:16:fc:e8:c9:14:64:18:3d:29:e9:fa:0a:c2:2a:35:b6:87:6b:c2:ce:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Chains
Dec 16, 2025
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0d:ad:d7:6d:c4:42:db:11:4e:a3:74:8e:94:b2:88:d8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2024 - May 26, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\buildagent\work\a9bcee5ee90338af\libbridge\bin\Win32\Release\libwaresource.pdb
Name
.rdata
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5.8MB
Virtual Size
5.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
libwautils.dll
- IMPHASH 32484bd2816d9a843d9f5bb60c7897e8
- SHA256 d9b3ee6677e942a5919d80eddefd002911b40f10af1863b06303fb7156930cb5
- MD5 7f139187f67ef8dfbb97e382bca323b2
- SHA1 ef6cac3ace450af03ab054848e1e63eea574adca
- SHA512 d235f11d86ece44ca80d7b95ad93e6341191438baaaf41e42b373a8b5c6da61b3ce7bbca16880d04783ed9b0440aae714c9f2eaadacee6da18b0f2c39e168630
- SSDEEP 98304:IewRznKhwFR6fXrMBrqUCsFDFxT7xKGhozuzpE7K:IewR7K4R6fXMbBFxTKU
- TLSH T148F56D237AE78539F9AF1270583DA16A04A979B10F3291CFA3D09B1D36B69C35531F0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ea:c2:f6:0e:68:29:01:70:e4:d5:17:23:dd:71:cb:64:1c:5e:75:94:44:d8:2b:2f:9a:07:8a:72:b8:7d:d0:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Chains
Dec 16, 2025
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0d:ad:d7:6d:c4:42:db:11:4e:a3:74:8e:94:b2:88:d8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2024 - May 26, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
1749536
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
libwautils.pdb
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
dbghelp
SymCleanup
StackWalk64
secur32
LsaFreeReturnBuffer
LsaEnumerateLogonSessions
LsaGetLogonSessionData
GetUserNameExW
TranslateNameW
wtsapi32
WTSEnumerateSessionsW
WTSOpenServerExW
WTSEnumerateProcessesExW
WTSFreeMemoryExW
WTSFreeMemory
WTSQuerySessionInformationW
WTSQueryUserToken
WTSCloseServer
libwaheap
_wa_getHeap@0
crypt32
CertFreeCertificateContext
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CryptDecodeObjectEx
CryptImportPublicKeyInfoEx2
CryptMsgUpdate
CryptMsgOpenToDecode
CertGetNameStringW
CertOpenStore
CryptHashCertificate
CryptImportPublicKeyInfo
CryptMsgClose
wintrust
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseContext
WinVerifyTrust
CryptCATAdminEnumCatalogFromHash
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
winhttp
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpOpenRequest
WinHttpConnect
WinHttpReadData
WinHttpCloseHandle
WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpSetTimeouts
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
kernel32
LoadLibraryW
GetProcAddress
GetCurrentProcessId
SizeofResource
LockResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
MoveFileExW
GetModuleHandleW
ReadFile
CreateNamedPipeW
CloseHandle
ConnectNamedPipe
GetModuleHandleExW
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
ReadProcessMemory
QueryFullProcessImageNameW
GetExitCodeProcess
GetTickCount64
GetLocalTime
SystemTimeToFileTime
CreateEventW
SetEvent
WaitForMultipleObjects
ResetEvent
WaitForMultipleObjectsEx
Sleep
CopyFileW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
WaitForSingleObject
FormatMessageW
DeleteFileW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetTickCount
CreateThread
CreateDirectoryW
FindFirstFileW
GetFileSizeEx
FindNextFileW
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
GetFileInformationByHandle
GetFileTime
GetCurrentThreadId
OpenThread
GlobalAlloc
GetNativeSystemInfo
QueryDosDeviceW
SetLastError
SetHandleInformation
WriteFile
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
HeapAlloc
GetOverlappedResult
GetProcessHeap
SetNamedPipeHandleState
WaitNamedPipeW
GetLongPathNameW
LocalFree
LocaleNameToLCID
GetCurrentProcess
GetCurrentThread
K32GetModuleInformation
UnmapViewOfFile
lstrcmpiA
CreateFileMappingW
MapViewOfFile
SetErrorMode
GetLocaleInfoW
GetVersionExW
GetSystemDirectoryW
GetSystemInfo
CreateProcessW
HeapFree
ReleaseMutex
CreateMutexA
VirtualAlloc
VirtualFree
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetFullPathNameW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetDriveTypeW
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetStartupInfoW
FlushFileBuffers
GetConsoleOutputCP
GetCPInfo
GetStringTypeW
GetACP
GetOEMCP
GetTimeZoneInformation
GetCurrentDirectoryW
ExitProcess
SetStdHandle
SetEndOfFile
WriteConsoleW
OutputDebugStringW
EncodePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
HeapSize
HeapReAlloc
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
LocalAlloc
FreeLibrary
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
GetExitCodeThread
WaitForSingleObjectEx
DuplicateHandle
TryEnterCriticalSection
LoadLibraryExA
VirtualQuery
VirtualProtect
LCIDToLocaleName
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
FindFirstFileExW
GetCommandLineA
GetCommandLineW
GlobalFree
IsValidCodePage
user32
GetWindowTextW
PostThreadMessageW
EnumDesktopWindows
GetThreadDesktop
SendMessageW
GetWindowThreadProcessId
MessageBoxW
advapi32
AccessCheck
GetSidSubAuthority
CreateWellKnownSid
GetFileSecurityW
DuplicateToken
MapGenericMask
GetSecurityInfo
RegCloseKey
RegOpenCurrentUser
RegOpenKeyExW
ConvertSidToStringSidW
RegConnectRegistryW
LookupAccountNameW
RevertToSelf
ImpersonateLoggedOnUser
LogonUserW
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
SetEntriesInAclW
ConvertSecurityDescriptorToStringSecurityDescriptorW
SetNamedSecurityInfoW
GetSecurityDescriptorControl
CopySid
GetNamedSecurityInfoW
GetSecurityDescriptorOwner
IsValidSecurityDescriptor
FreeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
GetTokenInformation
RegNotifyChangeKeyValue
CloseServiceHandle
OpenSCManagerW
NotifyServiceStatusChangeW
OpenServiceW
EnumServicesStatusW
QueryServiceStatusEx
QueryServiceConfigW
EnumServicesStatusExW
ReportEventW
RegisterEventSourceW
LookupAccountSidW
DuplicateTokenEx
OpenProcessToken
ConvertStringSidToSidW
DeregisterEventSource
GetAce
CreateProcessAsUserW
IsWellKnownSid
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegDeleteTreeW
RegEnumKeyExW
shell32
SHGetFolderPathW
ShellExecuteW
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitializeSecurity
oleaut32
VariantInit
SafeArrayGetUBound
SafeArrayUnlock
SafeArrayGetLBound
SafeArrayCopy
SysStringByteLen
SafeArrayGetVartype
SysAllocStringByteLen
SysAllocString
SafeArrayLock
SafeArrayCreate
SysAllocStringLen
SafeArrayDestroy
SysFreeString
VariantTimeToSystemTime
VariantClear
shlwapi
PathFileExistsW
ws2_32
ioctlsocket
msi
ord8
ord115
ord166
ord118
ord173
ord32
ord70
ord159
ord160
ord92
mpr
WNetCancelConnection2W
WNetAddConnection2W
authz
AuthzFreeContext
AuthzFreeResourceManager
AuthzAccessCheck
AuthzInitializeResourceManager
AuthzInitializeContextFromSid
netapi32
NetUserChangePassword
NetUserModalsGet
NetGetAnyDCName
NetApiBufferFree
NetUserGetInfo
wldap32
ord147
ord14
ord140
ord41
ord16
ord224
ord208
ord167
ord26
ord127
ord170
ord46
ord73
ord301
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
??0?$Singleton@VDiagnoseParamHandler@@@@IAE@XZ
??0?$Singleton@VEventRegistrationController@@@@IAE@XZ
??0?$Singleton@VWaCache@@@@IAE@XZ
??0?$Singleton@VWaCryptoApiWrapper@@@@IAE@XZ
??0?$Singleton@VWaEndPointManager@@@@IAE@XZ
??0?$Singleton@VWaEndpointRegistry@@@@IAE@XZ
??0?$Singleton@VWaMemoryPoolManager@@@@IAE@XZ
??0?$Singleton@VWaNet@@@@IAE@XZ
??0?$Singleton@VWaOSUtils@@@@IAE@XZ
??0?$Singleton@VWaRegistry@@@@IAE@XZ
??0?$Singleton@VWaSecuredTempFile@@@@IAE@XZ
??0?$Singleton@VWaServiceManager@@@@IAE@XZ
??0?$Singleton@VWaStringResourceManager@@@@IAE@XZ
??0?$Singleton@VWaWMIManager@@@@IAE@XZ
??0?$Singleton@VWaWinRM@@@@IAE@XZ
??0?$Singleton@VWaWuaProgressReceiver@@@@IAE@XZ
??0DIContainer@@AAE@XZ
??0DiagnoseParamHandler@@AAE@XZ
??0EventRegistrationController@@QAE@XZ
??0MsiAPIWrapper@@QAE@ABV0@@Z
??0MsiAPIWrapper@@QAE@XZ
??0MsiAPIWrapperImpl@@QAE@ABV0@@Z
??0MsiAPIWrapperImpl@@QAE@XZ
??0PerfLoggingScope@@QAE@ABV0@@Z
??0PerfLoggingScope@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0ProcessMonitor@@QAE@V?$shared_ptr@VEventStream@@@std@@V?$shared_ptr@VIWaTaskManager@@@2@@Z
??0RandomAccessFileReader@@QAE@$$QAV0@@Z
??0RandomAccessFileReader@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0RegApiWrapper@@QAE@ABV0@@Z
??0RegApiWrapper@@QAE@XZ
??0ServiceLifecycleMonitorImpl@@QAE@V?$shared_ptr@VWinSvcApiWrapper@@@std@@@Z
??0ServiceMonitor@@QAE@V?$shared_ptr@VEventStream@@@std@@V?$shared_ptr@VWinSvcApiWrapper@@@2@V?$shared_ptr@VServiceLifecycleMonitor@@@2@@Z
??0WTSConnection@WaEndPointManager@@QAE@XZ
??0WaApiInvoker@@QAE@XZ
??0WaCache@@AAE@XZ
??0WaCallTree@@IAE@XZ
??0WaCallTree@@QAE@ABV0@@Z
??0WaCallTreeBlocker@@QAE@XZ
??0WaCallTreeDisabled@@QAE@$$QAV0@@Z
??0WaCallTreeDisabled@@QAE@ABV0@@Z
??0WaCallTreeDisabled@@QAE@XZ
??0WaCallTreeNode@@IAE@XZ
??0WaCallTreeNode@@QAE@ABV0@@Z
??0WaCallTreeNode@@QAE@PAV0@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@11@Z
??0WaCallTreeNode@@QAE@PAV0@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1H1@Z
??0WaComThread@@QAE@W4WaComInitType@0@@Z
??0WaComponentManager@@IAE@XZ
??0WaConfigurations@@AAE@XZ
??0WaConfigurationsBase@@AAE@AAUWaConfigurationsData@@@Z
??0WaCryptoApiWrapper@@QAE@XZ
??0WaCustomDetection@@AAE@XZ
??0WaDatabase@@AAE@XZ
??0WaDebugInfo@@AAE@XZ
??0WaDetectionEngine@@QAE@XZ
??0WaEmbeddedResource@@QAE@$$QAV0@@Z
??0WaEmbeddedResource@@QAE@ABV0@@Z
??0WaEmbeddedResource@@QAE@I@Z
??0WaEndPointManager@@QAE@XZ
??0WaEndpointRegistry@@QAE@XZ
??0WaEventManager@@AAE@XZ
??0WaExternalComponent@@QAE@$$QAV0@@Z
??0WaExternalComponent@@QAE@PB_W0PBD111@Z
??0WaExternalComponent@@QAE@XZ
??0WaFileInfo@@QAE@XZ
??0WaFuncCallNode@@QAE@ABV0@@Z
??0WaFuncCallNode@@QAE@PAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@111@Z
??0WaGui@@QAE@XZ
??0WaHttp@@AAE@XZ
??0WaHttpLowLevel@@QAE@XZ
??0WaIConfigurations@@QAE@ABV0@@Z
??0WaIConfigurations@@QAE@XZ
??0WaJson@@QAE@$$QAUArrayConstructor@0@@Z
??0WaJson@@QAE@$$QAUObjectConstructor@0@@Z
??0WaJson@@QAE@$$QAV0@@Z
??0WaJson@@QAE@$$QAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0WaJson@@QAE@ABH@Z
??0WaJson@@QAE@ABV0@@Z
??0WaJson@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV0@@Z
??0WaJson@@QAE@ABV?$unordered_map@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@Uwa_map_hasher@@Uwa_map_equal_to@@V?$wa_allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@@std@@@@@std@@@Z
??0WaJson@@QAE@ABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
??0WaJson@@QAE@AB_J@Z
??0WaJson@@QAE@PB_W@Z
??0WaJson@@QAE@W4WaJsonType@@@Z
??0WaJson@@QAE@XZ
??0WaJson@@QAE@_N@Z
??0WaLicense@@AAE@XZ
??0WaMemoryPool@@AAE@QAV0@@Z
??0WaMemoryPool@@QAE@II@Z
??0WaMemoryPoolManager@@AAE@XZ
??0WaNet@@AAE@XZ
??0WaOSUtils@@AAE@XZ
??0WaPooledIO@@QAE@XZ
??0WaRegKey@@QAE@$$QAV0@@Z
??0WaRegKey@@QAE@ABV0@@Z
??0WaRegKey@@QAE@PAUHKEY__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0WaRegistry@@AAE@XZ
??0WaReturnNode@@QAE@ABV0@@Z
??0WaReturnNode@@QAE@PAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@11@Z
??0WaReturnNode@@QAE@PAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1H1@Z
??0WaRevocationCheck@WaCertificate@@AAE@XZ
??0WaRootNode@@QAE@ABV0@@Z
??0WaRootNode@@QAE@XZ
??0WaSecuredTempFile@@AAE@XZ
??0WaSelfProtection@@QAE@XZ
??0WaServiceManager@@AAE@XZ
??0WaStringResourceManager@@QAE@XZ
??0WaTaskManager@@AAE@XZ
??0WaThirdPartyGatewayHandle@@QAE@W4WaThirdPartyGatewayType@@@Z
??0WaWMIManager@@QAE@XZ
??0WaWinRM@@QAE@XZ
??0WaWmi@@QAE@ABV0@@Z
??0WaWmi@@QAE@PB_W000@Z
??0WaWmi@@QAE@XZ
??0WaWmiThread@@IAE@XZ
??0WaWuaProgressReceiver@@QAE@XZ
??0WinEvtApiWrapper@@QAE@ABV0@@Z
??0WinEvtApiWrapper@@QAE@XZ
??0WinEvtApiWrapperImpl@@QAE@$$QAV0@@Z
??0WinEvtApiWrapperImpl@@QAE@ABV0@@Z
??0WinEvtApiWrapperImpl@@QAE@XZ
??0WinSvcApiWrapper@@QAE@ABV0@@Z
??0WinSvcApiWrapper@@QAE@XZ
??0WinSvcApiWrapperImpl@@QAE@$$QAV0@@Z
??0WinSvcApiWrapperImpl@@QAE@ABV0@@Z
??0WinSvcApiWrapperImpl@@QAE@XZ
??0WindowsEventMonitor@@QAE@V?$shared_ptr@VEventStream@@@std@@V?$shared_ptr@VWinEvtApiWrapper@@@2@@Z
??0WmiInstanceOpEventMonitorImpl@@QAE@XZ
??0WmiMonitor@@QAE@V?$shared_ptr@VEventStream@@@std@@V?$shared_ptr@VWmiInstanceOpEventMonitor@@@2@V?$shared_ptr@VDiffEngine@@@2@@Z
??0WscApiWrapper@@QAE@ABV0@@Z
??0WscApiWrapper@@QAE@XZ
??0WscApiWrapperImpl@@QAE@ABV0@@Z
??0WscApiWrapperImpl@@QAE@XZ
??0WscMonitor@@QAE@V?$shared_ptr@VEventStream@@@std@@V?$shared_ptr@VWscApiWrapper@@@2@@Z
??1?$Singleton@VDiagnoseParamHandler@@@@MAE@XZ
??1?$Singleton@VEventRegistrationController@@@@MAE@XZ
??1?$Singleton@VWaCache@@@@MAE@XZ
??1?$Singleton@VWaCryptoApiWrapper@@@@MAE@XZ
??1?$Singleton@VWaEndPointManager@@@@MAE@XZ
??1?$Singleton@VWaEndpointRegistry@@@@MAE@XZ
??1?$Singleton@VWaMemoryPoolManager@@@@MAE@XZ
??1?$Singleton@VWaNet@@@@MAE@XZ
??1?$Singleton@VWaOSUtils@@@@MAE@XZ
??1?$Singleton@VWaRegistry@@@@MAE@XZ
??1?$Singleton@VWaSecuredTempFile@@@@MAE@XZ
??1?$Singleton@VWaServiceManager@@@@MAE@XZ
??1?$Singleton@VWaStringResourceManager@@@@MAE@XZ
??1?$Singleton@VWaWMIManager@@@@MAE@XZ
??1?$Singleton@VWaWinRM@@@@MAE@XZ
??1?$Singleton@VWaWuaProgressReceiver@@@@MAE@XZ
??1DIContainer@@QAE@XZ
??1DiagnoseParamHandler@@UAE@XZ
??1EventRegistrationController@@UAE@XZ
??1MsiAPIWrapper@@UAE@XZ
??1MsiAPIWrapperImpl@@UAE@XZ
??1PerfLoggingScope@@QAE@XZ
??1ProcessMonitor@@UAE@XZ
??1RandomAccessFileReader@@QAE@XZ
??1RegApiWrapper@@UAE@XZ
??1RegistryMonitor@@UAE@XZ
??1ServiceLifecycleMonitor@@UAE@XZ
??1ServiceLifecycleMonitorImpl@@UAE@XZ
??1ServiceMonitor@@UAE@XZ
??1WTSConnection@WaEndPointManager@@QAE@XZ
??1WaApiInvoker@@QAE@XZ
??1WaCache@@EAE@XZ
??1WaCallTree@@MAE@XZ
??1WaCallTreeBlocker@@QAE@XZ
??1WaCallTreeDisabled@@UAE@XZ
??1WaCallTreeNode@@UAE@XZ
??1WaComThread@@UAE@XZ
??1WaComponentManager@@MAE@XZ
??1WaConfigurations@@EAE@XZ
??1WaConfigurationsBase@@AAE@XZ
??1WaCryptoApiWrapper@@UAE@XZ
??1WaCustomDetection@@AAE@XZ
??1WaDatabase@@AAE@XZ
??1WaDebugInfo@@AAE@XZ
??1WaDetectionEngine@@QAE@XZ
??1WaEmbeddedResource@@QAE@XZ
??1WaEndPointManager@@UAE@XZ
??1WaEndpointRegistry@@UAE@XZ
??1WaEventManager@@AAE@XZ
??1WaExternalComponent@@QAE@XZ
??1WaFileInfo@@QAE@XZ
??1WaFuncCallNode@@UAE@XZ
??1WaGui@@QAE@XZ
??1WaHttp@@AAE@XZ
??1WaHttpLowLevel@@QAE@XZ
??1WaIConfigurations@@MAE@XZ
??1WaJson@@UAE@XZ
??1WaLicense@@AAE@XZ
??1WaMemoryPool@@QAE@XZ
??1WaMemoryPoolManager@@UAE@XZ
??1WaNet@@UAE@XZ
??1WaOSUtils@@EAE@XZ
??1WaPooledIO@@QAE@XZ
??1WaRegKey@@QAE@XZ
??1WaRegistry@@EAE@XZ
??1WaReturnNode@@UAE@XZ
??1WaRevocationCheck@WaCertificate@@AAE@XZ
??1WaRootNode@@UAE@XZ
??1WaSecuredTempFile@@EAE@XZ
??1WaSelfProtection@@QAE@XZ
??1WaServiceManager@@EAE@XZ
??1WaStringResourceManager@@UAE@XZ
??1WaTaskManager@@EAE@XZ
??1WaWMIManager@@UAE@XZ
??1WaWinRM@@UAE@XZ
??1WaWmi@@UAE@XZ
??1WaWmiThread@@MAE@XZ
??1WaWuaProgressReceiver@@UAE@XZ
??1WinEvtApiWrapper@@UAE@XZ
??1WinEvtApiWrapperImpl@@UAE@XZ
??1WinSvcApiWrapper@@UAE@XZ
??1WinSvcApiWrapperImpl@@UAE@XZ
??1WindowsEventMonitor@@UAE@XZ
??1WmiInstanceOpEventMonitorImpl@@UAE@XZ
??1WmiMonitor@@UAE@XZ
??1WscApiWrapper@@UAE@XZ
??1WscApiWrapperImpl@@UAE@XZ
??1WscMonitor@@UAE@XZ
??4?$Injectable@VEventStream@@VWinSvcApiWrapper@@VServiceLifecycleMonitor@@@@QAEAAU0@$$QAU0@@Z
??4?$Injectable@VEventStream@@VWinSvcApiWrapper@@VServiceLifecycleMonitor@@@@QAEAAU0@ABU0@@Z
??4MsiAPIWrapper@@QAEAAV0@ABV0@@Z
??4MsiAPIWrapperImpl@@QAEAAV0@ABV0@@Z
??4PerfLoggingScope@@QAEAAV0@ABV0@@Z
??4RandomAccessFileReader@@QAEAAV0@$$QAV0@@Z
??4RegApiWrapper@@QAEAAV0@ABV0@@Z
??4WaBase64@@QAEAAV0@$$QAV0@@Z
??4WaBase64@@QAEAAV0@ABV0@@Z
??4WaCallTree@@QAEAAV0@ABV0@@Z
??4WaCallTreeBlocker@@QAEAAV0@ABV0@@Z
??4WaCallTreeDisabled@@QAEAAV0@$$QAV0@@Z
??4WaCallTreeDisabled@@QAEAAV0@ABV0@@Z
??4WaCallTreeNode@@QAEAAV0@ABV0@@Z
??4WaComUtils@@QAEAAV0@$$QAV0@@Z
??4WaComUtils@@QAEAAV0@ABV0@@Z
??4WaCryptoApiFactory@@QAEAAV0@$$QAV0@@Z
??4WaCryptoApiFactory@@QAEAAV0@ABV0@@Z
??4WaCryptoUtils@@QAEAAV0@$$QAV0@@Z
??4WaCryptoUtils@@QAEAAV0@ABV0@@Z
??4WaEmbeddedResource@@QAEAAV0@$$QAV0@@Z
??4WaEmbeddedResource@@QAEAAV0@ABV0@@Z
??4WaEvaluator@@QAEAAV0@$$QAV0@@Z
??4WaEvaluator@@QAEAAV0@ABV0@@Z
??4WaFileInfo@@QAEAAV0@ABV0@@Z
??4WaFileUtils@@QAEAAV0@$$QAV0@@Z
??4WaFileUtils@@QAEAAV0@ABV0@@Z
??4WaFuncCallNode@@QAEAAV0@ABV0@@Z
??4WaGui@@QAEAAV0@ABV0@@Z
??4WaIConfigurations@@QAEAAV0@ABV0@@Z
??4WaJson@@UAEAAV0@$$QAV0@@Z
??4WaJson@@UAEAAV0@ABH@Z
??4WaJson@@UAEAAV0@ABV0@@Z
??4WaJson@@UAEAAV0@ABV?$unordered_map@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@Uwa_map_hasher@@Uwa_map_equal_to@@V?$wa_allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@@std@@@@@std@@@Z
??4WaJson@@UAEAAV0@ABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
??4WaJson@@UAEAAV0@AB_J@Z
??4WaJson@@UAEAAV0@PB_W@Z
??4WaJson@@UAEAAV0@_N@Z
??4WaJsonFactory@@QAEAAV0@$$QAV0@@Z
??4WaJsonFactory@@QAEAAV0@ABV0@@Z
??4WaLabelManager@@QAEAAV0@$$QAV0@@Z
??4WaLabelManager@@QAEAAV0@ABV0@@Z
??4WaMsiUtils@@QAEAAV0@$$QAV0@@Z
??4WaMsiUtils@@QAEAAV0@ABV0@@Z
??4WaProcessUtils@@QAEAAV0@$$QAV0@@Z
??4WaProcessUtils@@QAEAAV0@ABV0@@Z
??4WaRegKey@@QAEAAV0@$$QAV0@@Z
??4WaRegex@@QAEAAV0@$$QAV0@@Z
??4WaRegex@@QAEAAV0@ABV0@@Z
??4WaReturnNode@@QAEAAV0@ABV0@@Z
??4WaRevocationCheckUtilsLocal@WaCertificate@@QAEAAV01@$$QAV01@@Z
??4WaRevocationCheckUtilsLocal@WaCertificate@@QAEAAV01@ABV01@@Z
??4WaRootNode@@QAEAAV0@ABV0@@Z
??4WaSecureFile@@QAEAAV0@$$QAV0@@Z
??4WaSecureFile@@QAEAAV0@ABV0@@Z
??4WaUtilsNotification@@QAEAAV0@$$QAV0@@Z
??4WaUtilsNotification@@QAEAAV0@ABV0@@Z
??4WaValidator@@QAEAAV0@$$QAV0@@Z
??4WaValidator@@QAEAAV0@ABV0@@Z
??4WaVirtualization@@QAEAAV0@$$QAV0@@Z
??4WaVirtualization@@QAEAAV0@ABV0@@Z
??4WaWmi@@QAEAAV0@ABV0@@Z
??4WinEvtApiWrapper@@QAEAAV0@ABV0@@Z
??4WinEvtApiWrapperImpl@@QAEAAV0@$$QAV0@@Z
??4WinEvtApiWrapperImpl@@QAEAAV0@ABV0@@Z
??4WinSvcApiWrapper@@QAEAAV0@ABV0@@Z
??4WinSvcApiWrapperImpl@@QAEAAV0@$$QAV0@@Z
??4WinSvcApiWrapperImpl@@QAEAAV0@ABV0@@Z
??4WscApiWrapper@@QAEAAV0@ABV0@@Z
??4WscApiWrapperImpl@@QAEAAV0@ABV0@@Z
??8WaJson@@UBE_NABV0@@Z
??9WaJson@@UBE_NABV0@@Z
??AWaJson@@UAEAAV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??AWaJson@@UAEAAV0@I@Z
??AWaJson@@UAEAAV0@PB_W@Z
??AWaJson@@UBEABV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??AWaJson@@UBEABV0@I@Z
??AWaJson@@UBEABV0@PB_W@Z
??MWaJson@@UBE_NABV0@@Z
??YWaJson@@UAEAAV0@ABV0@@Z
??_7?$Singleton@VDiagnoseParamHandler@@@@6B@
??_7?$Singleton@VEventRegistrationController@@@@6B@
??_7?$Singleton@VWaCache@@@@6B@
??_7?$Singleton@VWaCryptoApiWrapper@@@@6B@
??_7?$Singleton@VWaEndPointManager@@@@6B@
??_7?$Singleton@VWaEndpointRegistry@@@@6B@
??_7?$Singleton@VWaMemoryPoolManager@@@@6B@
??_7?$Singleton@VWaNet@@@@6B@
??_7?$Singleton@VWaOSUtils@@@@6B@
??_7?$Singleton@VWaRegistry@@@@6B@
??_7?$Singleton@VWaSecuredTempFile@@@@6B@
??_7?$Singleton@VWaServiceManager@@@@6B@
??_7?$Singleton@VWaStringResourceManager@@@@6B@
??_7?$Singleton@VWaWMIManager@@@@6B@
??_7?$Singleton@VWaWinRM@@@@6B@
??_7?$Singleton@VWaWuaProgressReceiver@@@@6B@
??_7DiagnoseParamHandler@@6B@
??_7EventRegistrationController@@6B@
??_7MsiAPIWrapper@@6B@
??_7MsiAPIWrapperImpl@@6B@
??_7RegApiWrapper@@6B@
??_7ServiceMonitor@@6B@
??_7WaCache@@6B@
??_7WaCallTree@@6B@
??_7WaCallTreeDisabled@@6B@
??_7WaCallTreeNode@@6B@
??_7WaComThread@@6B@
??_7WaComponentManager@@6B@
??_7WaConfigurations@@6B@
??_7WaCryptoApiWrapper@@6B@
??_7WaEndPointManager@@6B@
??_7WaEndpointRegistry@@6B@
??_7WaFuncCallNode@@6B@
??_7WaIConfigurations@@6B@
??_7WaJson@@6B@
??_7WaMemoryPoolManager@@6B@
??_7WaNet@@6B@
??_7WaOSUtils@@6B@
??_7WaRegistry@@6B@
??_7WaReturnNode@@6B@
??_7WaRootNode@@6B@
??_7WaSecuredTempFile@@6B@
??_7WaServiceManager@@6B@
??_7WaStringResourceManager@@6B@
??_7WaTaskManager@@6B@
??_7WaWMIManager@@6B@
??_7WaWinRM@@6B@
??_7WaWmi@@6B@
??_7WaWmiThread@@6B@
??_7WaWuaProgressReceiver@@6B@
??_7WinEvtApiWrapper@@6B@
??_7WinEvtApiWrapperImpl@@6B@
??_7WinSvcApiWrapper@@6B@
??_7WinSvcApiWrapperImpl@@6B@
??_7WscApiWrapper@@6B@
??_7WscApiWrapperImpl@@6B@
??_FWaRegKey@@QAEXXZ
?Capture@WaRegex@@SAHPB_W0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?CaptureAll@WaRegex@@SAHPB_W0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?CaptureIterator@WaRegex@@SAHPB_W0HAAHAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?CloseServiceHandle@WinSvcApiWrapperImpl@@UBEHPAUSC_HANDLE__@@@Z
?Compress@WaFileUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0I@Z
?DefaultObjectsPerPool@WaMemoryPoolManager@@2IB
?EPWTSCloseServer@WaEndPointManager@@QAEXPAX@Z
?EPWTSOpenServerEx@WaEndPointManager@@QAEHAAPAX@Z
?EnumServicesStatusW@WinSvcApiWrapperImpl@@UBEHPAUSC_HANDLE__@@KKPAU_ENUM_SERVICE_STATUSW@@KPAK22@Z
?EvtClose@WaEndPointManager@@QAEXAAPAX@Z
?EvtClose@WinEvtApiWrapperImpl@@UBEHPAX@Z
?EvtOpenSession@WaEndPointManager@@QAEHAAPAX@Z
?EvtRender@WinEvtApiWrapperImpl@@UBEHPAX0KK0AAK1@Z
?EvtSubscribe@WinEvtApiWrapperImpl@@UBEPAXPAX0ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@100P6GKW4_EVT_SUBSCRIBE_NOTIFY_ACTION@@00@ZK@Z
?GET@WaHttp@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@_N@Z
?GET@WaHttp@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?GETJson@WaHttp@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@_N@Z
?GETJson@WaHttp@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?GETRequest@WaHttpLowLevel@@QAEHAAVWaHttpRequest@1@@Z
?GetVersion@WaOSUtils@@QAEXPAH0000@Z
?Is64@WaOSUtils@@QAE_NXZ
?IsUserPasswordProtected@WaOSUtils@@AAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AA_NAAW4PasswordProtectionInfo@@@Z
?IsWTSSessionReady@WaEndPointManager@@QAEHXZ
?LICENSE_FILE@WaLicense@@2PB_WB
?LogError@WaDebugInfo@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Match@WaRegex@@SAHPB_W0AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Matches@WaRegex@@SA_NPB_W0@Z
?NotifyServiceStatusChangeW@WinSvcApiWrapperImpl@@UBEKPAUSC_HANDLE__@@KPAU_SERVICE_NOTIFY_2W@@@Z
?OpenSCManagerW@WinSvcApiWrapperImpl@@UBEPAUSC_HANDLE__@@PB_W0K@Z
?OpenServiceW@WinSvcApiWrapperImpl@@UBEPAUSC_HANDLE__@@PAU2@PB_WK@Z
?POST@WaHttp@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00AAV23@_N@Z
?POST@WaHttp@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@_N@Z
?POSTRequest@WaHttpLowLevel@@QAEHAAVWaHttpRequest@1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?QueryServiceStatusEx@WinSvcApiWrapperImpl@@UBEHPAUSC_HANDLE__@@W4_SC_STATUS_TYPE@@PAEKPAK@Z
?REGEX_INSIDE_DIR_PATH_FIRST_SIGN@WaEvaluator@@2QB_WB
?REGEX_INSIDE_DIR_PATH_LAST_SIGN@WaEvaluator@@2QB_WB
?SendProxyMessage@WaThirdPartyGatewayHandle@@QBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@W4ImpersonationMode@1@@Z
?SubResultCallback@WaWinRM@@AAEXHPB_WH@Z
?SubResultCallbackStatic@WaWinRM@@CAXHPB_WH@Z
?Uncompress@WaFileUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V23@@Z
?WaRegCloseKey@WaEndpointRegistry@@QAEJPAUHKEY__@@@Z
?WaRegNotifyChangeKeyValue@WaEndpointRegistry@@QAEJPAUHKEY__@@HKPAXH@Z
?WaRegOpenCurrentUser@WaEndpointRegistry@@QAEJKPAPAUHKEY__@@@Z
?WaRegOpenKeyEx@WaEndpointRegistry@@QAEJPAUHKEY__@@PB_WKKPAPAU2@@Z
?_OpenSession@WaWinRM@@AAEHPB_W000@Z
?_addCandidateDefinition@WaDetectionEngine@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_addElement@WaPooledIO@@AAEXPB_W0HH@Z
?_bufferResource@WaDetectionEngine@@AAEXW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_buildPooledJson@WaPooledIO@@CAXABV?$list@PAUWaAsyncIocpMsgBase@@V?$allocator@PAUWaAsyncIocpMsgBase@@@std@@@std@@0AAVWaJson@@AAV?$map@IPAUWaAsyncIocpMsgBase@@U?$less@I@std@@V?$allocator@U?$pair@$$CBIPAUWaAsyncIocpMsgBase@@@std@@@3@@3@HAAH@Z
?_calcFileSize@RandomAccessFileReader@@AAEHXZ
?_canExecuteByAllUsers@WaFileUtils@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_checkActiveUserAccessible@WaFileUtils@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?_checkOPSWATSignature@WaSelfProtection@@IBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_cleanup@WaHttpLowLevel@@AAEXXZ
?_cleanup@WaPooledIO@@AAEXXZ
?_collectClues@WaDetectionEngine@@AAEHXZ
?_collectProcessClues@WaDetectionEngine@@AAEXXZ
?_collectRegistryClues@WaDetectionEngine@@AAEXXZ
?_collectServiceClues@WaDetectionEngine@@AAEXXZ
?_configChanged@WaHttp@@AAE_NAAH@Z
?_connect@WaWMIManager@@AAEHABUResourceArch@1@AAV?$CComPtr@UIWbemServices@@@ATL@@@Z
?_constructCollections@WaDatabase@@AAEXQBQB_W0QBH@Z
?_constructCollections@WaDatabase@@AAEXXZ
?_convertResultToErrorCode@WaRegKey@@CAHABJ@Z
?_convertToHexQuad@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_W@Z
?_copyFile@WaFileUtils@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?_create@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAIAAVWaJson@@@Z
?_createAES@WaCryptoApiFactory@@CA?AV?$shared_ptr@VIWaCryptoAES@@@std@@W4CryptoApiType@@@Z
?_createArray@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAIAAVWaJson@@@Z
?_createExecutableFileFromEncryptedBytes@WaFileUtils@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@1AAV23@@Z
?_createIOObjects@WaPooledIO@@AAEXXZ
?_createNotifier@WaRegistry@@AAEHV?$vector@V?$shared_ptr@VWaHiveMonitor@WaRegistry@@@std@@V?$allocator@V?$shared_ptr@VWaHiveMonitor@WaRegistry@@@std@@@2@@std@@PAXK@Z
?_createNumber@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAIAAVWaJson@@@Z
?_createObject@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAIAAVWaJson@@@Z
?_createRSA@WaCryptoApiFactory@@CA?AV?$shared_ptr@VIWaCryptoRSA@@@std@@W4CryptoApiType@@@Z
?_createSpecialCase@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAIAAVWaJson@@@Z
?_createString@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAIAAV23@@Z
?_decodeCharacter@WaJsonFactory@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_WAAI@Z
?_decrypt@WaCache@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N@Z
?_decrypt@WaDatabase@@CAHPBEHAAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@ABV?$shared_ptr@VIWaCryptoAES@@@3@@Z
?_decrypt@WaDatabase@@CAHPBEHAAVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@std@@@Z
?_defaultExporter@WaEmbeddedResource@@ABEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?_defaultProcessor@WaEmbeddedResource@@ABEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?_diffProcessSnapshot@WaTaskManager@@AAE_NXZ
?_dotInsert@WaJson@@EAEHPB_W$$QAV1@W4WaJsonType@@@Z
?_dotInsert@WaJson@@EAEHPB_WABV1@W4WaJsonType@@@Z
?_dotRetrieve@WaJson@@EAEHPB_WAAV1@W4WaJsonType@@@Z
?_enableRemoteReg@WaEndpointRegistry@@AAEHXZ
?_encodeString@WaJson@@EBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?_encrypt@WaCache@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N@Z
?_encryptExecutableFile@WaFileUtils@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?_enumerateElement@WaWMIManager@@AAEHV?$CComPtr@UIEnumWbemClassObject@@@ATL@@ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@@2@@std@@AAVWaJson@@HH@Z
?_errorCallback@WaPooledIO@@CAXPAUIWaAsyncIO@@AAV?$map@IPAUWaAsyncIocpMsgBase@@U?$less@I@std@@V?$allocator@U?$pair@$$CBIPAUWaAsyncIocpMsgBase@@@std@@@3@@std@@H_N@Z
?_evalCategories@WaDetectionEngine@@CA_NABV?$vector@HV?$allocator@H@std@@@std@@_NABVWaJson@@AAV4@@Z
?_executeThreadCmd@WaPooledIO@@AAE_NH@Z
?_executeThreadCmdAndTerminate@WaPooledIO@@AAEXH@Z
?_fetchAndValidate@WaDebugInfo@@AAEXABVWaJson@@@Z
?_fetchMsiRecords@WaMsiUtils@@CAHKABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAVWaJson@@@Z
?_fileContents@WaFileUtils@@CAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAPADAAH_NHH@Z
?_forcePathUnicode@WaFileUtils@@CAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_formatQuery@WaWMIManager@@AAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@@2@@3@@Z
?_getConnectionFromCache@WaWMIManager@@AAE?AV?$CComPtr@UIWbemServices@@@ATL@@ABUResourceArch@1@@Z
?_getContentOfEmbeddedFile@WaFileUtils@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@1AAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@@Z
?_getExeArchitecture@WaFileInfo@@CAHHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAB_N@Z
?_getFileCreationTime@WaFileUtils@@CAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?_getFileSize@WaFileUtils@@CAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?_getFixedVersion@WaFileInfo@@AAEHABW4WaFileInfoRealVersions@@PB_WPAH222@Z
?_getGateway@WaThirdPartyGatewayHandle@@ABEHW4WaThirdPartyGatewayType@@HAAV?$shared_ptr@VWaThirdPartyGateway@@@std@@@Z
?_getLastState@ServiceMonitor@@AAEHABUServiceClue@@AAK@Z
?_getMsiColumnNames@WaMsiUtils@@CAHKAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?_getProcessEventPreLaunch@WaTaskManager@@AAE?AV?$function@$$A6AHP6AXPA_W@ZHVWaJson@@@Z@std@@XZ
?_getProcessEventPreStop@WaTaskManager@@AAE?AV?$function@$$A6AHH@Z@std@@XZ
?_getProcessEventSink@WaTaskManager@@AAE?AV?$function@$$A6AHP6AXPA_W@ZV?$shared_ptr@VWaSignalLock@@@std@@HVWaJson@@@Z@std@@XZ
?_getServicesMatchingRegex@ServiceMonitor@@AAE?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?_getUninstallEventSink@WaRegistry@@AAE?AV?$function@$$A6AHP6AXPA_W@ZV?$shared_ptr@VWaSignalLock@@@std@@HVWaJson@@@Z@std@@XZ
?_getUpdatedProcessMap@WaTaskManager@@AAEHAAV?$map@HUWaRunningProcess@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHUWaRunningProcess@@@std@@@3@@std@@@Z
?_getUserName@WaOSUtils@@QAEHKAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?_getUserNameByWMI@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABV23@@Z
?_getWuaProgressEventSink@WaWuaProgressReceiver@@AAE?AV?$function@$$A6AHP6AXPA_W@ZV?$shared_ptr@VWaSignalLock@@@std@@HVWaJson@@@Z@std@@XZ
?_handleServicePendingDeletion@ServiceMonitor@@AAEXABUServiceClue@@@Z
?_handleServiceStateChange@ServiceMonitor@@AAEXABUServiceClue@@K@Z
?_hasEventPreLaunch@WaEventManager@@AAE_NW4WaEventType@1@@Z
?_hasEventSink@WaEventManager@@AAE_NW4WaEventType@1@@Z
?_ignoreWhiteSpace@WaJsonFactory@@CAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAI@Z
?_init@WaJson@@EAEXXZ
?_initProcessMap@WaTaskManager@@AAEHXZ
?_isRegistered@ServiceMonitor@@ABE_NABUServiceClue@@@Z
?_launchProcessByWMI@WaEndPointManager@@AAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABHAAH2@Z
?_load@WaEmbeddedResource@@ABEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?_load@WaExternalComponent@@AAEHXZ
?_loadCacheFromDatFile@WaDatabase@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@AAVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@3@@Z
?_loadFullProcessInfo@WaTaskManager@@ABEHAAUWaRunningProcess@@@Z
?_loadSharedPaths@WaEndPointManager@@AAEHXZ
?_manualPerformUpdateService@WaServiceManager@@AAEX_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_manualPerformUpdateServices@WaServiceManager@@AAEH_N@Z
?_mergeDatAndResDll@WaDatabase@@CAHABVWaJson@@AAV2@_J@Z
?_monitorRegistryThread@WaRegistry@@AAEHV?$vector@W4WaRegistryLocation@@V?$allocator@W4WaRegistryLocation@@@std@@@std@@@Z
?_normalizeWSCNameForComparison@WaWmi@@MAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_notifyCallback@WaRegistry@@AAEXV?$shared_ptr@VWaHiveMonitor@WaRegistry@@@std@@@Z
?_onResourceChanged@EventRegistrationController@@AAEXABVSerializable@@ABQ6AXPA_W@ZHABV?$shared_ptr@VMethodState@@@std@@@Z
?_overrideApiTypeWithConfiguration@WaCryptoApiFactory@@CAHAAW4CryptoApiType@@@Z
?_parseCustomDebugConfigs@WaDebugInfo@@AAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAW4LOG_LEVEL@1@@Z
?_parseCustomDebugConfigs@WaDebugInfo@@AAEXABVWaJson@@AAV?$set@HU?$less@H@std@@V?$allocator@H@2@@std@@@Z
?_parseCustomDebugConfigs@WaDebugInfo@@AAEXABVWaJson@@AAV?$set@W4LOG_COMPONENT@WaDebugInfo@@U?$less@W4LOG_COMPONENT@WaDebugInfo@@@std@@V?$allocator@W4LOG_COMPONENT@WaDebugInfo@@@4@@std@@@Z
?_parseEnvVariable@WaDebugInfo@@AAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_preDetectStage1@WaDetectionEngine@@AAEXXZ
?_preDetectStage2@WaDetectionEngine@@AAEXXZ
?_processEventSinkCallback@WaTaskManager@@AAEXABVWaJson@@@Z
?_processRegistrationEvent@ServiceMonitor@@AAEXXZ
?_processServiceChangeWorker@ServiceMonitor@@AAEXXZ
?_queueRegistrations@ServiceMonitor@@AAEXABURegistrationContext@1@@Z
?_queueServiceChange@ServiceMonitor@@AAEXABUServiceClue@@UServiceStateChange@@@Z
?_readCacheFile@WaCache@@AAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N@Z
?_readCacheFile@WaCache@@AAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N@Z
?_rearmServiceNotifications@ServiceMonitor@@AAEXXZ
?_regConnect@WaEndpointRegistry@@AAEJPAUHKEY__@@PAPAU2@_N@Z
?_registerEventSink@WaWuaProgressReceiver@@AAEXXZ
?_registerServiceStatusTracking@ServiceMonitor@@AAEHABURegistrationContext@1@@Z
?_registrationWorker@ServiceMonitor@@AAEXXZ
?_reinit@WaHttp@@AAEHXZ
?_reinit@WaLicense@@AAEHW4WA_PASSPHRASE_RETRIEVE_MODE@@@Z
?_requestBegin@WaHttp@@AAEHXZ
?_requestEnd@WaHttp@@AAEHAAVWaHttpRequest@WaHttpLowLevel@@HAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N_N@Z
?_runProcessesMonitor@WaTaskManager@@AAEHAAV?$promise@H@std@@@Z
?_runProcessesMonitorWithPolling@WaTaskManager@@AAEHAAV?$promise@H@std@@@Z
?_runRegexIteration@WaRegistry@@AAEHPB_WW4WaUninstallValueTypeToRegex@@AAV?$vector@UWaUninstallKey@@V?$allocator@UWaUninstallKey@@@std@@@std@@ABH@Z
?_semiAsyncQuery@WaWMIManager@@AAE?AUSemiAsyncThread@1@V?$CComPtr@UIEnumWbemClassObject@@@ATL@@PAUIWbemObjectSink@@@Z
?_sendRequest@WaHttpLowLevel@@AAEHABW4WaHttpVerb@1@AAVWaHttpRequest@1@PBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_serviceMonitorThread@WaServiceManager@@AAEXXZ
?_serviceNotifyCallback@ServiceMonitor@@CGXPAX@Z
?_set@WaJson@@EAEX$$QAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_set@WaJson@@EAEXABV?$unordered_map@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@Uwa_map_hasher@@Uwa_map_equal_to@@V?$wa_allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaJson@@@std@@@@@std@@@Z
?_set@WaJson@@EAEXABV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
?_set@WaJson@@EAEXAB_J@Z
?_set@WaJson@@EAEXPB_W@Z
?_set@WaJson@@EAEX_N@Z
?_setCollectionProperties@WaCache@@AAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABUWaCacheProps@@@Z
?_setupServiceTracking@ServiceMonitor@@AAEHABURegistrationContext@1@@Z
?_signAndEncrypt@WaCache@@CAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@V?$shared_ptr@VIWaCryptoRSA@@@3@@Z
?_startWTSConnection@WaEndPointManager@@AAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_successCallback@WaPooledIO@@CAXPAUIWaAsyncIO@@AAV?$map@IPAUWaAsyncIocpMsgBase@@U?$less@I@std@@V?$allocator@U?$pair@$$CBIPAUWaAsyncIocpMsgBase@@@std@@@3@@std@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?_syncExecNotificationQuery@WaWMIManager@@AAEHABV?$CComPtr@UIWbemServices@@@ATL@@ABUResourceArch@1@PB_WAAV?$CComPtr@UIEnumWbemClassObject@@@3@@Z
?_terminateProcessLow@WaTaskManager@@AAEHH_NH@Z
?_toPrettyString@WaJson@@EBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_N@Z
?_updateCandidateDefinition@WaDetectionEngine@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_updateService@WaServiceManager@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_updateServiceOnDemandIfNeeded@WaServiceManager@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?_updateServices@WaServiceManager@@AAEXXZ
?_winAPIWrapper@WaMsiUtils@@0V?$shared_ptr@VMsiAPIWrapper@@@std@@A
?_writeCacheFile@WaCache@@AAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N3@Z
?_writeCacheFile@WaCache@@AAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N3@Z
?add@WaJson@@UAEX$$QAV1@@Z
?add@WaJson@@UAEXABV1@@Z
?add@WaJson@@UAEXV?$initializer_list@VWaJson@@@std@@@Z
?addChildThread@WaCallTree@@UAEXABVid@thread@std@@@Z
?addChildThread@WaCallTreeDisabled@@UAEXABVid@thread@std@@@Z
?addClue@ProcessMonitor@@UAEHABVSerializable@@@Z
?addClue@RegistryMonitor@@UAEHABVSerializable@@@Z
?addClue@ServiceMonitor@@UAEHABVSerializable@@@Z
?addClue@WindowsEventMonitor@@UAEHABVSerializable@@@Z
?addClue@WmiMonitor@@UAEHABVSerializable@@@Z
?addClue@WscMonitor@@UAEHABVSerializable@@@Z
?addDefinition@WaDetectionEngine@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?addFuncCall@WaCallTreeNode@@QAEPAV1@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@000@Z
?addMetadata@WaPooledIO@@QAEXPB_W0@Z
?addProcess@WaTaskManager@@QAEXAAUWaRunningProcess@@@Z
?addRefDefaultConfigurationsHandler@WaConfigurationsBase@@SAHPAVWaIConfigurations@@@Z
?addResource@WaPooledIO@@QAEXPB_W0H@Z
?addReturnValue@WaCallTreeNode@@QAEPAV1@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?addReturnValue@WaCallTreeNode@@QAEPAV1@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0H0@Z
?addUtilsOwnerTag@WaApiUtils@@YAHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?allocate@WaMemoryPool@@QAEPAXI@Z
?allocate@WaMemoryPoolManager@@QAEPAXI@Z
?appendAccess@WaRegKey@@QAEXK@Z
?appendPath@WaRegKey@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?appendSecretsAndHash@WaCryptoUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@ABW4WaHashAlg@@@Z
?at@WaJson@@UBE?AV1@I@Z
?base64Decode@WaBase64@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?base64Encode@WaBase64@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V23@@Z
?base64utf16Encode@WaBase64@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V23@@Z
?begin@WaComponentManager@@QBE?AV?$_List_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaExternalComponent@@@std@@@std@@@std@@@std@@XZ
?binaryContents@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?binaryFileContents@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_NHHAB_N@Z
?bindKey@WaRegKey@@QAEXPAUHKEY__@@@Z
?blacklist@WaCallTree@@SAXABVid@thread@std@@@Z
?byteArrayToEpoch@WaTime@@YGHABQAEAAH@Z
?bytesToHexString@WaStringUtils@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBEI@Z
?bytesToHexWString@WaStringUtils@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBEI@Z
?bytesToWString@WaStringUtils@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAEI_N@Z
?cache@WaCache@@QAEHXZ
?cache@WaDatabase@@QAEHXZ
?cachedInvoke@WaExternalComponent@@QBEHAAVWaJson@@PAPA_W@Z
?calculateDirectoryDepth@WaFileUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_NAAH@Z
?calculateVersionStamp@WaHttp@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?canConfigWithoutReInit@WaConfigurations@@UBE_NPB_WAA_NAAVWaJson@@@Z
?canConfigWithoutReInit@WaConfigurationsBase@@QBE_NPB_WAA_NAAVWaJson@@@Z
?canExecuteByAllUsers@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?cancelAsync@WaWMIManager@@QAEXPAUIWbemObjectSink@@@Z
?cancelAsync@WaWmi@@UAEXPAUIWbemObjectSink@@@Z
?cancelSubcribeAsync@WaWinRM@@QAEHH@Z
?checkActiveUserAccessible@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?checkCacheLimitAndCleanCollection@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?checkDlpLicese@WaLicense@@QAEHXZ
?checkHashAndGetDecryptedInput@WaSecureFile@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?checkHostReachableByHttp@WaNet@@AAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HH@Z
?checkHostReachableBySocketRemote@WaNet@@AAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HH@Z
?checkHostReachableBySystemPSHttp@WaNet@@AAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HH@Z
?checkHostReachableByWMIPing@WaNet@@AAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HH@Z
?checkStatusForWSCInterface@WaWmi@@UAEHVWaJson@@AA_N@Z
?checkStatusForWSCInterface@WaWmiThread@@UAEHABVWaJson@@AA_N@Z
?checkUpToDateForWSCInterface@WaWmi@@UAEHVWaJson@@AA_N@Z
?checkUpToDateForWSCInterface@WaWmiThread@@UAEHABVWaJson@@AA_N@Z
?checkWSC@WaWmiThread@@IAEHHABVWaJson@@AA_N@Z
?cleanCollection@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?clear@WaJson@@UAEXXZ
?clearCachedConnections@WaWMIManager@@QAEXXZ
?clearOldLogFiles@WaDebugInfo@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?close@WaRegKey@@QAEHXZ
?closeMsiHandle@MsiAPIWrapperImpl@@UBEHK@Z
?closeSession@WaWinRM@@QAEHXZ
?closeWindow@WaGui@@QAEHABUWaWindow@@@Z
?closeWriteToBinaryFile@WaFileUtils@@SAHAAPAU_iobuf@@@Z
?closeWriteToFile@WaFileUtils@@SAHAAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@@Z
?cluesCollectionNotification@WaDetectionEngine@@QAEXPB_WPAX_N@Z
?comErrorToString@WaComUtils@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@J@Z
?computeDiff@DiffEngineImpl@@UAEHABVWaJson@@0AAV2@@Z
?computeString@WaDebugInfo@@AAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NABV23@@Z
?connect@WaWMIManager@@QAEHPB_WH_N@Z
?connect@WaWinRM@@QAEHPB_W@Z
?connect@WaWmi@@UAEHPB_W@Z
?contains@WaJson@@UBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?contains@WaJson@@UBE_NPB_W@Z
?contains@WaSecuredTempFile@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@_N@Z
?contents@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?convert@WaJson@@UAEXABW4WaJsonType@@@Z
?copyFileToTemp@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?create@WaJsonFactory@@SAHPB_WAAVWaJson@@@Z
?create@WaJsonFactory@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z
?create@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?createAES@WaCryptoApiFactory@@SAHAAV?$shared_ptr@VIWaCryptoAES@@@std@@AAU?$BlindString@E@WaStringUtils@@W4CryptoApiType@@@Z
?createAESWithOpswatSecret@WaCryptoApiFactory@@SAHAAV?$shared_ptr@VIWaCryptoAES@@@std@@W4CryptoApiType@@@Z
?createAESWithUserSecret@WaCryptoApiFactory@@SAHAAV?$shared_ptr@VIWaCryptoAES@@@std@@W4CryptoApiType@@@Z
?createAndLockCacheControlFile@WaCache@@AAEHXZ
?createDirectoryRecursively@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?createExecutableFileFromEncryptedBytes@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@1AAV23@@Z
?createManagedCacheFile@WaCache@@QAEHABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?createManagedCacheFile@WaCache@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?createRSA@WaCryptoApiFactory@@SAHAAV?$shared_ptr@VIWaCryptoRSA@@@std@@AAU?$BlindString@E@WaStringUtils@@_NW4CryptoApiType@@@Z
?createRSAWithUserPubKey@WaCryptoApiFactory@@SAHAAV?$shared_ptr@VIWaCryptoRSA@@@std@@W4CryptoApiType@@@Z
?createStream@EventStreamImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?createTempFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?current@WaCallTree@@UBEPAVWaCallTreeNode@@XZ
?current@WaCallTreeDisabled@@UBEPAVWaCallTreeNode@@XZ
?deallocate@WaMemoryPool@@QAEXPAX@Z
?deallocate@WaMemoryPoolManager@@QAEXIPAX@Z
?decryptDetection@WaCustomDetection@@AAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@@Z
?decryptErrorSensitiveInfo@WaCryptoUtils@@SAHAAVWaJson@@@Z
?decryptFile@WaCustomDetection@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@@Z
?defaultMSIProperties@WaMsiUtils@@2V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@B
?deinit@?$Singleton@VDiagnoseParamHandler@@@@MAEHXZ
?deinit@?$Singleton@VEventRegistrationController@@@@MAEHXZ
?deinit@?$Singleton@VWaCache@@@@MAEHXZ
?deinit@?$Singleton@VWaCryptoApiWrapper@@@@MAEHXZ
?deinit@?$Singleton@VWaEndPointManager@@@@MAEHXZ
?deinit@?$Singleton@VWaEndpointRegistry@@@@MAEHXZ
?deinit@?$Singleton@VWaMemoryPoolManager@@@@MAEHXZ
?deinit@?$Singleton@VWaNet@@@@MAEHXZ
?deinit@?$Singleton@VWaOSUtils@@@@MAEHXZ
?deinit@?$Singleton@VWaRegistry@@@@MAEHXZ
?deinit@?$Singleton@VWaSecuredTempFile@@@@MAEHXZ
?deinit@?$Singleton@VWaServiceManager@@@@MAEHXZ
?deinit@?$Singleton@VWaStringResourceManager@@@@MAEHXZ
?deinit@?$Singleton@VWaWMIManager@@@@MAEHXZ
?deinit@?$Singleton@VWaWinRM@@@@MAEHXZ
?deinit@?$Singleton@VWaWuaProgressReceiver@@@@MAEHXZ
?deinit@EventRegistrationController@@UAEHXZ
?deinit@WaEndPointManager@@MAEHXZ
?deinit@WaEndpointRegistry@@MAEHXZ
?deinit@WaNet@@UAEHXZ
?deinit@WaWMIManager@@MAEHXZ
?deinit@WaWinRM@@MAEHXZ
?deinitialize@WaApiInvoker@@AAEXXZ
?deleteDirectory@WaFileUtils@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?deleteKey@WaRegKey@@QAEHXZ
?deleteStream@EventStreamImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?deleteTempFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?deleteValue@WaRegKey@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dependencies@?$Injectable@VEventStream@@VWinSvcApiWrapper@@VServiceLifecycleMonitor@@@@SA?AV?$tuple@V?$shared_ptr@VEventStream@@@std@@V?$shared_ptr@VWinSvcApiWrapper@@@2@V?$shared_ptr@VServiceLifecycleMonitor@@@2@@std@@XZ
?destroy@?$Singleton@VDiagnoseParamHandler@@@@SAXXZ
?destroy@?$Singleton@VEventRegistrationController@@@@SAXXZ
?destroy@?$Singleton@VWaCache@@@@SAXXZ
?destroy@?$Singleton@VWaCryptoApiWrapper@@@@SAXXZ
?destroy@?$Singleton@VWaEndPointManager@@@@SAXXZ
?destroy@?$Singleton@VWaEndpointRegistry@@@@SAXXZ
?destroy@?$Singleton@VWaMemoryPoolManager@@@@SAXXZ
?destroy@?$Singleton@VWaNet@@@@SAXXZ
?destroy@?$Singleton@VWaOSUtils@@@@SAXXZ
?destroy@?$Singleton@VWaRegistry@@@@SAXXZ
?destroy@?$Singleton@VWaSecuredTempFile@@@@SAXXZ
?destroy@?$Singleton@VWaServiceManager@@@@SAXXZ
?destroy@?$Singleton@VWaStringResourceManager@@@@SAXXZ
?destroy@?$Singleton@VWaWMIManager@@@@SAXXZ
?destroy@?$Singleton@VWaWinRM@@@@SAXXZ
?destroy@?$Singleton@VWaWuaProgressReceiver@@@@SAXXZ
?destroy@DIContainer@@QAEXXZ
?destroy@WaCallTree@@SAXXZ
?destroy@WaComponentManager@@SAXXZ
?destroy@WaConfigurations@@SAXXZ
?destroy@WaCustomDetection@@SAXXZ
?destroy@WaDatabase@@SAXXZ
?destroy@WaDebugInfo@@SAXXZ
?destroy@WaEventManager@@SAXXZ
?destroy@WaHttp@@SAXXZ
?destroy@WaLicense@@SAXXZ
?destroy@WaRevocationCheck@WaCertificate@@SAXXZ
?destroy@WaTaskManager@@SAXXZ
?destroy@WaThirdPartyGatewayHandle@@SAXXZ
?destroy@WaWmiThread@@SAXXZ
?detectProducts@WaDetectionEngine@@QAEHABV?$vector@HV?$allocator@H@std@@@std@@AAVWaJson@@@Z
?detectionCall@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@_N@WaDbgCallTracker@@@std@@XZ
?detectionNotification@WaDetectionEngine@@QAEXPB_WPAX_N@Z
?directoryContents@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@H_NAB_N@Z
?directoryContentsAll@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@H_NAB_N@Z
?directoryExists@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NAB_N@Z
?directoryExistsLow@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N_N2AB_N@Z
?disable@WaRevocationCheck@WaCertificate@@QAEXXZ
?disableFsRedirection@WaFileUtils@@SAHAAPAX@Z
?dotAdd@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV1@@Z
?dotAdd@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?dotAdd@WaJson@@UAEHPB_W$$QAV1@@Z
?dotAdd@WaJson@@UAEHPB_WABV1@@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?dotAt@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?dotAt@WaJson@@UAEHPB_WAAH@Z
?dotAt@WaJson@@UAEHPB_WAAV1@@Z
?dotAt@WaJson@@UAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dotAt@WaJson@@UAEHPB_WAA_J@Z
?dotAt@WaJson@@UAEHPB_WAA_N@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?dotGet@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?dotGet@WaJson@@UAEHPB_WAAH@Z
?dotGet@WaJson@@UAEHPB_WAAV1@@Z
?dotGet@WaJson@@UAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?dotGet@WaJson@@UAEHPB_WAA_J@Z
?dotGet@WaJson@@UAEHPB_WAA_N@Z
?dotPut@WaJson@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?dotPut@WaJson@@UAEHPB_WABV1@@Z
?elevateUser@WaOSUtils@@QAEHPAXAAPAX@Z
?enable@WaRevocationCheck@WaCertificate@@QAEXXZ
?encryptContent@WaCustomDetection@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@@Z
?encryptErrorSensitiveInfo@WaCryptoUtils@@SAHAAVWaJson@@_N@Z
?encryptExecutableFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?encryptFile@WaCustomDetection@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00_N@Z
?end@WaComponentManager@@QBE?AV?$_List_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@VWaExternalComponent@@@std@@@std@@@std@@@std@@XZ
?ensurePathEnding@WaStringUtils@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ensureRestPathEnding@WaHttp@@SAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ensureUrlEnding@WaStringUtils@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?epochToFileTime@WaTime@@YGHAB_KAAU_FILETIME@@@Z
?evalDefinition@WaDetectionEngine@@SAHHABV?$vector@HV?$allocator@H@std@@@std@@AAVWaJson@@_N22@Z
?evaluateDirectory@WaEvaluator@@SAHABVWaJson@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?evaluateDirectoryRegex@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?evaluateExpression@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?evaluateExpression@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?evaluateFact@WaEvaluator@@SAHW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVWaJson@@@Z
?evaluateFileFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?evaluateFileFact@WaEvaluator@@SAHABVWaJson@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@@Z
?evaluateFilePath@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAAV23@ABH0@Z
?evaluateFilePath@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAAVWaJson@@ABH0@Z
?evaluateRegistryFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?evaluateRegistryFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?evaluateRegistryPath@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@VWaRegKey@@V?$allocator@VWaRegKey@@@std@@@3@@Z
?evaluateResult@WaCallTree@@SAHH@Z
?evaluateServiceFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?evaluateServiceFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?execMethod@WaWmi@@UAEHPB_W0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAVWaJson@@@Z
?execMethod@WaWmiThread@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@AAVWaJson@@@Z
?execute@WaPowerShellGateway@@YGHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_NAAKW4ImpersonationMode@WaThirdPartyGatewayHandle@@@Z
?execute@WaWMIManager@@QAEHPB_W00ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAVWaJson@@H@Z
?execute@WaWMIManager@@QAEHPB_W00ABVWaJson@@ABV?$set@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAV2@H@Z
?executeMsiView@MsiAPIWrapperImpl@@UBEHK@Z
?executeNotificationQuery@WaWMIManager@@QAEHPB_W0ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAVWaJson@@HHH@Z
?executeNotificationQuery@WaWMIManager@@QAEHPB_W0PAUIWbemObjectSink@@H@Z
?executeQuery@WaWmiThread@@MAEHPB_WPAPA_W@Z
?expandEnvironmentStrings@WaEndPointManager@@QAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?expandPath@WaFileUtils@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?fetchMsiRecord@MsiAPIWrapperImpl@@UBEHKAAK@Z
?fileContains@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@_N3AB_N@Z
?fileContains@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@_N2AB_N@Z
?fileContents@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_NHHAB_N@Z
?fileContents@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@_NHHAB_N@Z
?fileContentsWithUtf8Encoding@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?fileDiff@DiffEngineImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@@Z
?fileExists@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NAB_N@Z
?fileExistsLow@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N_N2AB_N@Z
?fileOperationContains@WaEvaluator@@SAHABVWaJson@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@_N@Z
?fileOperationExists@WaEvaluator@@SAHABVWaJson@@@Z
?fileOperationPropertyContains@WaEvaluator@@SAHABVWaJson@@W4VI_STR@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?fileOperationVersionContains@WaEvaluator@@SAHABVWaJson@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?filePropertyContains@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4VI_STR@@ABV23@_NAB_N@Z
?fileVersionContains@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABHABV23@_NAB_N@Z
?filetimeToEpoch@WaTime@@YGHABU_FILETIME@@AAH@Z
?filetimeToEpoch@WaTime@@YGHABU_FILETIME@@AA_K@Z
?filterInvokeOutput@WaValidator@@SAXAAVWaJson@@@Z
?filterOptions@WaConfigurationsBase@@QBE?AVWaJson@@ABV2@@Z
?findFilesForSearchPattern@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?first@WaJson@@UAE?AV1@XZ
?free@WaExternalComponent@@QBEHPA_W@Z
?freeCall@WaDebugInfo@@QAEXXZ
?freeComponentAllocation@WaComponentManager@@QAEHPA_W@Z
?generateDecryptedDebugLogs@WaDebugInfo@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?generateUUID@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WAAVWaJson@@@Z
?get@WaDatabase@@SAHABW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?get@WaJson@@UBE?AV1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get@WaJson@@UBE?AV1@PB_W@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV1@@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_J@Z
?get@WaJson@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?get@WaJson@@UBEHPB_WAAH@Z
?get@WaJson@@UBEHPB_WAAV1@@Z
?get@WaJson@@UBEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get@WaJson@@UBEHPB_WAA_J@Z
?get@WaJson@@UBEHPB_WAA_N@Z
?get@WaLabelManager@@SAHHAAVWaJson@@@Z
?get@WaRegKey@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?get@WaStringResourceManager@@QAEHIAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?getActiveUserDirectory@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getActiveUserSession@WaOSUtils@@QAEHAAUWaInternalUserSessionParams@1@@Z
?getActualError@WaCallTree@@SAHAAVWaJson@@@Z
?getAll@WaDatabase@@SAHABW4WaDatabaseKey@@_NABVWaJson@@AAV3@@Z
?getAll@WaRegKey@@QAEHAAV?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@Z
?getAll@WaRegKey@@QAEHAAVWaJson@@@Z
?getAllAsJsonObjectRecursive@WaRegKey@@QAEHAAVWaJson@@@Z
?getAllFromWmiObject@WaComUtils@@SAHPAUIWbemClassObject@@AAVWaJson@@@Z
?getAllSubkeyNames@WaRegKey@@QBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?getAndValidateProxyConfig@WaHttpLowLevel@@SAHAAW4EProxyType@1@AAVProxyInfoElem@1@@Z
?getApiGuardKey@WaCache@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getAppDataForActiveUsers@WaFileUtils@@SAHAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?getArchitecture@WaOSUtils@@QAE?AW4WaArchitectureType@@XZ
?getBool@WaJson@@UBE_NXZ
?getBoolOption@WaConfigurations@@UBEHPB_WAA_N@Z
?getBoolOption@WaConfigurationsBase@@QBEHPB_WAA_N@Z
?getBufferedIo@WaDetectionEngine@@QBEPAV?$WaAsyncIO@VWaDetectionEngine@@VWaPooledIO@@@@XZ
?getBytes@WaHttpLowLevel@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAPAEAAI_N@Z
?getCS@?$Singleton@VDiagnoseParamHandler@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VEventRegistrationController@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaCache@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaCryptoApiWrapper@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaEndPointManager@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaEndpointRegistry@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaMemoryPoolManager@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaNet@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaOSUtils@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaRegistry@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaSecuredTempFile@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaServiceManager@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaStringResourceManager@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaWMIManager@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaWinRM@@@@SAAAVrecursive_mutex@std@@XZ
?getCS@?$Singleton@VWaWuaProgressReceiver@@@@SAAAVrecursive_mutex@std@@XZ
?getCacheFile@WaCache@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N@Z
?getCacheFileWithValidation@WaCache@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@3@ABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@_N4@Z
?getCallTree@WaCallTree@@SAXAAVWaJson@@@Z
?getCallTree@WaCallTree@@SAXPAPA_W_N@Z
?getCatalogContext@WaFileInfo@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?getCertInfo@WaFileInfo@@SAHABQAU_CMSG_SIGNER_INFO@@ABQAXAAVWaJson@@@Z
?getCollectionSize@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?getComponent@WaComponentManager@@QBEHABHPAPAVWaExternalComponent@@@Z
?getComponent@WaComponentManager@@QBEHPB_WPAPAVWaExternalComponent@@@Z
?getComponents@WaProductUtils@@YAHHAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?getContentOfEmbeddedFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@1AAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@@Z
?getCurrentConfig@WaDebugInfo@@QAE?AVWaJson@@XZ
?getCurrentEpochTime@WaTime@@YAHXZ
?getCurrentEpochTime@WaTime@@YGHAAH@Z
?getCurrentLocalEpochTime@WaTime@@YAHXZ
?getCurrentLocalEpochTime@WaTime@@YGHAAH@Z
?getCurrentSequenceNumber@WaConfigurations@@UBEHXZ
?getCurrentSequenceNumber@WaConfigurationsBase@@QBEHXZ
?getCurrentSessions@WaOSUtils@@QAEHAAV?$vector@KV?$allocator@K@std@@@std@@W4_WTS_CONNECTSTATE_CLASS@@@Z
?getDateTimeFromWmiObject@WaComUtils@@SAHPAUIWbemClassObject@@PB_WAAH@Z
?getDefaultBrowserPath@WaProductUtils@@YAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getDefaultConfigurationsHandler@WaConfigurationsBase@@SAPAVWaIConfigurations@@XZ
?getDefinitionsFromClues@WaRegistry@@QAEHPAVWaDetectionEngine@@@Z
?getDefinitionsFromClues@WaServiceManager@@QAEHPAVWaDetectionEngine@@@Z
?getDefinitionsFromClues@WaTaskManager@@QAEHPAVWaDetectionEngine@@@Z
?getDeploymentPath@WaFileUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getDeviceID@WaOSUtils@@AAEHPAVWaWmi@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getDeviceID@WaOSUtils@@AAEHPAVWaWmiThread@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getDeviceID@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getDllName@WaExternalComponent@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getDlpModule@WaLicense@@AAEHAAVWaJson@@@Z
?getESUStatus@WaOSUtils@@QBEHAAW4ESUStatus@@@Z
?getESUStatusByShell@WaOSUtils@@QBEHAAW4ESUStatus@@@Z
?getESUStatusByWMI@WaOSUtils@@QBEHAAW4ESUStatus@@@Z
?getEnvFolder@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?getEnvironmentFolder@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?getErrorLog@WaDebugInfo@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getExeArchitecture@WaFileInfo@@SAHHAAVWaJson@@AB_N@Z
?getFileCreationTime@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?getFileSize@WaFileUtils@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?getFileVersionFromPath@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABHAAV23@AB_N3@Z
?getFixedFileVersion@WaFileInfo@@QAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AB_N@Z
?getFixedFileVersion@WaFileInfo@@QAEHPB_WPAH111AB_N@Z
?getFixedProductVersion@WaFileInfo@@QAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AB_N@Z
?getFixedProductVersion@WaFileInfo@@QAEHPB_WPAH111AB_N@Z
?getHandle@WTSConnection@WaEndPointManager@@QAEPAXXZ
?getHashForString@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@W4WaHashAlg@@_N@Z
?getHashString@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@W4WaHashAlg@@_N@Z
?getHostName@WaEndPointManager@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getHostPath@WaEndPointManager@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getInfo@WaFileInfo@@QAEHPB_WW4VI_STR@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AB_N@Z
?getInitReturnCode@?$Singleton@VDiagnoseParamHandler@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VEventRegistrationController@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaCache@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaCryptoApiWrapper@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaEndPointManager@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaEndpointRegistry@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaMemoryPoolManager@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaNet@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaOSUtils@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaRegistry@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaSecuredTempFile@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaServiceManager@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaStringResourceManager@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaWMIManager@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaWinRM@@@@IAEHXZ
?getInitReturnCode@?$Singleton@VWaWuaProgressReceiver@@@@IAEHXZ
?getInstallDate@WaProductUtils@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z
?getInstalledLanguage@WaProductUtils@@YAHABHAAVWaJson@@@Z
?getInt@WaJson@@UBE_JXZ
?getIntFromWmiObject@WaComUtils@@SAHPAUIWbemClassObject@@PB_WAAH@Z
?getIntOption@WaConfigurations@@UBEHPB_WAAH@Z
?getIntOption@WaConfigurationsBase@@QBEHPB_WAAH@Z
?getIntegrityLevel@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAK@Z
?getInternetState@WaEndPointManager@@QAEHV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@HHAA_N@Z
?getInternetState@WaNet@@QAEHABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@HHAA_N@Z
?getJsonFromWmiObject@WaComUtils@@SAHPAUIWbemClassObject@@AAVWaJson@@@Z
?getJsonFromWmiObject@WaComUtils@@SAHPAUIWbemClassObject@@PB_WAAVWaJson@@@Z
?getKeysForDisplayNameRegex@WaRegistry@@QAEHPB_WAAV?$vector@UWaUninstallKey@@V?$allocator@UWaUninstallKey@@@std@@@std@@ABH@Z
?getKeysForInstallLocationRegex@WaRegistry@@QAEHPB_WAAV?$vector@UWaUninstallKey@@V?$allocator@UWaUninstallKey@@@std@@@std@@@Z
?getKeysForKeyNameRegex@WaRegistry@@QAEHPB_WAAV?$vector@UWaUninstallKey@@V?$allocator@UWaUninstallKey@@@std@@@std@@@Z
?getLanguageInfo@WaProductUtils@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@ABW4LanguageInfo@@@Z
?getLastModifiedTime@WaFileInfo@@QAEHPB_WAAHAB_N@Z
?getLastWindowsError@WaOSUtils@@SAHXZ
?getLicFilecheckInterval@WaLicense@@SAHXZ
?getLicenseFileTimestamp@WaLicense@@QBEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getLicenseStatus@WaLicense@@QAEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getListCerts@WaFileInfo@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@3@@Z
?getLoaders@WaStringResourceManager@@KAAAV?$unordered_map@IV?$function@$$A6AHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z@std@@U?$hash@I@2@U?$equal_to@I@2@V?$allocator@U?$pair@$$CBIV?$function@$$A6AHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z@std@@@std@@@2@@std@@XZ
?getLogOnUserByWMI@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getMainComponent@WaProductUtils@@YAHHAAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?getMainInstallPath@WaProductUtils@@YAHHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?getMd5HashForFile@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?getMethod@Method@WaStaticDb@@YAPBUmethod@12@H@Z
?getMethodDefinition@WaProductUtils@@YAHHHAAVWaJson@@@Z
?getModuleAbsolutePath@WaComponentManager@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?getModuleName@WaExternalComponent@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getModulePath@WaFileUtils@@SAHPB_W_NAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getMsiComponentPath@MsiAPIWrapperImpl@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@AAK@Z
?getMsiComponentPath@WaMsiUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@@Z
?getMsiProductInfo@MsiAPIWrapperImpl@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@AAK@Z
?getMsiProductInfo@WaMsiUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@@Z
?getMsiRecordGetFieldCount@MsiAPIWrapperImpl@@UBEHK@Z
?getMsiRecordString@MsiAPIWrapperImpl@@UBEHKIAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getMsiViewGetColumnInfo@MsiAPIWrapperImpl@@UBEHKW4tagMSICOLINFO@@AAK@Z
?getMultiFactorUnlockStates@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z
?getNestedRefByType@WaDatabase@@SAHW4WaDatabaseKey@@AAVWaJson@@AAW42@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getNonElevatedToken@WaOSUtils@@SAHAAPAX@Z
?getNonElevatedTokenFromExplorer@WaOSUtils@@CAHAAPAX@Z
?getOESISTimestamp@WaFileInfo@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAH@Z
?getOESISVersion@WaFileInfo@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@@Z
?getOSInfo@WaOSUtils@@QAEHABVWaJson@@AAV2@@Z
?getOSReleaseInfo@WaOSUtils@@QBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@@Z
?getObjKeyType@WaJson@@UBE?AW4WaJsonType@@PB_W@Z
?getOption@WaConfigurations@@UBEHPB_WAAVWaJson@@@Z
?getOption@WaConfigurationsBase@@QBEHPB_WAAVWaJson@@@Z
?getOptions@WaConfigurations@@UBE?AVWaJson@@_N@Z
?getOptions@WaConfigurationsBase@@QBE?AVWaJson@@XZ
?getOsLifeTimeData@WaOSUtils@@QBEABVWaJson@@XZ
?getParams@DiagnoseParamHandler@@QAE?AVWaJson@@ABH0@Z
?getParams@WaTaskManager@@QBE?AUWaTaskMgrParam@@XZ
?getParamsFilePath@DiagnoseParamHandler@@AAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getParentDirectory@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?getPath@WaRegKey@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getPathListFromFilePathJson@WaEvaluator@@SA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABVWaJson@@@Z
?getProcessSnapshot@WaTaskManager@@QAEHAAVWaJson@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getProductState@WscApiWrapperImpl@@UBEHW4_WSC_SECURITY_PROVIDER@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAW4WSC_SECURITY_PRODUCT_STATE@@@Z
?getProxyAutoLogonPolicy@WaHttpLowLevel@@SAHAAK@Z
?getRaw@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WAAVWaJson@@@Z
?getRegKeyFromLocation@WaRegistry@@SAHW4WaRegistryLocation@@AAVWaRegKey@@@Z
?getRegLocationEnum@WaRegistry@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAH@Z
?getRequestHeaderResult@WaHttpLowLevel@@QAEHAAVWaHttpRequest@1@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getRequestResult@WaHttpLowLevel@@QAEHAAVWaHttpRequest@1@PAPAEAAI@Z
?getRequestType@WaApiUtils@@YA?AW4InvokeRequestType@1@ABVWaJson@@@Z
?getRestUri@WaDatabase@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4WaDatabaseKey@@@Z
?getSecurityToken@WaExternalComponent@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getServerSideLicenseFileTimestamp@WaLicense@@QBEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getService@WaServiceManager@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAUWaService@@@Z
?getServiceInfo@WaServiceManager@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAUWaService@@@Z
?getServiceSnapshot@WaServiceManager@@QAEHAAVWaJson@@@Z
?getSha1HashForFile@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?getSha2HashForFile@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?getSha512HashForFile@WaHasher@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@_N@Z
?getSigningStatus@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAHAA_NAAV23@@Z
?getSinglePathFromFilePathJson@WaEvaluator@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVWaJson@@@Z
?getSpecialFolder@WaEndPointManager@@QAEHABHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getSpecialFolder@WaFileUtils@@SAHABHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getStopEvent@WaRegistry@@QBEPAXXZ
?getString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getStringFromWmiObject@WaComUtils@@SAHPAUIWbemClassObject@@PB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getStringOption@WaConfigurations@@UBEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getStringOption@WaConfigurationsBase@@QBEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getSystemDirectory@WaOSUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getSystemManufacturerAndModel@WaVirtualization@@CAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?getTempDir@WaFileUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getTickCount@WaTime@@YA_JXZ
?getTickCountSinceEpoch@WaTime@@YA_JXZ
?getTimeString@WaTime@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@_NAB_J@Z
?getTopLevelWindows@WaGui@@QAEHAAV?$vector@UWaWindow@@V?$allocator@UWaWindow@@@std@@@std@@@Z
?getType@WaJson@@UBE?AW4WaJsonType@@XZ
?getUninstallHiveInfo@WaProductUtils@@YAHHAAVWaJson@@@Z
?getUninstallProductSnapshot@WaRegistry@@QAEHAAVWaJson@@@Z
?getUninstallString@WaProductUtils@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z
?getUserId@WaLicense@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getUserName@WaOSUtils@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?getUserNameOfProcess@WaProcessUtils@@SAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAX@Z
?getUserPasswordProtected@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AA_NAAW4PasswordProtectionInfo@@@Z
?getUserPrincipalName@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV23@@Z
?getUserToken@WaOSUtils@@QAEPAXK@Z
?getUserTokensByProcessName@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@PAXV?$allocator@PAX@std@@@3@ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@_N3@Z
?getVMtype@WaVirtualization@@SAXAAW4WaInternalVMType@@QAH@Z
?getVersionStamp@WaHttp@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?getVolumesInfo@WaEndpointVolumeInfo@@YGHAAVWaJson@@@Z
?getWSCProductState@WaOSUtils@@QAEHW4_WSC_SECURITY_PROVIDER@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAW4WSC_SECURITY_PRODUCT_STATE@@@Z
?getWinBioState@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?getWinPinState@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?getWscAvProducts@WaWmi@@UAEHAAVWaJson@@@Z
?hasMotw@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_N@Z
?hasNext@WaRegKey@@QAE_NAAV1@AAKAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAH@Z
?hrToHex@WaComUtils@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@J@Z
?hrToWaError@WaComUtils@@SAHJ@Z
?httpRequest@WaNet@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HAAV23@0ABW4RequestMethod@1@0_N3@Z
?impersonateCurrentUser@WaOSUtils@@QAEHPAX@Z
?impersonateCurrentUser@WaOSUtils@@QAEHXZ
?init@?$Singleton@VDiagnoseParamHandler@@@@MAEHXZ
?init@?$Singleton@VEventRegistrationController@@@@MAEHXZ
?init@?$Singleton@VWaCache@@@@MAEHXZ
?init@?$Singleton@VWaCryptoApiWrapper@@@@MAEHXZ
?init@?$Singleton@VWaEndPointManager@@@@MAEHXZ
?init@?$Singleton@VWaEndpointRegistry@@@@MAEHXZ
?init@?$Singleton@VWaMemoryPoolManager@@@@MAEHXZ
?init@?$Singleton@VWaNet@@@@MAEHXZ
?init@?$Singleton@VWaOSUtils@@@@MAEHXZ
?init@?$Singleton@VWaRegistry@@@@MAEHXZ
?init@?$Singleton@VWaSecuredTempFile@@@@MAEHXZ
?init@?$Singleton@VWaServiceManager@@@@MAEHXZ
?init@?$Singleton@VWaStringResourceManager@@@@MAEHXZ
?init@?$Singleton@VWaWMIManager@@@@MAEHXZ
?init@?$Singleton@VWaWinRM@@@@MAEHXZ
?init@?$Singleton@VWaWuaProgressReceiver@@@@MAEHXZ
?init@DiagnoseParamHandler@@MAEHXZ
?init@EventRegistrationController@@UAEHXZ
?init@WaComThread@@QAEHXZ
?init@WaCryptoApiWrapper@@MAEHXZ
?init@WaEndpointRegistry@@MAEHXZ
?init@WaLicense@@QAEHXZ
?init@WaMemoryPool@@QAE_NXZ
?init@WaMemoryPoolManager@@MAEHXZ
?init@WaThirdPartyGatewayHandle@@SAXXZ
?init@WaWMIManager@@MAEHXZ
?init@WaWinRM@@MAEHXZ
?init@WaWuaProgressReceiver@@UAEHXZ
?initCOMSecurity@WaComUtils@@SAJXZ
?initLogFile@WaDebugInfo@@AAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?initModule@WaComponentManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WAAVWaJson@@@Z
?initWorker@WaWmiThread@@MAEHXZ
?initWriteToBinaryFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAPAU_iobuf@@_N@Z
?initWriteToFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_ofstream@DU?$char_traits@D@std@@@3@_N@Z
?initialize@WaApiInvoker@@AAEXXZ
?initialize@WaCache@@QAEHXZ
?initialize@WaComponentManager@@QAEHXZ
?initialize@WaCryptoApiWrapper@@QAEHXZ
?initialize@WaCustomDetection@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?initialize@WaDatabase@@QAEHXZ
?initialize@WaEndPointManager@@QAEHABVWaJson@@@Z
?initialize@WaHttp@@QAEHXZ
?initialize@WaHttpLowLevel@@QAEHHPB_WH@Z
?initialize@WaOSUtils@@QAEXXZ
?initialize@WaWinRM@@QAEHPB_W000@Z
?initialize@WaWmi@@UAEHXZ
?initializeCrypto@WaDebugInfo@@QAEHXZ
?insert@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WABVWaJson@@@Z
?insertRaw@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WABVWaJson@@@Z
?insertToMap@WaEndpointRegistry@@QAEXPAUHKEY__@@VRegData@1@@Z
?instance@?$Singleton@VDiagnoseParamHandler@@@@SAPAVDiagnoseParamHandler@@XZ
?instance@?$Singleton@VEventRegistrationController@@@@SAPAVEventRegistrationController@@XZ
?instance@?$Singleton@VWaCache@@@@SAPAVWaCache@@XZ
?instance@?$Singleton@VWaCryptoApiWrapper@@@@SAPAVWaCryptoApiWrapper@@XZ
?instance@?$Singleton@VWaEndPointManager@@@@SAPAVWaEndPointManager@@XZ
?instance@?$Singleton@VWaEndpointRegistry@@@@SAPAVWaEndpointRegistry@@XZ
?instance@?$Singleton@VWaMemoryPoolManager@@@@SAPAVWaMemoryPoolManager@@XZ
?instance@?$Singleton@VWaNet@@@@SAPAVWaNet@@XZ
?instance@?$Singleton@VWaOSUtils@@@@SAPAVWaOSUtils@@XZ
?instance@?$Singleton@VWaRegistry@@@@SAPAVWaRegistry@@XZ
?instance@?$Singleton@VWaSecuredTempFile@@@@SAPAVWaSecuredTempFile@@XZ
?instance@?$Singleton@VWaServiceManager@@@@SAPAVWaServiceManager@@XZ
?instance@?$Singleton@VWaStringResourceManager@@@@SAPAVWaStringResourceManager@@XZ
?instance@?$Singleton@VWaWMIManager@@@@SAPAVWaWMIManager@@XZ
?instance@?$Singleton@VWaWinRM@@@@SAPAVWaWinRM@@XZ
?instance@?$Singleton@VWaWuaProgressReceiver@@@@SAPAVWaWuaProgressReceiver@@XZ
?instance@DIContainer@@SAAAV1@XZ
?instance@WaCallTree@@SAPAV1@ABVid@thread@std@@@Z
?instance@WaComponentManager@@SAPAV1@XZ
?instance@WaConfigurations@@SAPAV1@XZ
?instance@WaCustomDetection@@SAPAV1@XZ
?instance@WaDatabase@@SAPAV1@XZ
?instance@WaDebugInfo@@SAPAV1@XZ
?instance@WaEventManager@@SAPAV1@XZ
?instance@WaHttp@@SAPAV1@XZ
?instance@WaLicense@@SAPAV1@XZ
?instance@WaRevocationCheck@WaCertificate@@SAPAV12@XZ
?instance@WaTaskManager@@SAPAV1@XZ
?instance@WaWmiThread@@SAPAV1@XZ
?int64ToWaJson@WaComUtils@@SA?AVWaJson@@AB_J@Z
?invoke@WaApiInvoker@@QAEHABVWaJson@@AAV2@@Z
?invoke@WaExternalComponent@@QBEHAAVWaJson@@0@Z
?invoke@WaWinRM@@QAEHPB_W00ABVWaJson@@ABV?$set@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAV2@@Z
?invokeCall@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@_N@WaDbgCallTracker@@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?invokeCallback@WaWuaProgressReceiver@@QBEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isAWSDetected@WaVirtualization@@CAHXZ
?isActive@WaDebugInfo@@QAE_NXZ
?isActiveInSetup@WaDebugInfo@@QAE_NAAVWaJson@@@Z
?isArchitectureSupported@WaOSUtils@@QAE_NW4WaArchitectureType@@@Z
?isCluePresent@WaRegistry@@QAE_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isConnected@WaWmi@@UAE_NXZ
?isCryptoInited@WaDebugInfo@@QAE_NXZ
?isCurrentActiveUserElevated@WaOSUtils@@QAEHXZ
?isCurrentPermissionGTE@WaProcessUtils@@SAHABHAA_N@Z
?isCurrentProcessRunningAsService@WaProcessUtils@@SAHAA_N@Z
?isDisabled@WaRevocationCheck@WaCertificate@@QAE_NXZ
?isDotNetFrameworkInstalled@WaOSUtils@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isElevated@WaProcessUtils@@SA_NPAX@Z
?isElevatedToken@WaOSUtils@@SAHQAX@Z
?isEncryptErrorSensitiveInfoEnabled@WaConfigurations@@QBE_NXZ
?isHandleReady@WTSConnection@WaEndPointManager@@QAE_NXZ
?isHardLink@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isHyperVDetected@WaVirtualization@@CAHXZ
?isHypervisorDetected@WaVirtualization@@CAHXZ
?isInited@WaOSUtils@@QAE_NXZ
?isInitialized@WaWinRM@@QAE_NXZ
?isLicensed@WaLicense@@QBEHH@Z
?isLinkedFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isLoggerDisabled@WaDebugInfo@@QAE_NXZ
?isLoggingEnabled@WaDebugInfo@@QAE?B_NXZ
?isManagedLoggerAvailable@WaDebugInfo@@QAE_NXZ
?isNumber@WaStringUtils@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?isNumber@WaStringUtils@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isObjKeyType@WaJson@@UBE_NPB_WABW4WaJsonType@@@Z
?isOfflineModeAllowed@WaLicense@@QBE_NXZ
?isOnlineMode@WaDatabase@@QBE_NXZ
?isOnlineModeAllowed@WaLicense@@QBE_NXZ
?isOpenStackDetected@WaVirtualization@@CAHXZ
?isOptionMinor@WaConfigurations@@ABE_NPB_W@Z
?isOptionMinor@WaConfigurationsBase@@QBE_NPB_W@Z
?isParallelsDetected@WaVirtualization@@CAHXZ
?isPasskeyBlocked@WaLicense@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isProcessRunning@WaTaskManager@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?isQemuDetected@WaVirtualization@@CAHXZ
?isRegistered@WaSelfProtection@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isRemoteConnected@WaEndPointManager@@QAE_NXZ
?isRoleEnabled@WaLicense@@QBE_NW4EUserRole@1@@Z
?isRunningAsService@WaProcessUtils@@CAHPAXAA_N@Z
?isServiceMode@WaConfigurations@@QBE_NXZ
?isSessionActive@WaOSUtils@@QAEHKAA_N@Z
?isSymLink@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isTeardownRequest@WaApiUtils@@YA_NABVWaJson@@@Z
?isTokenElevated@WaProcessUtils@@SA_NABQAX@Z
?isType@WaJson@@UBE_NABW4WaJsonType@@@Z
?isUseRegularExpressionInDirectoryPath@WaEvaluator@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isUseRegularExpressionInRegistryPath@WaRegistry@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isUserOnDomain@WaOSUtils@@QAEHXZ
?isUtilsOwnerTagPresent@WaApiUtils@@YA_NPB_W@Z
?isVMwareDetected@WaVirtualization@@CAHXZ
?isValid@RandomAccessFileReader@@QBE_NXZ
?isValidArrayElementType@WaValidator@@CAHAAVWaJson@@ABUparam@Method@WaStaticDb@@@Z
?isVirtualBoxDetected@WaVirtualization@@CAHXZ
?isVirtualPCDetected@WaVirtualization@@CAHXZ
?isVirtualization@WaVirtualization@@SAHXZ
?jsonToCharPointer@WaConfigurations@@UBEXABVWaJson@@PAPA_W_N@Z
?jsonToCharPointer@WaConfigurationsBase@@QBEXABVWaJson@@PAPA_W_N@Z
?jsonToMap@DiagnoseParamHandler@@AAEHVWaJson@@AAV?$map@HUMethodInfo@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHUMethodInfo@@@std@@@3@@std@@@Z
?jsonToVariant@WaComUtils@@SAHABVWaJson@@AAUtagVARIANT@@@Z
?keep@WaCallTreeNode@@QAEX_N@Z
?keep@WaCallTreeNode@@QBE_NXZ
?keepCurrentBranch@WaCallTree@@UAEXXZ
?keepCurrentBranch@WaCallTreeDisabled@@UAEXXZ
?key@WaRegKey@@QBEPAUHKEY__@@XZ
?keys@WaJson@@UBE?AV?$set@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ
?lastCallError@WaCallTree@@SAHXZ
?launch3rdHostProcess@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAH@Z
?launchProcess@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAHHPAKPAV23@H@Z
?launchProcess@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAHHPAKPAV23@H0@Z
?launchProcessAsUser@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAHHPAKPAV23@HH0@Z
?launchProduct@WaProductUtils@@YAHH@Z
?licenseRequestRest@WaLicense@@ABEHPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?load@WaEmbeddedResource@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?loadLocalCacheFromDisk@WaCache@@AAEHABV?$set@W4WaCacheNamespace@@U?$less@W4WaCacheNamespace@@@std@@V?$allocator@W4WaCacheNamespace@@@3@@std@@@Z
?m_CS@?$Singleton@VDiagnoseParamHandler@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VEventRegistrationController@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaCache@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaCryptoApiWrapper@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaEndPointManager@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaEndpointRegistry@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaMemoryPoolManager@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaNet@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaOSUtils@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaRegistry@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaSecuredTempFile@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaServiceManager@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaStringResourceManager@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaWMIManager@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaWinRM@@@@0Vrecursive_mutex@std@@A
?m_CS@?$Singleton@VWaWuaProgressReceiver@@@@0Vrecursive_mutex@std@@A
?m_CS@WaVirtualization@@0Vrecursive_mutex@std@@A
?m_CSLock@WaConfigurations@@0Vrecursive_mutex@std@@A
?m_CSLock@WaHttp@@0Vrecursive_mutex@std@@A
?m_ClassLock@WaCache@@0Vrecursive_mutex@std@@A
?m_ClassLock@WaCustomDetection@@0Vrecursive_mutex@std@@A
?m_ClassLock@WaDatabase@@0Vrecursive_mutex@std@@A
?m_ClassLock@WaDebugInfo@@0Vrecursive_mutex@std@@A
?m_ClassLock@WaRevocationCheck@WaCertificate@@0Vrecursive_mutex@std@@A
?m_CriticalSection@WaComponentManager@@0Vrecursive_mutex@std@@A
?m_CriticalSection@WaLicense@@0Vrecursive_mutex@std@@A
?m_FailedConnectionTimestamp@WaHttp@@0_JA
?m_Gateways@WaThirdPartyGatewayHandle@@0V?$array@V?$vector@V?$shared_ptr@VWaThirdPartyGateway@@@std@@V?$allocator@V?$shared_ptr@VWaThirdPartyGateway@@@std@@@2@@std@@$02@std@@A
?m_Handler@WaConfigurationsBase@@0PAVWaIConfigurations@@A
?m_HandlerRefCount@WaConfigurationsBase@@0U?$atomic@J@std@@A
?m_Instance@WaComponentManager@@0U?$atomic@PAVWaComponentManager@@@std@@A
?m_Instance@WaConfigurations@@0U?$atomic@PAVWaConfigurations@@@std@@A
?m_Instance@WaCustomDetection@@0U?$atomic@PAVWaCustomDetection@@@std@@A
?m_Instance@WaDatabase@@0U?$atomic@PAVWaDatabase@@@std@@A
?m_Instance@WaDebugInfo@@0U?$atomic@PAVWaDebugInfo@@@std@@A
?m_Instance@WaEventManager@@0PAV1@A
?m_Instance@WaHttp@@0U?$atomic@PAVWaHttp@@@std@@A
?m_Instance@WaLicense@@0PAV1@A
?m_Instance@WaRevocationCheck@WaCertificate@@0U?$atomic@PAVWaRevocationCheck@WaCertificate@@@std@@A
?m_Instance@WaTaskManager@@0PAV1@A
?m_Lock@WaEventManager@@0Vrecursive_mutex@std@@A
?m_NamespaceKeys@WaCache@@0V?$array@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$05@std@@B
?m_NamespaceLocks@WaCache@@0V?$array@Vshared_timed_mutex@std@@$05@std@@A
?m_ReconnectTimeout@WaHttp@@0HA
?m_ReconnectTimeoutDefaultValue@WaHttp@@0HB
?m_ReconnectTimeoutLicensingFailure@WaHttp@@0HB
?m_SilentDuration@WaHttpLowLevel@@0V?$duration@_JU?$ratio@$00$00@std@@@chrono@std@@A
?m_VecSize@WaRegex@@0HB
?m_WaWmiThread@WaWmiThread@@1PAV1@A
?m_WorkerFn@WaPooledIO@@AAEHXZ
?m_critSect@WaSelfProtection@@1Vrecursive_mutex@std@@A
?m_cs@WaThirdPartyGatewayHandle@@0Vrecursive_mutex@std@@A
?m_instance@?$Singleton@VDiagnoseParamHandler@@@@0U?$atomic@PAV?$Singleton@VDiagnoseParamHandler@@@@@std@@A
?m_instance@?$Singleton@VEventRegistrationController@@@@0U?$atomic@PAV?$Singleton@VEventRegistrationController@@@@@std@@A
?m_instance@?$Singleton@VWaCache@@@@0U?$atomic@PAV?$Singleton@VWaCache@@@@@std@@A
?m_instance@?$Singleton@VWaCryptoApiWrapper@@@@0U?$atomic@PAV?$Singleton@VWaCryptoApiWrapper@@@@@std@@A
?m_instance@?$Singleton@VWaEndPointManager@@@@0U?$atomic@PAV?$Singleton@VWaEndPointManager@@@@@std@@A
?m_instance@?$Singleton@VWaEndpointRegistry@@@@0U?$atomic@PAV?$Singleton@VWaEndpointRegistry@@@@@std@@A
?m_instance@?$Singleton@VWaMemoryPoolManager@@@@0U?$atomic@PAV?$Singleton@VWaMemoryPoolManager@@@@@std@@A
?m_instance@?$Singleton@VWaNet@@@@0U?$atomic@PAV?$Singleton@VWaNet@@@@@std@@A
?m_instance@?$Singleton@VWaOSUtils@@@@0U?$atomic@PAV?$Singleton@VWaOSUtils@@@@@std@@A
?m_instance@?$Singleton@VWaRegistry@@@@0U?$atomic@PAV?$Singleton@VWaRegistry@@@@@std@@A
?m_instance@?$Singleton@VWaSecuredTempFile@@@@0U?$atomic@PAV?$Singleton@VWaSecuredTempFile@@@@@std@@A
?m_instance@?$Singleton@VWaServiceManager@@@@0U?$atomic@PAV?$Singleton@VWaServiceManager@@@@@std@@A
?m_instance@?$Singleton@VWaStringResourceManager@@@@0U?$atomic@PAV?$Singleton@VWaStringResourceManager@@@@@std@@A
?m_instance@?$Singleton@VWaWMIManager@@@@0U?$atomic@PAV?$Singleton@VWaWMIManager@@@@@std@@A
?m_instance@?$Singleton@VWaWinRM@@@@0U?$atomic@PAV?$Singleton@VWaWinRM@@@@@std@@A
?m_instance@?$Singleton@VWaWuaProgressReceiver@@@@0U?$atomic@PAV?$Singleton@VWaWuaProgressReceiver@@@@@std@@A
?markServiceAsOnDemand@WaServiceManager@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?mbcsToWstr@WaStringUtils@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@_N@Z
?mergeCustomDbToStagingDb@WaCustomDetection@@QAEHAAVWaJson@@ABH@Z
?mergeCustomDbToStagingDb@WaDatabase@@SAHXZ
?methodCall@WaComThread@@QAEHPB_WPAPA_W@Z
?methodCall@WaVirtualization@@SAHHPAPA_W@Z
?monitorV4Debug@WaDebugInfo@@AAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?moveFileOrDelete@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?normalize@WaConfigurations@@UBEHAAVWaJson@@@Z
?normalize@WaConfigurationsBase@@QBEHAAVWaJson@@@Z
?onRegChanged@WaEndpointRegistry@@QAEXPAUHKEY__@@@Z
?open@WaRegKey@@QAEHPAUHKEY__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?open@WaRegKey@@QAEHXZ
?openMessageBox@WaUtilsNotification@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?openMsiDatabaseReadOnly@MsiAPIWrapperImpl@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAK@Z
?openMsiView@MsiAPIWrapperImpl@@UBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KAAK@Z
?openWebpage@WaUtilsNotification@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?opswatEncryptedCryptoStringToString@WaSecureFile@@SAHABV?$shared_ptr@VIWaCryptoAES@@@std@@PBEJAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?opswatEncryptedStringToString@WaSecureFile@@SAHABV?$shared_ptr@VIWaCryptoAES@@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@1@Z
?paramToJsonType@WaValidator@@CA?AW4WaJsonType@@W4ParamType@Method@WaStaticDb@@@Z
?parent@WaCallTreeNode@@QBEPAV1@XZ
?parseConfig@WaConfigurations@@UBEHPB_WAAVWaJson@@AA_N2@Z
?parseConfig@WaConfigurationsBase@@QBEHPB_WAAVWaJson@@AA_N2@Z
?performDebugInitialization@WaDebugInfo@@AAEXABVWaJson@@@Z
?pop@WaCallTree@@UAEH_N@Z
?popChild@WaCallTreeNode@@QAEXXZ
?processClues@WaCustomDetection@@AAEHAAVWaJson@@0AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?processDetection@WaCustomDetection@@QAEHAAVWaJson@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?processErrorSensitiveInfo@WaCryptoUtils@@CAHAAVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@std@@W4CryptoOperation@1@@Z
?processProductDefinition@WaCustomDetection@@AAEHAAVWaJson@@0AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?propFormatersToJson@WaWMIManager@@AAE?AVWaJson@@ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@@2@@std@@@Z
?propsFormat@WaWMIManager@@AAE?AVWaJson@@ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@@2@@std@@V?$function@$$A6AHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@@Z@4@@Z
?publish@EventStreamImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVSerializable@@@Z
?pushFuncCall@WaCallTree@@UAEPAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@000@Z
?pushFuncCall@WaCallTreeDisabled@@UAEPAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@000@Z
?pushReturnValue@WaCallTree@@UAEPAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?pushReturnValue@WaCallTree@@UAEPAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0H0@Z
?pushReturnValue@WaCallTreeDisabled@@UAEPAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?pushReturnValue@WaCallTreeDisabled@@UAEPAVWaCallTreeNode@@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0H0@Z
?put@WaDatabase@@SAXABW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVWaJson@@_N@Z
?put@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV1@@Z
?put@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV1@@Z
?put@WaJson@@UAEXPB_W$$QAV1@@Z
?put@WaJson@@UAEXPB_WABV1@@Z
?put@WaJson@@UAEXV?$initializer_list@U?$pair@PB_WVWaJson@@@std@@@std@@@Z
?put@WaRegKey@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@K_N@Z
?query@WaRegistry@@QAEHW4WaRegistryLocation@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@@Z
?query@WaWMIManager@@QAEHPB_W0ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6A?AVWaJson@@ABV1@@Z@2@@std@@@2@@std@@AAVWaJson@@HH_N@Z
?query@WaWMIManager@@QAEHPB_W0ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAVWaJson@@HH_N@Z
?query@WaWinRM@@QAEHPB_W0ABVWaJson@@AAV2@@Z
?query@WaWmi@@UAEHPB_WAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAVWaJson@@@Z
?query@WaWmiThread@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@AAVWaJson@@@Z
?queryEventlog@WaOSUtils@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@ABH2@Z
?queryKeyValueFromRegexPath@WaRegistry@@SAHABVWaRegKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@VWaRegKey@@V?$allocator@VWaRegKey@@@std@@@4@@Z
?queryMsiProductInfo@WaMsiUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVWaJson@@@Z
?queryValueFromRegistry@WaRegistry@@SAHABQAUHKEY__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABK1AAV34@@Z
?rand@WaCryptoUtils@@SAHAAH@Z
?rand@WaCryptoUtils@@SAHHHAAH@Z
?randString@WaCryptoUtils@@SAHHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?reInit@WaComThread@@QAEHXZ
?read@RandomAccessFileReader@@QBEHJIAAV?$vector@EV?$allocator@E@std@@@std@@@Z
?readArchitectureInfo@WaFileInfo@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@AAH@Z
?registerEvent@EventRegistrationController@@QAEHABQ6AXPA_W@ZAAH$$QAVWaJson@@@Z
?registerEvent@WaEventManager@@QAEHABVWaJson@@P6AXPA_W@ZAAH@Z
?registerForChanges@WscApiWrapperImpl@@UBEHPAPAXP6GKPAX@Z1@Z
?registerForProcessEvents@WaTaskManager@@UAEHABV?$function@$$A6AXABVWaJson@@@Z@std@@AAH@Z
?registerLoader@WaStringResourceManager@@KAXIABV?$function@$$A6AHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z@std@@@Z
?registerModule@WaSelfProtection@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?registerNotifier@WaRegistry@@QAEHXZ
?registerNotifier@WaServiceManager@@QAEHUWaServiceMgrParam@@@Z
?releaseDefaultConfigurationsHandler@WaConfigurationsBase@@SAHXZ
?reloadCacheData@WaCache@@QAEHABV?$set@W4WaCacheNamespace@@U?$less@W4WaCacheNamespace@@@std@@V?$allocator@W4WaCacheNamespace@@@3@@std@@@Z
?remove@WaCache@@QAEHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W@Z
?remove@WaDatabase@@SAXABW4WaDatabaseKey@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?remove@WaJson@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?remove@WaJson@@UAEXH@Z
?remove@WaJson@@UAEXPB_W@Z
?remove@WaSecuredTempFile@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?removeClue@ProcessMonitor@@UAEHABVSerializable@@@Z
?removeClue@RegistryMonitor@@UAEHABVSerializable@@@Z
?removeClue@ServiceMonitor@@UAEHABVSerializable@@@Z
?removeClue@WindowsEventMonitor@@UAEHABVSerializable@@@Z
?removeClue@WmiMonitor@@UAEHABVSerializable@@@Z
?removeClue@WscMonitor@@UAEHABVSerializable@@@Z
?removeForeignKeys@WaConfigurations@@UBEHAAVWaJson@@@Z
?removeForeignKeys@WaConfigurationsBase@@QBEHAAVWaJson@@@Z
?removeFromMap@WaEndpointRegistry@@QAEXPAUHKEY__@@@Z
?removeManagedCacheFile@WaCache@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?removeMotw@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?removeProcess@WaTaskManager@@QAEHABHAAUWaRunningProcess@@@Z
?removeRecursive@WaJson@@UAEXPB_W@Z
?removeThreadStack@WaCallTree@@SAXABVid@thread@std@@@Z
?renew@WaLicense@@QAEHXZ
?replaceAll@WaStringUtils@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@1@Z
?replaceChars@WaStringUtils@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@_W@Z
?reset@WaDebugInfo@@QAEXXZ
?reset@WaLabelManager@@SAHH@Z
?result@WaCallTreeNode@@QAEXH@Z
?result@WaCallTreeNode@@QBEHXZ
?retrieveAndUpdateLicenseFile@WaLicense@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?retrieveConfigsFromDatFile@WaDebugInfo@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?retrieveConfigsFromSetup@WaDebugInfo@@AAEXABVWaJson@@@Z
?revertFsRedirection@WaFileUtils@@SAHAAPAX@Z
?revertImpersonation@WaOSUtils@@QAEHXZ
?sCS@WaCallTree@@1Vrecursive_mutex@std@@A
?sTrees@WaCallTree@@1PAV?$map@Vid@thread@std@@PAVWaCallTree@@U?$less@Vid@thread@std@@@3@V?$allocator@U?$pair@$$CBVid@thread@std@@PAVWaCallTree@@@std@@@3@@std@@A
?saveCacheFile@WaCache@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00ABV?$shared_ptr@VIWaCryptoAES@@@3@_N2@Z
?saveCacheFile@WaCache@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABVWaJson@@ABV?$shared_ptr@VIWaCryptoAES@@@3@_N3@Z
?saveSynchronous@WaDatabase@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?secureCOMProxy@WaComUtils@@SAHPAUIUnknown@@_N@Z
?secureDeleteFileAndEmptyDirectory@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?sendFileToHost@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?sendNotification@WaUtilsNotification@@SAHPA_W0@Z
?set@WaLabelManager@@SAHHABVWaJson@@@Z
?set@WaRegKey@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBEABK2@Z
?setAccess@WaRegKey@@QAEXK@Z
?setAddInstallDateToResults@WaDetectionEngine@@QAEX_N@Z
?setAddInstallDirsToResults@WaDetectionEngine@@QAEX_N@Z
?setAddMethodsToResults@WaDetectionEngine@@QAEX_N@Z
?setCallbackSink@WaPooledIO@@QAEXPAUIWaAsyncIO@@@Z
?setCollectionProperties@WaCache@@SAHABW4WaCacheNamespace@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABUWaCacheProps@@@Z
?setComponentAllocation@WaComponentManager@@QAEHPA_WAAPAVWaExternalComponent@@@Z
?setCurrentMethodId@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@H@WaDbgCallTracker@@@std@@H@Z
?setCurrentSignatureId@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@H@WaDbgCallTracker@@@std@@H@Z
?setEnabled@WaRevocationCheckUtilsLocal@WaCertificate@@SAX_N@Z
?setEventPreLaunch@WaEventManager@@QAEXABW4WaEventType@1@$$QAV?$function@$$A6AHP6AXPA_W@ZHVWaJson@@@Z@std@@@Z
?setEventPreStop@WaEventManager@@QAEXABW4WaEventType@1@$$QAV?$function@$$A6AHH@Z@std@@@Z
?setEventSink@WaEventManager@@QAEXABW4WaEventType@1@$$QAV?$function@$$A6AHP6AXPA_W@ZV?$shared_ptr@VWaSignalLock@@@std@@HVWaJson@@@Z@std@@@Z
?setExporter@WaEmbeddedResource@@QAEXABV?$function@$$A6AHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z@std@@@Z
?setIntegrityLevel@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?setInvokeOutput@WaValidator@@SAH_K_JHHHABVWaJson@@AAV2@@Z
?setKey@WaRegKey@@QAEXPAUHKEY__@@@Z
?setLibrariesToSearch@WaEmbeddedResource@@QAEXABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?setLicenseToken@WaHttp@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setManagedFunctPtr@WaDebugInfo@@QAEXPBXH@Z
?setManagedFunctPtr@WaWinRM@@QAEXPBXH@Z
?setModuleOutput@WaApiUtils@@YAH_KABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_WHAAVWaJson@@@Z
?setObjectsPerPool@WaMemoryPoolManager@@QAEXI@Z
?setOptions@WaConfigurations@@UAEHPB_W@Z
?setOptions@WaConfigurationsBase@@QAEHPB_W@Z
?setPath@WaRegKey@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setProcessor@WaEmbeddedResource@@QAEXABV?$function@$$A6AHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z@std@@@Z
?setProductDigitalSignatureVerification@WaDetectionEngine@@QAEX_N@Z
?setSecurityToken@WaExternalComponent@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setSetupOutput@WaValidator@@SAH_KABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HABVWaJson@@AAV4@@Z
?setShowBundleInfo@WaDetectionEngine@@QAEXAB_N@Z
?setShowUninstallHive@WaDetectionEngine@@QAEXAB_N@Z
?setSingleThreaded@WaDetectionEngine@@QAEX_N@Z
?setStandardHeader@WaHttpLowLevel@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setVersionStamp@WaHttp@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setWinAPIWrapper@WaMsiUtils@@SAXABV?$shared_ptr@VMsiAPIWrapper@@@std@@@Z
?set_blocking_mode@WaNet@@AAE_NABH_N@Z
?setup@WaExternalComponent@@QAEHPB_WAAVWaJson@@@Z
?setupCall@WaDebugInfo@@QAE?AV?$shared_ptr@U?$Scope@_N@WaDbgCallTracker@@@std@@PB_W@Z
?setupNotificationQuery@WaWmi@@UAEHPB_WPAUIWbemObjectSink@@@Z
?shellExecute@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0HAAKAAV23@H_N@Z
?shellExecute@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0HAAKAAV23@H_N0@Z
?shellExecuteAsUser@WaProcessUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0HAAKAAV23@H_N30@Z
?size@WaJson@@UBEIXZ
?sortBySDKTimestamp@WaComponentManager@@SAXAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@_N@Z
?split@WaStringUtils@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_WAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@_N@Z
?splitExpressionFact@WaEvaluator@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAW4WaDatabaseKey@@AAV23@@Z
?startConnect@WTSConnection@WaEndPointManager@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?startTaskManager@WaTaskManager@@QAEHUWaTaskMgrParam@@@Z
?stopTaskManager@WaTaskManager@@QAEHXZ
?stringToEncryptedString@WaSecureFile@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?stringToOpswatEncryptedCryptoString@WaSecureFile@@SAHABV?$shared_ptr@VIWaCryptoAES@@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@AAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@3@@Z
?stringToOpswatEncryptedString@WaSecureFile@@SAHABV?$shared_ptr@VIWaCryptoAES@@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@1@Z
?stringToSecureFile@WaSecureFile@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0V23@@Z
?stringToSecureString@WaSecureFile@@SAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
?stringToSecureString@WaSecureFile@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?subcribe@WaWinRM@@QAEHPB_W0ABVWaJson@@HHHAAV2@@Z
?subcribeAsync@WaWinRM@@QAEHPB_W0ABVWaJson@@AAV?$function@$$A6AXHABVWaJson@@H@Z@std@@H@Z
?subscribe@EventStreamImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$function@$$A6AXABVSerializable@@@Z@3@AAH@Z
?subscribe@ServiceLifecycleMonitorImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6AXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4EventType@ServiceLifecycleMonitor@@@Z@3@AA_KI@Z
?subscribe@WmiInstanceOpEventMonitorImpl@@UAEHABUSubscriber@WmiInstanceOpEventMonitor@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?switchToOfflineMode@WaDatabase@@SAXXZ
?switchToOnlineMode@WaDatabase@@QAEHXZ
?systemTimeToEpoch@WaTime@@YGHABU_SYSTEMTIME@@AAH@Z
?teardown@WaExternalComponent@@QBEHXZ
?teardownCall@WaDebugInfo@@QAEXXZ
?terminateProcess@WaEndPointManager@@QAEHABH@Z
?terminateProcess@WaTaskManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_NH@Z
?terminateProcess@WaTaskManager@@QAEHH_NH@Z
?terminateProcessById@WaProcessUtils@@SAHHAA_N@Z
?threadFunc@WaComThread@@KGKPAX@Z
?timeStringToEpoch@WaTime@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?timeStringToEpochTime@WaTime@@YGHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAH@Z
?toCharPointer@WaJson@@UBEXPAPA_W@Z
?toJson@WaFuncCallNode@@UBEXAAVWaJson@@_N@Z
?toJson@WaReturnNode@@UBEXAAVWaJson@@_N@Z
?toJson@WaRootNode@@UBEXAAVWaJson@@_N@Z
?toLocalPath@WaEndPointManager@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?toPrettyCharPointer@WaJson@@UBEXPAPA_W@Z
?toPrettyString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toRemotePath@WaEndPointManager@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?toRemoteTempFile@WaEndPointManager@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?toString@WaJson@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?trim@WaStringUtils@@YAAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?trimLeft@WaStringUtils@@YAAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?trimRight@WaStringUtils@@YAAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV23@@Z
?unInit@WaComThread@@QAEHXZ
?unInit@WaLicense@@QAEXXZ
?unInitWorker@WaWmiThread@@MAEHXZ
?unRegisterModule@WaSelfProtection@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?unregisterEvent@EventRegistrationController@@QAEHABH@Z
?unregisterEvent@WaEventManager@@QAEHABH@Z
?unregisterForChanges@WscApiWrapperImpl@@UBEHPAX@Z
?unregisterForProcessEvents@WaTaskManager@@UAEHH@Z
?unregisterNotifier@WaRegistry@@QAEXXZ
?unregisterNotifier@WaServiceManager@@QAEXXZ
?unsubscribe@EventStreamImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABH@Z
?unsubscribe@ServiceLifecycleMonitorImpl@@UAEH_K@Z
?unsubscribe@WmiInstanceOpEventMonitorImpl@@UAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?update@WaLicense@@AAEHXZ
?updateLicenseFile@WaApiUtils@@YAH_N0PAVWaJson@@@Z
?uriDecode@WaStringUtils@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?uriEncode@WaStringUtils@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?val@WaJson@@UBEHAAH@Z
?val@WaJson@@UBEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?val@WaJson@@UBEHAAV?$vector@VWaJson@@V?$wa_allocator@VWaJson@@@@@std@@@Z
?val@WaJson@@UBEHAA_J@Z
?val@WaJson@@UBEHAA_N@Z
?validateArrayObj@WaValidator@@CAHAAVWaJson@@ABV?$vector@Uparam@Method@WaStaticDb@@V?$allocator@Uparam@Method@WaStaticDb@@@std@@@std@@HAAI@Z
?validateInvokeInput@WaValidator@@SAHAAVWaJson@@AAH@Z
?validateInvokeOutput@WaValidator@@SAHAAVWaJson@@@Z
?validateParam@WaValidator@@CAHAAVWaJson@@ABUparam@Method@WaStaticDb@@PB_WHI0@Z
?validateParams@WaValidator@@SAHAAVWaJson@@ABV?$vector@Uparam@Method@WaStaticDb@@V?$allocator@Uparam@Method@WaStaticDb@@@std@@@std@@HI@Z
?variantTimeToEpoch@WaTime@@YGHABNAAH@Z
?variantToJson@WaComUtils@@SAHABUtagVARIANT@@AAVWaJson@@@Z
?verifyFileAuthenticity@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AA_NAAV23@AB_N@Z
?verifyMainComponentDigitalSignature@WaProductUtils@@YAHABHAAVWaJson@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AB_N@Z
?wCaseCmp@WaStringUtils@@YAHPB_W0@Z
?waitForCallbacks@WaPooledIO@@QAEXXZ
?waitForProcessExit@WaProcessUtils@@SAHABH@Z
?wajsonToInt64@WaComUtils@@SA_JABVWaJson@@@Z
?writeBytesToFile@WaFileUtils@@SAHAAPAU_iobuf@@ABV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@@Z
?writeFileContentsToFile@WaDebugInfo@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4LOG_LEVEL@1@ABV?$set@W4LOG_COMPONENT@WaDebugInfo@@U?$less@W4LOG_COMPONENT@WaDebugInfo@@@std@@V?$allocator@W4LOG_COMPONENT@WaDebugInfo@@@4@@3@@Z
?writeLicenseToRegistry@WaLicense@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?writeManagedLog@WaDebugInfo@@QAEHPB_W@Z
?writeToFile@WaDebugInfo@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_NW4LOG_LEVEL@1@V?$set@W4LOG_COMPONENT@WaDebugInfo@@U?$less@W4LOG_COMPONENT@WaDebugInfo@@@std@@V?$allocator@W4LOG_COMPONENT@WaDebugInfo@@@4@@3@11@Z
?writeToFile@WaFileUtils@@SAHAAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?writeToFile@WaFileUtils@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_N@Z
_dbg_set_managed_funct_ptr@8
_winrm_set_managed_funct_ptr@8
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
939KB
Virtual Size
938KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
60KB
Virtual Size
340KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
193B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
145KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=24, id=259, version=24237,
count=34, id=260, version=24237,
count=2, id=262, version=27412,
count=127, id=261, version=24237,
count=18, id=259, version=27412,
count=193, id=261, version=27412,
count=30, id=260, version=27412,
count=2, id=257, version=24247,
count=47, id=257, version=27412,
count=388, id=1, productName=Unmarked objects,
count=21, id=260, version=24247,
count=115, id=265, version=24247,
count=1, id=256, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
wa_3rd_party_host_32.exe
- IMPHASH 83c29741528b924ea746ff65958d9c15
- SHA256 ed679715cc10b66fde4514a1a020e94f3f51ad8dd996e568fdc91ff08d117994
- MD5 2362d050c0c110af210928365950c42c
- SHA1 95c2deec9113c7dcf54f6853874650db3a6ccf4c
- SHA512 2db971115dff9cbb3be36127d35e06b11575b1eefd09cb9d25d571d5f3452cadd0c83b96e8f4f35f5e36a46b31671609462aec40d6dd7d48d92c3b1f096ad834
- SSDEEP 49152:QU2ABqwuoOrL9MUcDGD0Zpkv6Eo/aZ6umtI3ZhuU8xU39FOZ+7XXk+:QcxuoOpsume3Zhv39L
- TLSH T140B59D13F7E38131FCE701B1D57DBAAA8C287661072195CB92D05B2E29735C36A36B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9d:bd:40:46:28:8b:f7:cf:71:ee:24:26:c6:16:a9:91:5c:76:30:e8:ec:0e:f7:1f:55:01:60:a6:14:42:e5:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Chains
Dec 16, 2025
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0d:ad:d7:6d:c4:42:db:11:4e:a3:74:8e:94:b2:88:d8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2024 - May 26, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
1380704
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
wa_3rd_party_host_32.pdb
kernel32
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
InitializeCriticalSectionEx
GetTickCount64
DecodePointer
SizeofResource
GetModuleHandleExW
GetModuleFileNameW
LocalAlloc
FreeResource
LockResource
LoadResource
FindResourceW
Sleep
LoadLibraryExW
GetWindowsDirectoryW
GetEnvironmentStringsW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindFirstFileW
FindNextFileW
FindClose
FileTimeToSystemTime
GetFileTime
GetVolumeNameForVolumeMountPointW
GetLogicalDriveStringsW
GetDriveTypeW
DeviceIoControl
GetSystemWindowsDirectoryW
lstrcpyW
CreateEventW
SetEvent
WaitForMultipleObjects
CreateNamedPipeW
OpenProcess
CreateThread
GetOverlappedResult
ConnectNamedPipe
GetExitCodeProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
DisconnectNamedPipe
CreateDirectoryW
GetCurrentProcess
CreateProcessW
CopyFileW
SetLastError
lstrcpynW
GetLocaleInfoW
TerminateProcess
GetTempFileNameW
ExpandEnvironmentStringsW
GetVersionExW
GetTimeZoneInformation
GetSystemDirectoryW
ReleaseMutex
CreateMutexA
VirtualAlloc
VirtualFree
VirtualQuery
WriteConsoleW
ReadConsoleW
SetStdHandle
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetCurrentThreadId
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
AreFileApisANSI
GetFullPathNameA
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
EnterCriticalSection
HeapFree
HeapCreate
TryEnterCriticalSection
ReadFile
SetErrorMode
FreeEnvironmentStringsW
FindFirstFileExW
SetEnvironmentVariableW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetOEMCP
GetACP
IsValidCodePage
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetCommandLineW
GetCommandLineA
GetStdHandle
ExitProcess
ExitThread
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
GetModuleHandleA
FreeLibraryAndExitThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
GetStringTypeW
DuplicateHandle
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceFrequency
EncodePointer
QueueUserWorkItem
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetCPInfo
CreateTimerQueue
GetThreadTimes
LoadLibraryExA
user32
PostThreadMessageW
wsprintfW
advapi32
OpenSCManagerW
EqualSid
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
QueryServiceStatus
OpenServiceW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
CloseServiceHandle
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
AccessCheck
GetFileSecurityW
DuplicateToken
MapGenericMask
LookupPrivilegeValueW
AdjustTokenPrivileges
RegSaveKeyW
OpenProcessToken
ole32
CoSetProxyBlanket
CoUninitialize
CoInitializeEx
CoCreateInstance
IIDFromString
CLSIDFromString
CoAddRefServerProcess
CoReleaseServerProcess
OleRun
oleaut32
GetErrorInfo
VariantTimeToSystemTime
VariantClear
SafeArrayCreateVector
SafeArrayCreate
SafeArrayLock
VariantCopy
SafeArrayPutElement
SysAllocString
SysFreeString
SafeArrayGetDim
SysStringLen
SysAllocStringLen
SafeArrayDestroy
VariantInit
SafeArrayGetElement
SafeArrayUnlock
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
shlwapi
StrStrIW
wininet
HttpSendRequestW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetReadFile
HttpOpenRequestW
_QHChangeOnAccessScanState@8
_QHEnableOnAccessScan@8
_QHFreeThreatHistoryListA@8
_QHFreeThreatHistoryListW@8
_QHGetAppLanguageA@16
_QHGetAppLanguageW@16
_QHGetDigitalCertSignerA@12
_QHGetDigitalCertSignerW@12
_QHGetEngineVersionA@12
_QHGetEngineVersionW@12
_QHGetExpDate@8
_QHGetLastFullScanTime@8
_QHGetProductInstallDirA@12
_QHGetProductInstallDirW@12
_QHGetSASQHStatus@8
_QHGetSigDatabaseDirA@12
_QHGetSigDatabaseDirW@12
_QHGetSigDatabaseTime@8
_QHGetSigDatabaseVersionA@12
_QHGetSigDatabaseVersionW@12
_QHGetThreatHistoryA@8
_QHGetThreatHistoryW@8
_QHInitUpdate@4
_QHInitiateFileScanA@8
_QHInitiateFileScanW@8
_QHInitiateFolderScanA@8
_QHInitiateFolderScanW@8
_QHInitiateFullScan@4
_QHIsAVInstalled@4
_QHIsFullScanRunning@4
_QHIsLicenseExpired@4
_QHIsOnAccessScanEnabled@4
_QHIsUpdateInProgress@4
_QHOpenScanner@4
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
440KB
Virtual Size
440KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=190, id=261, version=27412,
count=19, id=259, version=27412,
count=3, id=199, version=41118,
count=25, id=259, version=24237,
count=37, id=260, version=24237,
count=138, id=261, version=24237,
count=2, id=262, version=27412,
count=25, id=260, version=27412,
count=17, id=257, version=27412,
count=288, id=1, productName=Unmarked objects,
count=21, id=260, version=24247,
count=83, id=264, version=24247,
count=1, id=256, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
wa_3rd_party_host_64.exe
- IMPHASH 57d3a8e28e26c45e7cd42483a201c4b0
- SHA256 03090c0bbd585b74e3e6fc6c631ea2627a8243230fb33166d4d05f35305255be
- MD5 f1e0be6e6b8dab06dfb57f47c7ed2185
- SHA1 a46b4a63ae17e97341f9421520347e2ec2fe030a
- SHA512 bed2abefb56c0c7c34b32af7bdee8131b263a126826a12a79ed2012e136b84f1b898b1ab283faacd53daefd8c239176271302e0e5aa8b173e2ae16fa8dcc5536
- SSDEEP 49152:+tjmrbS1OcXb7euJKUYMtctiUShxNOF+OHo25jMU:om6McLiuJKP+OI4L
- TLSH T1DCE58D0BB6E901E8D9B7C278C566A507E37138451731ABDF1260C76E2F33AE14E7A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:6b:4b:b2:31:7c:7c:7f:a1:fc:0b:73:0d:a4:d3:7b:a8:c7:e5:be:e1:d1:a1:60:bd:c0:ab:3e:85:99:38:a5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Chains
Dec 16, 2025
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=OPSWAT\, Inc.,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0d:ad:d7:6d:c4:42:db:11:4e:a3:74:8e:94:b2:88:d8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2024 - May 26, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
1606704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wa_3rd_party_host_64.pdb
kernel32
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
InitializeCriticalSectionEx
GetTickCount64
DecodePointer
SizeofResource
GetModuleHandleExW
GetModuleFileNameW
LocalAlloc
FreeResource
LockResource
LoadResource
FindResourceW
Sleep
LoadLibraryExW
GetWindowsDirectoryW
GetEnvironmentStringsW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindFirstFileW
FindNextFileW
FindClose
FileTimeToSystemTime
GetFileTime
GetVolumeNameForVolumeMountPointW
GetLogicalDriveStringsW
GetDriveTypeW
DeviceIoControl
GetSystemWindowsDirectoryW
lstrcpyW
CreateEventW
SetEvent
WaitForMultipleObjects
CreateNamedPipeW
OpenProcess
CreateThread
GetOverlappedResult
ConnectNamedPipe
GetExitCodeProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
DisconnectNamedPipe
CreateDirectoryW
GetCurrentProcess
CreateProcessW
CopyFileW
SetLastError
lstrcpynW
GetLocaleInfoW
TerminateProcess
GetTempFileNameW
ExpandEnvironmentStringsW
GetVersionExW
GetTimeZoneInformation
GetSystemDirectoryW
ReleaseMutex
CreateMutexA
VirtualAlloc
VirtualFree
VirtualQuery
WriteConsoleW
ReadConsoleW
SetStdHandle
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetCurrentThreadId
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
AreFileApisANSI
InitializeCriticalSection
LeaveCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
EnterCriticalSection
HeapFree
HeapCreate
TryEnterCriticalSection
ReadFile
SetErrorMode
FreeEnvironmentStringsW
FindFirstFileExW
SetEnvironmentVariableW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetOEMCP
GetACP
IsValidCodePage
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetCommandLineW
GetCommandLineA
GetStdHandle
ExitProcess
ExitThread
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
GetModuleHandleA
FreeLibraryAndExitThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
GetStringTypeW
DuplicateHandle
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceFrequency
RtlPcToFileHeader
EncodePointer
QueueUserWorkItem
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetCPInfo
CreateTimerQueue
GetThreadTimes
LoadLibraryExA
user32
PostThreadMessageW
wsprintfW
advapi32
RegQueryValueExW
EqualSid
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
QueryServiceStatus
OpenServiceW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
CloseServiceHandle
OpenSCManagerW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
AccessCheck
GetFileSecurityW
DuplicateToken
MapGenericMask
LookupPrivilegeValueW
AdjustTokenPrivileges
RegSaveKeyW
OpenProcessToken
ole32
CoSetProxyBlanket
CoUninitialize
CoInitializeEx
CoCreateInstance
IIDFromString
CLSIDFromString
CoAddRefServerProcess
CoReleaseServerProcess
OleRun
oleaut32
GetErrorInfo
VariantTimeToSystemTime
VariantClear
SafeArrayCreateVector
SafeArrayCreate
SafeArrayLock
VariantCopy
SafeArrayPutElement
SysAllocString
SysFreeString
SafeArrayGetDim
SysStringLen
SysAllocStringLen
SafeArrayDestroy
VariantInit
SafeArrayGetElement
SafeArrayUnlock
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
shlwapi
StrStrIW
wininet
HttpSendRequestW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetReadFile
HttpOpenRequestW
QHChangeOnAccessScanState
QHEnableOnAccessScan
QHFreeThreatHistoryListA
QHFreeThreatHistoryListW
QHGetAppLanguageA
QHGetAppLanguageW
QHGetDigitalCertSignerA
QHGetDigitalCertSignerW
QHGetEngineVersionA
QHGetEngineVersionW
QHGetExpDate
QHGetLastFullScanTime
QHGetProductInstallDirA
QHGetProductInstallDirW
QHGetSASQHStatus
QHGetSigDatabaseDirA
QHGetSigDatabaseDirW
QHGetSigDatabaseTime
QHGetSigDatabaseVersionA
QHGetSigDatabaseVersionW
QHGetThreatHistoryA
QHGetThreatHistoryW
QHInitUpdate
QHInitiateFileScanA
QHInitiateFileScanW
QHInitiateFolderScanA
QHInitiateFolderScanW
QHInitiateFullScan
QHIsAVInstalled
QHIsFullScanRunning
QHIsLicenseExpired
QHIsOnAccessScanEnabled
QHIsUpdateInProgress
QHOpenScanner
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
696KB
Virtual Size
695KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
43KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gehcont
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=27412,
count=190, id=261, version=27412,
count=3, id=199, version=41118,
count=9, id=259, version=24237,
count=40, id=260, version=24237,
count=137, id=261, version=24237,
count=2, id=262, version=27412,
count=24, id=260, version=27412,
count=17, id=257, version=27412,
count=292, id=1, productName=Unmarked objects,
count=21, id=260, version=24247,
count=83, id=264, version=24247,
count=1, id=256, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
big_ip_client_2026/F5 VPN/F5_TMP/cachecleaner.cab
- SHA256 e32e64233b98fb418a384176cf119c216e5b5d871d85fef705b929b85787d564
- MD5 e3139155441634607a4db071afe61ac4
- SHA1 2ce71f922f564e06fe66ea5adebe5ce384eb4759
- SHA512 b843b74a2883286a61df86aed502ba907490b36190034036f0a28cf4311c37abbb0b3ed82b9c54b82b98033640ba88e61d226dfb9abf55676528e782de665c1a
- SSDEEP 6144:XaSalC6ucLcY0tbk6h1sOPF6yEHXc0xIxkPOQXfA+TraGj:XaPcYcbZSp3HaxvRErz
- TLSH T1C4442361CF412C60B6778770294CE11B7EFA4BAA27892A02C298653F57CD312A7C75CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3796d5740b73722dd472a01eebb6aeb41875310d5afd1145b0aef142cf3e76ff
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
cachecleaner.dll
- IMPHASH c77679ad04666637a3bc70e30ab664a8
- SHA256 339a9ed50aa6e7c73ee3522a510839c03d0050e75073adddbfed1c242e9ea025
- MD5 9b5cf82b2f5f53a341e831c2017614f2
- SHA1 9cd4f51032519a70c5236ed28094c3bb38ae97c9
- SHA512 a1d204f30387039b22f8059081130eba89db2068aaf987a63aed25484d8c8ee578d37c99a70191309f0d30cd46946464395e58b95f929b552c7e2bec3f0469c4
- SSDEEP 12288:P/YaBkPoBe1d/bqw2bnilXuJ5z7mRmk4rUj3ogu7:5NBe1YPGXuJgRxFu7
- TLSH T1C3B47B21611EC032D6AF00B8591C877F927CAE70476AA4C363D457BB6EB42D3AB34E57
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
39:f1:4b:5b:40:c2:21:ee:3b:f4:7a:a6:3e:88:71:1c:4e:59:39:5c:b3:01:77:78:0d:95:04:a5:41:4c:37:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
247296
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\cache\out\Release\f5cache.pdb
shlwapi
SHDeleteKeyA
kernel32
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
GetCurrentThread
SetThreadPriority
GetThreadPriority
CreateProcessA
GetSystemTime
lstrcmpA
lstrcpyA
lstrcatA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
CompareStringA
SetCurrentDirectoryA
CreateFileA
GetFileAttributesA
SetErrorMode
GetCurrentDirectoryA
CreateDirectoryA
CreateFileW
FlushFileBuffers
GetFileSize
ReadFile
SetFileAttributesA
WriteFile
GetTempPathA
GetTempFileNameA
QueryPerformanceCounter
ResetEvent
ReleaseMutex
CreateMutexA
Sleep
GetCurrentProcessId
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemDirectoryA
GetWindowsDirectoryA
lstrcmpiA
VirtualAlloc
VirtualFree
MapViewOfFile
UnmapViewOfFile
LocalAlloc
LocalFree
GetShortPathNameA
FormatMessageA
RemoveDirectoryA
CreateFileMappingA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
CopyFileA
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
TerminateProcess
MulDiv
LoadLibraryA
SizeofResource
LoadResource
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
VirtualProtect
VirtualQuery
CreateThread
ExitThread
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
TerminateThread
GetCurrentThreadId
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetLastError
FreeLibraryAndExitThread
GetModuleHandleExW
SetEndOfFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetFileType
ExitProcess
HeapSize
FindNextFileA
GetLastError
FindFirstFileA
FindClose
DeleteFileA
GetTickCount
GetCurrentProcess
OpenEventA
CreateEventA
SetEvent
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
lstrlenA
RaiseException
CloseHandle
DecodePointer
EncodePointer
LCMapStringW
GetACP
GetStdHandle
GetStringTypeW
SetStdHandle
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetVersionExA
WriteConsoleW
user32
GetForegroundWindow
MsgWaitForMultipleObjects
FindWindowA
SendMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
wsprintfA
GetClassNameA
EnumChildWindows
SetTimer
LoadCursorA
GetParent
SetWindowLongA
GetWindowLongA
EqualRect
OffsetRect
UnionRect
IntersectRect
GetClientRect
InvalidateRect
SetWindowRgn
EndPaint
BeginPaint
ReleaseDC
GetDC
KillTimer
GetKeyState
GetFocus
CharNextA
SetWindowPos
ShowWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
UnregisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
PtInRect
RegisterWindowMessageA
SetFocus
gdi32
SetWindowOrgEx
SetViewportOrgEx
LPtoDP
TextOutA
SetTextAlign
SetMapMode
SaveDC
RestoreDC
Rectangle
GetDeviceCaps
DeleteDC
CreateRectRgnIndirect
CreateDCA
advapi32
RegGetKeySecurity
RegEnumValueA
RegEnumKeyA
GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
GetLengthSid
FreeSid
CopySid
AllocateAndInitializeSid
AddAce
OpenProcessToken
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegQueryInfoKeyA
RegQueryValueExA
RegSetKeySecurity
RegOpenKeyA
ole32
StringFromCLSID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CreateOleAdviseHolder
OleRegGetMiscStatus
OleRegEnumVerbs
CoCreateInstance
CoInitialize
OleRegGetUserType
oleaut32
SysFreeString
SysStringLen
VariantInit
VariantClear
VarUI4FromStr
SysAllocStringLen
LoadRegTypeLi
OleCreatePropertyFrame
VariantChangeType
VarBstrCat
VarBstrCmp
LoadTypeLi
SysAllocString
wininet
HttpAddRequestHeadersA
InternetSetStatusCallback
InternetQueryDataAvailable
InternetReadFile
DeleteUrlCacheEntry
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetErrorDlg
InternetGetCookieA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA
InternetQueryOptionA
InternetCrackUrlA
InternetCloseHandle
InternetOpenA
InternetConnectA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Run
Name
.text
Size
343KB
Virtual Size
342KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=176, id=261, version=24610,
count=16, id=260, version=29804,
count=20, id=259, version=29804,
count=47, id=261, version=29804,
count=5, id=262, version=24610,
count=29, id=257, version=24610,
count=401, id=1, productName=Unmarked objects,
count=19, id=260, version=24610,
count=7, id=261, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
cachecleaner.exe
- IMPHASH 560c32d57fb2102ca5e0767ccfc657d1
- SHA256 e701ba67e13463e86aac10d083217f3207269bc91599dbe1d865a4e6678d9192
- MD5 34eb55c2e13fd90bc9954d443db98408
- SHA1 97233796f1893e351d04abab6d244fdecaf7169e
- SHA512 044d3054a7e5835f1e0820bd823384fe30cacb568f8d9afcfa6dec1ca5433b426fdf0596569c1569deb4955bbd28347c369076d83fac0fedd409f95ad4a4ad0f
- SSDEEP 1536:Ooh8bMhbGyRUG765iza+avuYwgFY83Mj6X02iJE6j+sWXcd4VNUYXkqYKxnZDS3P:O1MhbGyF765X+aBwgFY8S65i34VNdkqw
- TLSH T183834B03B5D1C471E8B30A3118B0EAB1993FBD211F558DEB279842790F751D19E3AE7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
71:a7:5d:1b:1f:50:7d:ac:78:da:31:d6:9e:a4:1e:fe:25:a8:89:b6:7e:6c:5f:10:8e:4e:e8:1b:6b:61:fd:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
4704
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\cache\cachecleaner\out\Release\CacheCleaner.pdb
kernel32
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
CloseHandle
CreateFileW
WriteConsoleW
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=129, id=261, version=24610,
count=18, id=260, version=24610,
count=37, id=261, version=29804,
count=17, id=260, version=29804,
count=18, id=259, version=29804,
count=3, id=257, version=24610,
count=82, id=1, productName=Unmarked objects,
count=1, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
cachecleaner.inf
- SHA256 23f943876fd7d9cb78067786a1dfa0952aa4a91f46cd3274431b74c48550f94a
- MD5 d50d149275276b8b9ab55d5d95de04d1
- SHA1 1d4631c47e8beebbc53db192455ddd44f89be5a0
- SHA512 7f7959603549495bdb5dec27f7e90839965fc1caaa73492ba11b53f9550fbbd4dbd0c791db75a0c437121ffc2d2f9c71e7f864c246bba8a304dd8309e4178aa1
- TLSH T155F0E25E813E49F211408B70A28227D43E9752A89B466E9830C0E96F12A241FCB74EBE
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/F5 VPN/F5_TMP/f5InspectionHost.cab
- SHA256 6d9e02412a9e0e7f35afaf3be5afbae10d4caaf95e016a7a6f5fd0814560925a
- MD5 a84859f2a94b132abf9264a298bca453
- SHA1 8edd3039621cf23972f11f1f7a51536b3faeeb7b
- SHA512 48125e3e242f12b8bf82d457aaa4634ff7409c302b4421a792294f21447f2e87f8f766da91e77aa2fde14e3e8c8a07e0cc2c352d4278c8168dbaebda911c9997
- SSDEEP 24576:CaOyIP/e/eWFpP9uQ9B61QWUxUDkM/jEOaE3B0KCdS2igQwTvf8e3/:7zew1ugBpfxUD2oB0Fdi+0e
- TLSH T1044533A787810DB75818E113ECDD636EC6E88A803A3551C5E281F056CEA35FD3ACDBD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d47cde28acbc05bec91799abe20d31932343d2df23554fb98bd420d6d10961a8
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
f5InspectionHost.dll
- IMPHASH 1443a8a601f7c21fd69736e67cbf21cd
- SHA256 56cb68bf5900c3a557a3973ee6986f1b6bffd5d010c32e98a333f120dab9498d
- MD5 3b31ff2302f10a8ebc71edc7710525d9
- SHA1 8a6d0bf2ec4a37f38dd6bb0e6c5b7054a4797fa2
- SHA512 05ec9e0d476f4202384f74c4f1ab43edf57a4e2e77e5e8b51783d544ca14fbe49e6c01ef18cac9791258b59bde48ed62fc739b13ed1b43b86eb576421a72e882
- SSDEEP 24576:wwrqr2DBfDKky1wu5X/mpo3wuh7D4QQTzLi6QRcaHPHnJpMv1UFJRwJ5i7BrkaD:W9hF5RzvnJpFJSVm
- TLSH T157156C20798DC430F26E117859246B77E478B8735B3884D76288DABCAE705C1BB3AF57
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
44:1b:3b:2b:a9:3e:4a:be:47:a1:08:8f:8a:28:65:00:31:c4:8d:a2:c0:19:31:05:0d:32:3e:ef:ef:d7:b4:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
431856
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InspectionHost\out\Release\f5InspectionHost.pdb
urlmon
RegisterBindStatusCallback
CreateURLMoniker
CoInternetParseUrl
wininet
InternetErrorDlg
InternetSetCookieA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetStatusCallback
InternetSetOptionA
InternetQueryOptionA
InternetQueryDataAvailable
InternetReadFile
InternetCrackUrlA
InternetConnectA
InternetCloseHandle
InternetOpenA
setupapi
SetupDefaultQueueCallbackA
SetupInstallFromInfSectionA
SetupInitDefaultQueueCallbackEx
SetupInitDefaultQueueCallback
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupOpenInfFileA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
crypt32
CertFreeCertificateContext
CertCreateCertificateContext
CryptImportPublicKeyInfo
kernel32
SetFileTime
WriteFile
GetTempPathA
GetTempFileNameA
OutputDebugStringA
DecodePointer
CloseHandle
RaiseException
GetLastError
SetLastError
SetNamedPipeHandleState
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetExitCodeProcess
GetCurrentThread
GetCurrentThreadId
TerminateThread
CreateProcessA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
DosDateTimeToFileTime
FormatMessageA
lstrcmpA
lstrcpyW
lstrlenA
CreateFileW
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
CopyFileA
MoveFileExA
CallNamedPipeA
WaitNamedPipeA
VerifyVersionInfoW
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
EncodePointer
DisableThreadLibraryCalls
LoadLibraryExA
LoadResource
SizeofResource
MulDiv
lstrcmpiA
FindResourceA
IsDBCSLeadByte
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetFileType
VirtualProtect
VirtualQuery
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
ExitProcess
CompareStringW
LCMapStringW
SetFileAttributesA
CreateFileA
CreateDirectoryA
CompareFileTime
GetCurrentDirectoryA
SetCurrentDirectoryA
ExpandEnvironmentStringsA
VerSetConditionMask
RemoveDirectoryA
ReadFile
LocalFileTimeToFileTime
GetACP
GetStringTypeW
SetStdHandle
SetEndOfFile
VirtualFree
VirtualAlloc
IsDebuggerPresent
GetStdHandle
GetFileTime
GetFileSize
GetFileAttributesExA
GetFileAttributesA
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
GetComputerNameW
DeleteFileA
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
HeapSize
HeapReAlloc
GetCurrentDirectoryW
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetTimeZoneInformation
user32
MapWindowPoints
GetClassInfoExA
SendMessageA
LoadCursorA
SetParent
SetWindowLongA
GetWindowLongA
MessageBoxA
GetWindowRect
LoadIconA
MonitorFromWindow
GetMonitorInfoA
CallWindowProcA
IsChild
CharNextA
SetFocus
GetFocus
GetKeyState
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
GetParent
IntersectRect
GetClientRect
SetWindowTextA
GetWindow
GetDesktopWindow
GetForegroundWindow
MsgWaitForMultipleObjects
EndDialog
DialogBoxParamA
CreateDialogParamA
IsIconic
SetWindowPos
SetLayeredWindowAttributes
DestroyWindow
IsWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcA
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadStringA
UnionRect
InvalidateRect
OffsetRect
EqualRect
PtInRect
GetDlgItem
SendDlgItemMessageA
GetActiveWindow
SetForegroundWindow
ShowWindow
gdi32
SetMapMode
SaveDC
RestoreDC
Rectangle
SetTextAlign
DeleteDC
CreateRectRgnIndirect
CreateDCA
TextOutA
LPtoDP
SetViewportOrgEx
GetDeviceCaps
SetWindowOrgEx
advapi32
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
MapGenericMask
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
OpenProcessToken
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
CryptReleaseContext
CryptCreateHash
CryptHashData
CryptDestroyHash
ConvertStringSecurityDescriptorToSecurityDescriptorA
CryptAcquireContextA
CryptDestroyKey
CryptVerifySignatureA
RegQueryInfoKeyW
RegOpenKeyExA
ole32
StringFromGUID2
CoInitialize
CoGetObject
CreateStreamOnHGlobal
StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CreateOleAdviseHolder
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
CreateBindCtx
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
oleaut32
SysStringLen
SysAllocStringByteLen
SysAllocString
SysStringByteLen
VariantClear
SysFreeString
VariantInit
VariantCopy
VarBstrCat
OleCreatePropertyFrame
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
SysAllocStringLen
bcrypt
BCryptGenRandom
shlwapi
PathFileExistsA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Name
.text
Size
570KB
Virtual Size
569KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=181, id=261, version=24610,
count=17, id=260, version=29804,
count=20, id=259, version=29804,
count=47, id=261, version=29804,
count=19, id=260, version=24610,
count=12, id=262, version=24610,
count=29, id=257, version=24610,
count=398, id=1, productName=Unmarked objects,
count=6, id=261, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
f5InspectionHost.inf
- SHA256 b1c89e8782141830edae19068f9993d63ba9900f7129ccb6ab32faf8af496dc0
- MD5 30f7dcbe00457565a899787eb41b5694
- SHA1 450f770ef24c843fa28a9094a5f25d3cb7221558
- SHA512 7051d37739313179754dae8ef07778296a2e0e1a63d519022b972ca1e2b347452c6fce8466189955652130b0dda13661eb58d2f9988fecfdccaafb93a961a318
- TLSH T1BD01979CE11F87E105492BA4D1A223C0FBAB77BE9B0975183010751B08E6D0D6F158FE
- MD5 SHA1 SHA512 TLSH
f5PolicyServer.exe
- IMPHASH 74a8ad9867700aeaf70513681f408cc9
- SHA256 feb71f31105bd83f2f44e33a7b377310ae6430f897ff3e5e518fb2c0fb18d525
- MD5 dc30309abada2d8d4cefa6dc916c5572
- SHA1 71a9887d7cce9878128875c8d5d9ef4f8a244181
- SHA512 09b74869125dd53a9cae9344face7f1a088aec3c5b48e5cefcbd1e8721d731f3cd8f495512debf846e1432bd7c683f074e1b8a04c153df6f278de092cd5192af
- SSDEEP 24576:y95tSBfprPeQdRoeglIeD7FZlA8tSfaHCFrw47Y:y95tSBxHRoegl1D7FZl7Hirf8
- TLSH T119153A2171ED8532F67602715E39B7B7953EFCB21730F5CB5288C2282D689C26A31B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
40:9a:0a:06:4c:4b:df:d6:cb:1c:f3:f4:07:b9:18:93:0f:93:2d:cd:21:ff:ca:d6:7b:2b:b5:0d:b6:36:c9:f2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
479728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InspectionHost\PolicyServer\out\Release\f5PolicyServer.pdb
rpcrt4
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcStringFreeW
RpcBindingSetAuthInfoExW
NdrClientCall2
RpcBindingFree
kernel32
GetCurrentThreadId
TerminateThread
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GlobalFree
LocalAlloc
LocalFree
FormatMessageW
lstrcmpA
lstrcmpW
lstrcpyW
lstrlenW
CopyFileW
VerifyVersionInfoW
GetDateFormatW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetCommandLineW
SetUnhandledExceptionFilter
GetLocalTime
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapSize
GetCurrentProcessId
LCMapStringW
CompareStringW
SetFilePointerEx
ReadConsoleW
ReadFile
SetStdHandle
GetConsoleMode
GetConsoleCP
HeapReAlloc
GetStringTypeW
GetACP
WriteFile
ExitProcess
SetEndOfFile
GetFileType
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwind
CreateThread
WriteConsoleW
GetCurrentProcess
WaitForMultipleObjects
Sleep
CreateEventW
CreateMutexW
WaitForSingleObject
ReleaseMutex
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
OutputDebugStringW
GetTempPathW
GetTempFileNameW
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
DeleteFileW
ExpandEnvironmentStringsW
GetStdHandle
VerSetConditionMask
SystemTimeToFileTime
FileTimeToSystemTime
LoadLibraryW
GetProcAddress
FreeLibrary
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
InitializeSListHead
GetStartupInfoW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
CloseHandle
DecodePointer
GetFileTime
GetFileSize
CreateFileW
GetTimeZoneInformation
user32
LoadStringW
wsprintfW
TranslateMessage
DispatchMessageW
SendMessageW
PostMessageW
ShowWindow
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
SetFocus
CharNextW
CharUpperW
PostThreadMessageW
IsWindow
EnableWindow
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetMessageW
advapi32
RegEnumValueW
OpenProcessToken
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
RegCloseKey
RegCreateKeyExW
QueryServiceStatus
ConvertStringSidToSidW
LookupAccountSidW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoReleaseServerProcess
CoAddRefServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CLSIDFromString
CoInitialize
CLSIDFromProgID
CoUninitialize
CoCreateInstance
StringFromGUID2
oleaut32
VariantTimeToSystemTime
SysAllocString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantInit
SystemTimeToVariantTime
VarBstrCmp
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
VariantClear
SysFreeString
comctl32
ord17
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ws2_32
closesocket
ioctlsocket
bind
getsockopt
connect
WSAGetLastError
inet_addr
inet_ntoa
listen
ntohs
recv
recvfrom
__WSAFDIsSet
select
inet_pton
getnameinfo
freeaddrinfo
getaddrinfo
WSAAddressToStringA
send
WSACleanup
WSAStartup
gethostbyname
socket
shutdown
setsockopt
sendto
accept
crypt32
CertGetNameStringW
CertGetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertDuplicateCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertFindChainInStore
CertCloseStore
CertOpenStore
CertFreeCertificateContext
CryptFindOIDInfo
Name
.text
Size
626KB
Virtual Size
625KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
195KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=168, id=261, version=24610,
count=19, id=260, version=29804,
count=21, id=259, version=29804,
count=59, id=261, version=29804,
count=19, id=260, version=24610,
count=7, id=262, version=24610,
count=25, id=257, version=24610,
count=343, id=1, productName=Unmarked objects,
count=11, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
f5epi.exe
- IMPHASH 3cea90644ace9bef396ef6302afd0f31
- SHA256 6893b4bba878c4102a55758097f26134c6f1d06b82364883b1647824d145b770
- MD5 030b5cfa39ffc4ec138f32f13ae60808
- SHA1 836b6b6a62b9366014becafae81eb1aca76f6ec2
- SHA512 96fd8c3351a0caa635732df7e61551fca967709784cdcc768415c4b0f23664a5e0db4fbed7082c77f99a4087180a9c2ff289faa4e51eeaf3eb5aa0405540498e
- SSDEEP 49152:OwFPya0K0tTQ9Yf7elWiw0VKyTRymvHEitIwt3j73:OwFPya0K0tT8YevRym/Iw1
- TLSH T19E75E5223797C521E9F283F0D93D9AA69529FC71773184CB7E84F158283C9C25A3BB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d5:8e:f9:b9:0f:fc:a4:ff:8f:cb:ce:13:f8:f6:50:75:30:a7:53:f4:0e:ff:87:9e:ab:0f:c2:2f:23:e5:b1:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
707856
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InspectionHost\EPCheck\out\Release\f5epi.pdb
bcrypt
BCryptGenRandom
urlmon
CreateURLMoniker
CoInternetParseUrl
kernel32
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetExitCodeProcess
GetCurrentThread
GetCurrentThreadId
TerminateThread
CreateProcessW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetWindowsDirectoryW
GetVersionExW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
LocalAlloc
LocalFree
DosDateTimeToFileTime
FormatMessageW
lstrcmpA
lstrcmpW
lstrcpyW
lstrlenW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
CopyFileW
MoveFileExW
GetComputerNameW
VerifyVersionInfoW
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
DeviceIoControl
QueryPerformanceFrequency
CreateEventA
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalAlloc
GlobalUnlock
GlobalLock
MulDiv
lstrcmpiW
DuplicateHandle
SetUnhandledExceptionFilter
CreatePipe
OpenProcess
GetLocalTime
QueryFullProcessImageNameW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
HeapReAlloc
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetStdHandle
GetACP
GetStdHandle
ExitProcess
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
SetEndOfFile
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileType
RtlUnwind
AreFileApisANSI
CreateWaitableTimerA
GetModuleHandleA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
OpenEventA
WaitForMultipleObjectsEx
GetStartupInfoW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
TerminateProcess
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
IsDebuggerPresent
GetCPInfo
CompareStringEx
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
CallNamedPipeW
WaitNamedPipeW
SetNamedPipeHandleState
SetErrorMode
SetLastError
CloseHandle
OutputDebugStringW
GetTempPathW
WriteFile
SetFileTime
SetFileAttributesW
RemoveDirectoryW
ReadFile
LocalFileTimeToFileTime
GetTempFileNameW
GetFileTime
GetFileSize
GetFileAttributesExW
GetFileAttributesW
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
DeleteFileW
CreateFileW
CreateDirectoryW
CompareFileTime
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
VerSetConditionMask
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
GetLocaleInfoEx
LCMapStringEx
EncodePointer
GetStringTypeW
ReleaseSemaphore
WriteConsoleW
user32
DefWindowProcW
CreateWindowExW
PeekMessageW
DispatchMessageW
ShowWindow
IsWindow
PostMessageW
RegisterClassExW
DestroyWindow
SetWindowLongW
LoadCursorW
SendMessageW
SetLayeredWindowAttributes
SetWindowPos
IsIconic
CreateDialogParamW
DialogBoxParamW
LoadStringW
EndDialog
TranslateMessage
GetDlgItem
SetDlgItemTextW
SetTimer
KillTimer
GetDesktopWindow
LoadIconW
wsprintfW
RegisterWindowMessageW
GetMessageW
PostThreadMessageW
PostQuitMessage
CallWindowProcW
GetClassInfoExW
IsChild
MoveWindow
SendDlgItemMessageW
CharNextW
SetFocus
GetActiveWindow
GetFocus
SetCapture
ReleaseCapture
CreateAcceleratorTableW
GetWindowLongW
DestroyAcceleratorTable
UpdateWindow
SetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
InvalidateRgn
RedrawWindow
GetWindowTextW
GetWindowTextLengthW
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetParent
GetClassNameW
GetWindow
GetForegroundWindow
UnregisterClassW
MsgWaitForMultipleObjects
SetWindowTextW
GetClientRect
GetWindowRect
MessageBoxW
gdi32
DeleteObject
BitBlt
GetObjectW
SelectObject
GetDeviceCaps
GetStockObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
advapi32
CheckTokenMembership
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteTreeW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyW
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyW
RegCloseKey
MapGenericMask
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
FreeSid
OpenProcessToken
AllocateAndInitializeSid
ole32
CoTaskMemFree
CoTaskMemAlloc
WriteClassStm
CoInitializeEx
OleLockRunning
OleUninitialize
OleInitialize
CoTaskMemRealloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CreateStreamOnHGlobal
CoSetProxyBlanket
CoGetObject
CoInitialize
StringFromGUID2
CoCreateInstance
CoUninitialize
OleSaveToStream
oleaut32
VariantClear
SysAllocString
SysStringLen
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
SysAllocStringLen
VariantCopy
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysFreeString
shlwapi
PathFileExistsW
SHDeleteKeyW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
setupapi
SetupInstallFromInfSectionW
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitDefaultQueueCallback
SetupCloseInfFile
SetupOpenInfFileW
SetupDefaultQueueCallbackW
wininet
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetQueryDataAvailable
InternetQueryOptionW
InternetSetOptionW
InternetSetStatusCallbackW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetSetCookieW
InternetErrorDlg
InternetSetCookieExW
InternetCrackUrlW
ws2_32
inet_pton
psapi
EnumProcesses
Name
.text
Size
924KB
Virtual Size
924KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
286KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
228KB
Virtual Size
227KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=24610,
count=182, id=261, version=24610,
count=19, id=260, version=29804,
count=24, id=259, version=29804,
count=89, id=261, version=29804,
count=23, id=260, version=24610,
count=4, id=262, version=24610,
count=31, id=257, version=24610,
count=419, id=1, productName=Unmarked objects,
count=2, id=260, version=29912,
count=16, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
ietrust.exe
- IMPHASH 959f3bf8a72d615570112f4a6ef8b889
- SHA256 065a54ccdb520d75b2e0d296153e584d9f9b082d54a7729976f1581ba9b9dcb2
- MD5 29e340e814a80013be0ffe2187dd04ba
- SHA1 70f6609f98720f122ae036a4a7547cfbbea80e92
- SHA512 46927cd4db0c64f7d9a293f4bf0a8347d4e87e824bbfc6072cbd8642a6125c9ac2283f992f94ab6185b392140f2489adcd6f6a56bc3fd4399c3a09caf4b60221
- SSDEEP 3072:BNh5Y7MjGF2jOF3YhwSRangajZxxB8jl5ee3bAQXu5kJ/MRENdKEhKhUMKxkTtaK:BP4gQx+ee3pXiRuUKx0RgY+MX
- TLSH T1A7146B3831E5C532E5B315312AE8DBBA696EFC311B3189DB6388533D0E305D25A36B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f3:9c:d4:95:31:18:4a:af:eb:ea:4f:88:74:a0:de:5a:a8:06:43:62:63:ef:c1:50:a6:c6:3c:45:00:94:c8:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
44032
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InspectionHost\ietrust\out\ReleaseUnicode\ietrust.pdb
kernel32
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
CreateEventW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetSystemTime
GetVersionExW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LocalFree
HeapAlloc
lstrlenW
CopyFileW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
ReadConsoleW
ReadFile
SetEndOfFile
SetFilePointerEx
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetFileType
CloseHandle
QueryPerformanceCounter
OutputDebugStringW
GetTempPathW
DecodePointer
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
FormatMessageW
LCMapStringW
GetACP
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WriteConsoleW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Name
.text
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=147, id=261, version=24610,
count=19, id=260, version=29804,
count=19, id=259, version=29804,
count=48, id=261, version=29804,
count=2, id=262, version=24610,
count=13, id=257, version=24610,
count=212, id=1, productName=Unmarked objects,
count=19, id=260, version=24610,
count=3, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5_TMP/f5certchk.cab
- SHA256 027976c7b70c07572993e5d4d0ea79c884b30b2e1d3d0aabc0a2a1807c95b1dc
- MD5 107c959674e345013db10d422f875837
- SHA1 8906439e9c006086d291a66a7a1eec7f693194e3
- SHA512 18afa8e5dbf910525848b116298fd3b787b2397c3c8ad3a928147ee591455a01d379e19de961495a7426ea9ca07d6ddfcd9b867a354bbbb3ae47c05f735558ae
- SSDEEP 6144:IWWpgBYOUIwJh09RVZzte92XIQ1jXAUqe9mBX6Xok7EFzTPw9m+1alakkLYAynvQ:IWWpeU5wvT1TAUVoZgoo8+YBTS9
- TLSH T1E8A423A389DC78C24D86802DB45F77A776FF19811921ECBF75D0893A63C0908375BA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1eaf36ad5936616836aa97fd4b5fecedd6b05fdc7932f888cf1bb95d66df3aca
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
F5CertHelper.dll
- IMPHASH 419a5c8f2a9d3051ac3541b533d66d08
- SHA256 4252990c176bc824e7a62c9a06863ca6add23e579dae7b2dbbc1769f05870781
- MD5 046a03099655ae77cafd4c16fea77008
- SHA1 720d9c0a63ec967c2b3b24769cda0db0e49939e9
- SHA512 fc311cd99fdd7a603b4c1eaebf64b49ec3ca93870bc9a84aacc5b2076ad16683533afc6c200fe4e48905b8837e5281d94e91028c77f324f75cc6fad0c9369516
- SSDEEP 1536:sBgiriYZb6J173zaCs/CqLeJuhsWycdGwZNSYbjpMG3NWKxnZDSaI:a5rJt6H3zaPLeYXGmNS2Fz3NWKTq
- TLSH T109934A00B6D49070E5BF493508B491A18B7CBC10CFE19EDB3B9A366D4F742D1AE36E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
80:57:39:f1:0c:a5:0e:63:8f:8c:fb:f6:40:3e:a1:62:86:6e:ff:bb:31:f5:1d:17:cc:b2:a5:34:d3:1b:5a:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
5568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\PolicyAgents\certificate\CertCheck\out\Release\F5CertHelper.pdb
rpcrt4
NdrDllRegisterProxy
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllUnregisterProxy
oleaut32
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
BSTR_UserSize
kernel32
GetProcAddress
CreateFileW
CloseHandle
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
DisableThreadLibraryCalls
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
WriteConsoleW
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=125, id=261, version=24610,
count=18, id=260, version=24610,
count=29, id=261, version=29804,
count=15, id=260, version=29804,
count=18, id=259, version=29804,
count=7, id=257, version=24610,
count=106, id=1, productName=Unmarked objects,
count=2, id=264, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
F5CertHelper.exe
- IMPHASH 8571842872127609d1bcc119afedf14b
- SHA256 6473dcfbca7659d89366e132202cf8476474fc0015dac87ac845648a95723e8b
- MD5 b9971db700c36557c315ad83c580721f
- SHA1 e5dbcdba26bcb246be6dd878a1cf8c1b4f2abe7f
- SHA512 13bd436e31362c1fbf8044dcfacc25bda9f32ec29081061c8dd4fceb0645cd4fef3d4bb13261bc21ae7f32201bbdee454e23e83e896e93431bc5bda1b687d602
- SSDEEP 6144:ljcF2SP39BAE4vtuSZOGHrobAMZpqCyamkKqREDryFxiFC/cNWH/fF1XaCXmTlfL:lwF2m39iE4viNpqdkKqRELFvNEXF6plB
- TLSH T1EF948D21365AC831DD6201B45D7EE77B916C99B00F624AE3B3D82B782E705E23B35B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
de:90:12:67:88:47:df:01:b6:ba:36:96:a8:bf:bb:ce:19:5e:55:c3:d2:74:61:56:32:fa:6d:98:04:e9:44:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
212336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\PolicyAgents\certificate\CertHelper\out\Release\f5CertHelper.pdb
rpcrt4
NdrServerCall2
RpcServerInqBindings
RpcBindingInqAuthClientA
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
RpcServerUseProtseqA
RpcServerUnregisterIf
RpcServerRegisterIfEx
RpcServerListen
RpcEpRegisterA
kernel32
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResetEvent
ReleaseMutex
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
GetModuleHandleExA
FormatMessageA
lstrlenA
FlushFileBuffers
CopyFileA
GetComputerNameA
VerifyVersionInfoW
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
TerminateProcess
ReadFile
SetEndOfFile
WriteConsoleW
SetFilePointerEx
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
FindNextFileA
GetConsoleCP
GetStringTypeW
HeapReAlloc
HeapSize
GetFileType
FindFirstFileA
FindClose
DeleteFileA
CreateFileW
CompareFileTime
IsProcessorFeaturePresent
VerSetConditionMask
TerminateThread
OpenEventA
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
lstrcmpiA
SizeofResource
LoadResource
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetLocalTime
GetCurrentThreadId
CreateThread
GetCurrentProcessId
Sleep
CreateEventA
WaitForSingleObject
SetEvent
SetUnhandledExceptionFilter
GetTempPathA
CreateFileA
GetCommandLineA
LocalFree
LocalAlloc
LoadLibraryA
GetProcAddress
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
RaiseException
CloseHandle
DecodePointer
ReadConsoleW
UnhandledExceptionFilter
GetStringTypeExA
GetUserDefaultLCID
LCMapStringA
GetConsoleMode
IsDebuggerPresent
OutputDebugStringW
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
VirtualQuery
VirtualProtect
VirtualAlloc
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetStartupInfoW
InitializeSListHead
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwind
LCMapStringW
user32
wsprintfA
GetMessageA
DispatchMessageA
PostThreadMessageA
CharNextA
LoadStringA
advapi32
ConvertStringSidToSidA
LookupAccountSidA
CryptSignHashA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptReleaseContext
RegQueryValueExA
ConvertSidToStringSidA
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
IsValidSid
GetTokenInformation
GetLengthSid
OpenProcessToken
ole32
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
oleaut32
VarUI4FromStr
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
crypt32
CertDuplicateCertificateContext
Name
.text
Size
314KB
Virtual Size
313KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=149, id=261, version=24610,
count=18, id=260, version=29804,
count=21, id=259, version=29804,
count=53, id=261, version=29804,
count=19, id=260, version=24610,
count=1, id=262, version=24610,
count=19, id=257, version=24610,
count=306, id=1, productName=Unmarked objects,
count=15, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
f5certchk.dll
- IMPHASH b8e3895150001417ec013f340fb37a58
- SHA256 52a5b30164ea0f24c463d8f7b6e53ec7160eea508cdcfa3067669bbe67d926d4
- MD5 64b373250486df4234630b26223363d9
- SHA1 f7307edc5e1b9893edd4d80d00d6cc205683db5a
- SHA512 dd2caffe26c67fe4812d98d72b2a008de5289f4d62c9d232b155807792617eff0c95e9a975e533bb65db1cec090da5a83476200920147f0c03c463d08dfc2b45
- SSDEEP 12288:am+/ClK7Fm1Rgbf64bsyb8pdqe5NpGKgZr3Qm2t0K/960:2/sn1RgbnoqqGKgZ+9o0
- TLSH T11BC47C22B688C035F6BD12B049BA9B7B943DF9715B7188CB73C86A3D98706C15B31727
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
87:ec:8f:01:4e:7b:da:73:97:70:90:fe:26:1e:bf:77:51:be:9c:11:9b:71:87:5f:04:83:b6:67:19:bd:db:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
282064
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\PolicyAgents\certificate\CertCheck\out\ReleaseUnicode\f5certchk.pdb
crypt32
CertDuplicateCertificateContext
rpcrt4
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoExW
kernel32
GetVersionExW
GetModuleHandleExW
FormatMessageW
lstrlenW
CopyFileW
GetComputerNameW
VerifyVersionInfoW
WideCharToMultiByte
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
LoadLibraryA
GetStringTypeExW
LCMapStringW
GetUserDefaultLCID
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
WriteConsoleW
SetEndOfFile
ReadConsoleW
ReadFile
SetFilePointerEx
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetConsoleMode
GetConsoleCP
WriteFile
GetStringTypeW
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
GetACP
GetSystemTime
ExitProcess
VirtualQuery
VirtualProtect
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
GetTempPathW
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CompareFileTime
VerSetConditionMask
CreateEventW
WaitForSingleObject
MultiByteToWideChar
lstrcmpiW
MulDiv
GlobalLock
GlobalUnlock
GlobalAlloc
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
DisableThreadLibraryCalls
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetLastError
EncodePointer
LocalFree
LocalAlloc
LoadLibraryW
GetProcAddress
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
RaiseException
CloseHandle
DecodePointer
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetSystemInfo
CreateProcessW
GetExitCodeProcess
GetCurrentProcessId
WaitForMultipleObjects
Sleep
ReleaseMutex
ResetEvent
SetEvent
InitializeCriticalSection
QueryPerformanceCounter
GetModuleFileNameA
OutputDebugStringW
user32
IsWindow
IsChild
DestroyWindow
ShowWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
SetWindowPos
CharNextW
SetFocus
GetFocus
DefWindowProcW
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
InvalidateRect
GetClientRect
IntersectRect
UnionRect
OffsetRect
EqualRect
PtInRect
GetWindowLongW
SetWindowLongW
LoadCursorW
LoadStringW
UnregisterClassW
GetKeyState
advapi32
ConvertStringSidToSidW
LookupAccountSidW
CryptSignHashW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptReleaseContext
RegQueryValueExW
CheckTokenMembership
ConvertSidToStringSidW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
IsValidSid
GetTokenInformation
AllocateAndInitializeSid
GetLengthSid
FreeSid
OpenProcessToken
ole32
CoCreateInstance
StringFromCLSID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CreateDataAdviseHolder
CreateOleAdviseHolder
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
oleaut32
VariantClear
VariantChangeType
SysStringLen
LoadTypeLi
LoadRegTypeLi
OleCreatePropertyFrame
VarUI4FromStr
VariantInit
SysAllocString
SysFreeString
gdi32
CreateMetaFileW
CreateRectRgnIndirect
DeleteDC
DeleteMetaFile
GetDeviceCaps
RestoreDC
SaveDC
SetMapMode
SetTextAlign
TextOutW
LPtoDP
SetViewportOrgEx
CloseMetaFile
SetWindowExtEx
SetWindowOrgEx
CreateDCW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Name
.text
Size
398KB
Virtual Size
398KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
113KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=150, id=261, version=24610,
count=18, id=260, version=24610,
count=17, id=260, version=29804,
count=20, id=259, version=29804,
count=10, id=262, version=24610,
count=47, id=261, version=29804,
count=19, id=257, version=24610,
count=340, id=1, productName=Unmarked objects,
count=14, id=261, version=29912,
count=1, id=260, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
f5certchk.inf
- SHA256 ce71b2d6b635e2bda17b69b19d7ef3c91cb9668c68f79b0322ab755912b682b2
- MD5 8f14766793525b45448259c8ed4c2f24
- SHA1 0323d95dac196e32e53f05da6bf042afb0abfeb9
- SHA512 8d5c32b8c7e910ffa1eca5dc5f7294999a253c93a42c88154e08d0a5194cb105776d3b4ded1e9987d36a7c4ae0775df095487e7a7e7ed573ca550f36c8c39caf
- TLSH T1E0F0F469D01F0DE606501AA0E191A3B42B97629CCB542F0873507A97429780D5F74AFE
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/F5 VPN/F5_TMP/f5syschk.cab
- SHA256 493946e5dd69ec1c7839b88ba666a7178adbdc3f0c24f6a400399bd05d47ab4b
- MD5 69ac5171ccc353ca468572ee8ac692c3
- SHA1 155f39ad4c7be00de117ec53862b973e73e4d475
- SHA512 1683c2a67a053212d9e22e3f10d1cd61d09554176e32e9d6bb465e8389c448261546cd48f638a48131f34d8e42c85263e940729a9922d04a10c176b3fab14185
- SSDEEP 6144:eRgBG3ReqAB5alSaH7DriIde+zFzrRp/NRf6hD+GdrU9F:eHXRH7XiIo+zJttNohD+GZUz
- TLSH T1F78423624E7124D2F8EC2D81949FB68837F4174F25BAACA276D7563B8DC13E5720902F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc5ce1e9363a2eb11f4461145d75c523cbfe59d4e5ae18f7f50af31a308bd821
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
F5Win32CheckHelper.dll
- IMPHASH e6e7e093e403d599629cf73392243a0c
- SHA256 2296a5565b210a54b80e59e642d32cd103a3ac9676f66f904e9c77b9ac6c3880
- MD5 c38741c08cb63631ba5b9ce9aa806e42
- SHA1 1e548c9acee310b1a4331ea4b5d8dcd8cb625615
- SHA512 9e2d51687df35c848081a7f966cce7836c8719149993286d78a53d0fb21c15fe5eac6e39102c6585dacb3b9b3cca3056a43b0bc925e5df0b479ec916a718db16
- SSDEEP 1536:IqzQRGUyNuaE17cTJ1w/AJulsWca5cdQPQ6nLuznkxZKxnZDS7:HzQRhyNuaAcTJvYUnQPQ6nLuzkxZKT6
- TLSH T13B934B40B5D09071D57E083908B4C2A18B7CBD10DFE29EEB7B563A6E4F741C1AE35E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
08:2a:e7:92:34:76:af:05:72:33:99:44:0d:db:de:08:58:f0:1e:4b:40:82:4a:3f:db:81:90:16:25:c6:1b:d6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
5568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\Win32CheckHelper\out\Release\f5Win32CheckHelperps.pdb
rpcrt4
NdrDllGetClassObject
NdrOleFree
NdrOleAllocate
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
kernel32
GetProcAddress
CreateFileW
CloseHandle
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
DisableThreadLibraryCalls
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
WriteConsoleW
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
oleaut32
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
169B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=125, id=261, version=24610,
count=18, id=260, version=24610,
count=29, id=261, version=29804,
count=15, id=260, version=29804,
count=18, id=259, version=29804,
count=7, id=257, version=24610,
count=106, id=1, productName=Unmarked objects,
count=2, id=260, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
F5Win32CheckHelper.exe
- IMPHASH 24cd92e2efdd46552a3d9b4a3044e8a8
- SHA256 6a42b737b1a800a15703c97ac048cbec4754dad3a6e3dcf600fcf4474000e0ff
- MD5 7ceadc218c1e8cc7dafcee19d003ded6
- SHA1 3d8e16835c9603e8890b1fc5338941ccf2da032c
- SHA512 f18361cc22977a028dea62757940591dcd17af76c27b5abd9b734f01d84eb9627398764b7b4f570738e8004f09e659f3eca71281f13c06df5d8635eae9cafbbb
- SSDEEP 3072:AV7jAwG7TYDWcMXCPeC1rc8wZFdqbfqAQplTKAK4nOKuvHLuzkI5LVFXiKT8:M7jAp7TYq5XCearYAbfqTPNaaLVFX7Q
- TLSH T163547D30B199C872EA6300368D69E7B7942EAC304F1655FB63D82B2DDEB01D26736953
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d8:45:87:11:12:8f:8e:3c:28:ec:05:4e:b8:f0:10:1d:7c:fd:b3:f4:e8:c8:f9:c4:d1:01:eb:62:f1:e1:68:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
105136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\Win32CheckHelper\out\Release\f5Win32CheckHelper.pdb
iphlpapi
GetAdaptersInfo
kernel32
EnterCriticalSection
LeaveCriticalSection
SetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetSystemTime
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
LocalAlloc
LocalFree
FormatMessageA
lstrlenA
CopyFileA
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetCommandLineA
SetUnhandledExceptionFilter
CreateThread
GetLocalTime
LoadLibraryExA
LoadResource
SizeofResource
lstrcmpiA
FindResourceA
IsDBCSLeadByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
HeapReAlloc
HeapSize
ReadConsoleW
ReadFile
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
LCMapStringW
GetStringTypeW
GetACP
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
GetTempPathA
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
CreateFileW
VerSetConditionMask
DeleteCriticalSection
InitializeCriticalSectionEx
DeviceIoControl
GetLastError
RaiseException
CloseHandle
DecodePointer
CreateFileA
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
VirtualQuery
VirtualProtect
VirtualAlloc
GetFileType
SetEndOfFile
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
OutputDebugStringW
IsDebuggerPresent
WriteConsoleW
user32
wsprintfA
GetMessageA
PostThreadMessageA
CharNextA
DispatchMessageA
advapi32
OpenProcessToken
RegQueryInfoKeyW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
ole32
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoRegisterClassObject
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoRevokeClassObject
oleaut32
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantInit
VariantClear
VarUI4FromStr
SysStringByteLen
Name
.text
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=167, id=261, version=24610,
count=18, id=260, version=29804,
count=20, id=259, version=29804,
count=53, id=261, version=29804,
count=19, id=260, version=24610,
count=1, id=262, version=24610,
count=17, id=257, version=24610,
count=269, id=1, productName=Unmarked objects,
count=5, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
Win32SystemCheck.dll
- IMPHASH 80dfcc88118f564ddb3959d811da065e
- SHA256 8b206e031523c174220a82164aaa3bd8330575ddd255791943dd4e844b345536
- MD5 2fb1ba125f20263b1c07f472d6ce17cb
- SHA1 48789677767507b2e8c859e77be2be2e87fa0b81
- SHA512 57fa990eed0cc561d7cf9a9af7ac7c27ade14e2d5019b94b11dd3109ce1aaa12090268873ec76db3e6b930922239dc2dcd0ff3fb7fab0272ab316c432e180dbc
- SSDEEP 12288:qo1Opmk20nccjr2fvNVm/zml9kR3hktuJj7jajCjwjOjJzRzkzuzizAAdAWAQAeD:qofvNVLS3hkSj7jajCjwjOjJzRzkzuzQ
- TLSH T132D47CA37509C131E96E11B848BCE77BECADAC3017F494C77399BA693C748C15E32A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
61:c0:3a:70:01:f2:c5:4b:c3:69:a8:75:14:2e:65:29:b4:05:61:43:2b:03:6a:ab:c5:cf:f5:6c:4c:0b:4d:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
269312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\PolicyAgents\win32\Win32SystemCheck\out\Release\f5Win32SystemCheck.pdb
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
iphlpapi
GetAdaptersInfo
kernel32
FindResourceA
WideCharToMultiByte
IsDBCSLeadByte
VerSetConditionMask
ExpandEnvironmentStringsA
CreateFileW
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetTempPathA
QueryPerformanceCounter
ResetEvent
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetExitCodeProcess
GetCurrentThreadId
CreateProcessA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetModuleHandleA
GetVersionExA
GetModuleHandleExA
LocalAlloc
LocalFree
FormatMessageA
lstrcmpA
lstrcpyW
lstrlenA
CopyFileA
VerifyVersionInfoW
GetLocaleInfoA
FindResourceW
GetUserDefaultUILanguage
UnhandledExceptionFilter
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetTimeZoneInformation
ReadConsoleW
ReadFile
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
GetStdHandle
HeapReAlloc
HeapSize
SizeofResource
LockResource
GetModuleFileNameA
DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetComputerNameA
WaitForMultipleObjects
CreateEventA
OutputDebugStringW
WaitForSingleObject
SetEvent
GetCurrentProcess
FileTimeToSystemTime
CreateFileMappingA
LoadLibraryA
GetProcAddress
FreeLibrary
UnmapViewOfFile
MapViewOfFile
GetFileTime
GetFileSize
MultiByteToWideChar
GetProcessHeap
HeapFree
HeapAlloc
DeleteCriticalSection
InitializeCriticalSectionEx
DeviceIoControl
GetLastError
RaiseException
CloseHandle
DecodePointer
CreateFileA
lstrcmpiA
LoadResource
GetSystemDefaultUILanguage
LoadLibraryExA
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
LCMapStringW
CompareStringW
GetStringTypeW
GetACP
ExitProcess
IsDebuggerPresent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetStartupInfoW
InitializeSListHead
RtlUnwind
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFileType
SetEndOfFile
VirtualQuery
VirtualProtect
VirtualAlloc
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
user32
wsprintfA
CharNextA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
advapi32
RegSetValueExA
RegQueryValueExA
RegEnumValueA
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
RegQueryInfoKeyW
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
GetUserNameA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
ole32
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoSetProxyBlanket
oleaut32
VarUI4FromStr
VarBstrCat
SystemTimeToVariantTime
VariantClear
VariantInit
LoadTypeLi
SysStringByteLen
SysStringLen
SysAllocStringLen
SysAllocString
SysFreeString
SysAllocStringByteLen
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Name
.text
Size
389KB
Virtual Size
389KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=186, id=261, version=24610,
count=16, id=260, version=29804,
count=22, id=259, version=29804,
count=51, id=261, version=29804,
count=19, id=260, version=24610,
count=9, id=262, version=24610,
count=19, id=257, version=24610,
count=297, id=1, productName=Unmarked objects,
count=1, id=260, version=29912,
count=11, id=261, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
f5syschk.inf
- SHA256 07fd1abe6e933405515663196e20c4fa567b9ea377edee6ac5acd35f983db984
- MD5 7cec0b1a36ce8ff1e709da07ccba9ddf
- SHA1 8588090c30028324d750269dd073cfd3d777dae7
- SHA512 b263da162eb3664bc6dcd0edaf15498cc4853fbe7a9329ab988aeb2f1ebfec1f52490efaa8d9dc44f75b9307c744a9c14578e249cab39bbbfcd63b5ca16fdcbe
- TLSH T13CF02D75801B159B267D2D30DCB1EAA86AF353994B6C2D0C31C0E653899780923F2CB9
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/F5 VPN/F5_TMP/f5tunsrv.cab
- SHA256 c92315727ea6874a3335a99bf3b43c979673e746e6b72e6ccc20665d24a84b3c
- MD5 970d4eda592c385e656b6377685c1eb7
- SHA1 17b00e3b7515ae75f68d62d5f78224b6b4865b2e
- SHA512 850a91e3ec331ebc2ff647436a53665fa3ab88bc70be8fd57dd93e5de7a917f5f80f68ba7199da1cc9c9af437f27f4d3c72ca7f1b0c83b112ceef7ba59c1ce37
- SSDEEP 49152:86tCIYDkb1/au0NRNUrkt2UkcVlEdQJTyvclQHEwa2O4MkoV2rbJoF:ttCIYDmN4Zt2wkdQJTuclQkwaKxoMq
- TLSH T1B8B533575B2C5C7265C334B4762AC16BC87402E7E01EACB176E9178F2EA0E6D6B80737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
979c966b5e8270f7d7859f52ed69ca82ed82e1739863550b9a9fe0a023a7f872
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
TunnelServer.exe
- IMPHASH 10e216bc65ad7bbe14129850ec28b027
- SHA256 d167cb29cd265c550a0b92808b8e8b14adc5a5122192a7e47628034359e72c36
- MD5 23c575da48ab3b7f10cc7658d751e589
- SHA1 fda51e79be9a332e3b55d07ec69232af9fc700a3
- SHA512 b83d78699c247ba89a7b444299ad533b6a1affef4af86c4c49fd7c7a8cadf1a64bcafcca6554cae2480d02f7ab671102dccd8d29bef5b5b0ae0a80f1efc196d4
- SSDEEP 98304:GJ5k0KtSDyJMLWOO0KNc7I5iv788hv6iv2SZnVV3f6eP:27KtSDyJMLWCY2XrvxZnVVx
- TLSH T19106BF62F70A80A1E6624078981E777BCF3DE934036288D3E3C05959E9B16D37B36B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
64:0a:41:06:56:d6:21:5d:9b:e6:1d:82:68:4f:bd:54:72:37:5a:8b:fb:24:85:c3:36:15:3f:fd:e2:0f:47:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
2717904
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\PortForwarding\out\Release\f5TunnelServer.pdb
crypt32
CertFindCertificateInStore
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCompareCertificate
CertFindChainInStore
CertAddEncodedCertificateToStore
CertGetNameStringA
CertGetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertOpenStore
CertFreeCertificateChain
CertCloseStore
CertDuplicateCertificateContext
CryptFindOIDInfo
CertFreeCertificateContext
CertGetCertificateChain
CertCreateCertificateContext
ws2_32
sendto
WSARecvDisconnect
ioctlsocket
getnameinfo
setsockopt
WSAGetLastError
inet_ntoa
WSASetLastError
freeaddrinfo
WSACleanup
__WSAFDIsSet
accept
bind
closesocket
WSASend
gethostbyname
select
ntohl
shutdown
listen
WSAAccept
inet_pton
getaddrinfo
WSAStartup
inet_addr
getsockname
WSAConnect
WSAAddressToStringA
send
socket
ntohs
connect
recvfrom
WSASocketA
WSARecv
recv
getsockopt
htonl
htons
WSAGetOverlappedResult
advapi32
IsValidSecurityDescriptor
CheckTokenMembership
RegOpenKeyExA
RegEnumKeyExA
CryptReleaseContext
FreeSid
CryptDestroyHash
CryptCreateHash
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
CryptEnumProvidersW
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
IsValidSid
OpenProcessToken
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
IsValidAcl
AddAccessAllowedAce
GetTokenInformation
RegCloseKey
RegQueryValueExA
AllocateAndInitializeSid
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
rpcrt4
RpcBindingFree
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA
NdrClientCall2
RpcSsDestroyClientContext
kernel32
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
EncodePointer
LoadLibraryExW
ExitProcess
SetConsoleCtrlHandler
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetModuleFileNameW
GetConsoleOutputCP
HeapSize
HeapReAlloc
CompareStringW
LCMapStringW
GetFileSizeEx
SetFilePointerEx
GetTimeZoneInformation
SetStdHandle
GetCurrentDirectoryW
GetFullPathNameW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
SetLastError
DeviceIoControl
InitializeCriticalSectionEx
GetLastError
CreateFileA
CloseHandle
RaiseException
DecodePointer
DeleteCriticalSection
SetThreadAffinityMask
GetCPInfo
GetModuleFileNameA
CancelIo
FindFirstFileW
FindFirstFileA
HeapFree
EnterCriticalSection
FindNextFileW
GetCurrentProcess
GetStdHandle
ReleaseSemaphore
WriteFile
GetSystemDefaultUILanguage
WaitForMultipleObjects
GetUserDefaultUILanguage
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
InitializeCriticalSection
lstrlenA
FindClose
CreateMutexA
WaitForSingleObject
CreateFileW
GetCurrentThreadId
lstrcmpA
ReleaseMutex
UnmapViewOfFile
GetModuleHandleA
WaitForSingleObjectEx
OpenProcess
MultiByteToWideChar
Sleep
GetTempPathA
GetModuleHandleExA
CopyFileA
SetEvent
FileTimeToSystemTime
GetCurrentThread
TerminateThread
LoadLibraryA
GetVersionExA
QueryPerformanceFrequency
DeleteFileA
GetDateFormatA
lstrcpyA
GlobalFree
GetSystemInfo
CreateThread
ResetEvent
HeapAlloc
SetThreadPriorityBoost
GetProcAddress
CreateFileMappingA
LocalFree
VerSetConditionMask
GetComputerNameW
GetCurrentProcessId
GetProcessHeap
FreeLibrary
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
GetTempFileNameA
CreateSemaphoreA
CreateEventA
MapViewOfFile
QueryPerformanceCounter
GetTickCount
GetComputerNameA
FlushFileBuffers
OpenMutexA
GetLocalTime
SetUnhandledExceptionFilter
IsBadStringPtrA
LoadLibraryExA
SystemTimeToFileTime
GetModuleHandleExW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetEnvironmentVariableW
GetFileType
GetModuleHandleW
SwitchToFiber
DeleteFiber
CreateFiber
LoadLibraryW
ConvertFiberToThread
ConvertThreadToFiber
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW
CreateEventW
OutputDebugStringW
GetLocaleInfoA
IsDebuggerPresent
ReadFile
SetEndOfFile
user32
SetWindowPos
DestroyWindow
LoadCursorA
GetWindowRect
DispatchMessageA
SetTimer
GetMessageA
LoadStringA
KillTimer
SetDlgItemTextA
GetUserObjectInformationW
MessageBoxW
GetActiveWindow
ShowWindow
PostMessageA
EndDialog
DialogBoxParamA
wsprintfA
IsWindow
GetDlgItemTextA
SetWindowLongA
GetWindowLongA
SendDlgItemMessageW
GetForegroundWindow
DefWindowProcA
CreateWindowExA
SetFocus
PostQuitMessage
TranslateMessage
GetClientRect
GetDlgItem
GetDesktopWindow
RegisterClassExA
GetProcessWindowStation
EnableWindow
SendMessageA
gdi32
GetStockObject
ole32
CoUninitialize
CoCreateGuid
CLSIDFromProgID
CoInitialize
CoCreateInstance
oleaut32
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysStringLen
VariantClear
iphlpapi
GetIpAddrTable
GetBestRoute
comctl32
ord17
winmm
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
bcrypt
BCryptGenRandom
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
748KB
Virtual Size
748KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
14.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
167KB
Virtual Size
166KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=27412,
count=189, id=261, version=27412,
count=2, id=253, version=28518,
count=19, id=260, version=29804,
count=25, id=259, version=29804,
count=30, id=158, version=20921,
count=25, id=260, version=27412,
count=222, productName=Unmarked objects (old),
count=555, id=260, version=29912,
count=53, id=261, version=29804,
count=31, id=257, version=27412,
count=402, id=1, productName=Unmarked objects,
count=9, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
TunnelServerX.dll
- IMPHASH 0f1283da990015cb4feff07666dd9b95
- SHA256 3d58347f96340ce9c1bf78bca8a4a47aacd2552373616f480bd7ce5cfbb65646
- MD5 13a10cd0f6ff078abddc646c61e65466
- SHA1 8239e79f13da773ea028dc8f8b3de886090c41ba
- SHA512 ce61fe50a75bc3fdda4322db34936908e4322aa81f4e95ad33b0f6fecad8c08a16030d20a0502fd726bbf2fe64fb56d0ab4a3b2e5e5bb3d8914d1b9aedd7daf6
- SSDEEP 49152:JpfYWVEZgpytoCRq6VLDgp4itP8trtoNZdeoC:JpfYWVE2wG6VL04iitrtX
- TLSH T15B95BF13F78688B1E59F017C5166A33FD93EAD22573889C397D02A659C212D23B3F399
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
61:a4:04:cd:68:40:19:77:42:e6:90:fb:77:af:1a:07:58:39:93:61:6f:70:44:96:78:51:a2:16:0c:32:ad:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
1307744
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\PortForwarding\out\Release\f5TunnelServerX.pdb
kernel32
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
LocalAlloc
EncodePointer
SetLastError
DisableThreadLibraryCalls
LoadLibraryExA
LoadResource
SizeofResource
GlobalAlloc
GlobalUnlock
GlobalLock
MulDiv
lstrcmpiA
OpenMutexA
OpenFileMappingA
FindResourceA
IsDBCSLeadByte
TerminateThread
GetStdHandle
GetEnvironmentVariableW
GetFileType
WriteFile
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
DeleteFiber
LoadLibraryW
GetSystemTimeAsFileTime
ConvertFiberToThread
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
GetTimeZoneInformation
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetFullPathNameW
GetCurrentDirectoryW
SetStdHandle
SetFilePointerEx
HeapReAlloc
HeapSize
GetConsoleCP
LCMapStringW
CompareStringW
GetStringTypeW
GetACP
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
ReadFile
SetConsoleCtrlHandler
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualProtect
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
GetStartupInfoW
CopyFileA
CreateFileMappingA
OpenSemaphoreA
lstrlenA
FormatMessageA
VerSetConditionMask
LocalFree
LoadLibraryA
GetProcAddress
GetModuleHandleExA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetTickCount
GetSystemTime
GetSystemInfo
CreateProcessA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
WaitForMultipleObjects
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
GetLastError
RaiseException
CreateEventW
WaitForSingleObjectEx
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
DecodePointer
OutputDebugStringA
GetTempPathA
FlushFileBuffers
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
DeleteFileA
CreateFileW
WriteConsoleW
SetEndOfFile
user32
GetClassInfoExA
MessageBoxW
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
SetWindowPos
GetForegroundWindow
GetClientRect
GetWindowLongA
SetWindowLongA
LoadCursorA
CallWindowProcA
GetActiveWindow
IsWindow
IsChild
CharNextA
SetFocus
GetFocus
GetKeyState
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
InvalidateRect
IntersectRect
UnionRect
OffsetRect
EqualRect
GetUserObjectInformationW
PtInRect
CharUpperBuffA
GetProcessWindowStation
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
CreateProcessAsUserA
DuplicateTokenEx
GetLengthSid
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegQueryInfoKeyW
SetTokenInformation
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
ole32
OleRegEnumVerbs
OleRegGetMiscStatus
CoUninitialize
CreateOleAdviseHolder
CreateDataAdviseHolder
CoTaskMemFree
CoTaskMemRealloc
CoInitializeEx
OleRegGetUserType
CoCreateGuid
StringFromCLSID
CoCreateInstance
CoTaskMemAlloc
oleaut32
SysStringByteLen
OleCreatePropertyFrame
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
VarBstrCmp
VariantInit
SysAllocString
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
gdi32
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
TextOutA
SetTextAlign
SetMapMode
SaveDC
RestoreDC
Rectangle
GetDeviceCaps
DeleteMetaFile
DeleteDC
CreateRectRgnIndirect
CreateMetaFileA
CloseMetaFile
LPtoDP
CreateDCA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ws2_32
__WSAFDIsSet
closesocket
connect
ioctlsocket
getsockopt
recv
select
send
WSASetLastError
WSACleanup
WSAStartup
inet_ntoa
freeaddrinfo
WSAGetLastError
socket
shutdown
setsockopt
getaddrinfo
crypt32
CertCompareCertificate
CertAddCertificateContextToStore
CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
bcrypt
BCryptGenRandom
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
448KB
Virtual Size
447KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=24610,
count=171, id=261, version=24610,
count=18, id=260, version=24610,
count=17, id=260, version=29804,
count=25, id=259, version=29804,
count=21, id=257, version=24610,
count=385, id=1, productName=Unmarked objects,
count=47, id=261, version=29804,
count=8, id=262, version=24610,
count=21, productName=Unmarked objects (old),
count=493, id=260, version=29912,
count=6, id=261, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
f5tunsrv.inf
- SHA256 f0f792bf0b0174af38e74fa1694767bcd7f6ca8ca8691dd0363bea6860a56cc7
- MD5 df99fabca83e25584664be65be0fd637
- SHA1 c0f17bc01790a4864e6a60794affd7e85193f934
- SHA512 2132784d19f32937f0b548318a2d6ece6d4dd191db508432cfc4e0c611c85cb0e3b8fa0f82761e0768ff64bb553dfd0a68b3a635006954db1d2312b53d04b7fa
- TLSH T1D6F055B6841E00E525041F20D0A593C86F972298878C22CC33002BF302F2C7D2B74DF8
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/F5 VPN/F5_TMP/urxhost.cab
- SHA256 74089bf336477fce545eaeca83c032cde0fa48f78ba1a1af9b46c6f8c316b4d7
- MD5 86d68f6a9db58084c0ab2861f35b6d25
- SHA1 88e04fdbb665aff6bbe8e43fbbc3f003ce45357e
- SHA512 5a59fd495c2b1b0a5817bf3aa0eeb1703c80d1026ee535f0738a3f25d4952ae02e644e97f9a53d7e77e1a5dcdb0e813da68caa90574b938fa2a68858293ee12c
- SSDEEP 24576:qdcfvgKyWpK+wRaEP9M8+2PDgDljLC+KDVidKsrH/GnImU5AV+DujpS:ocA2kNbLgxPODV8KKfGpNV+D
- TLSH T17F453377AEC315C3AE960F3470CF7E4BC4A326518AE225EA8167B10C4FF8E95E455878
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f2679148d663d0e5e05e4e2e1d5109f6674b7f2ac8349696a33a0d9584f15f52
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
F5ElHelper.dll
- IMPHASH 90302400c433959562fff415c4b849f0
- SHA256 c3bce809bcb4ab3673ab6d6d4f50d93512ea535ad339a820b379ddd18c34c79b
- MD5 1e90fd94f02ec346116446858a4877b0
- SHA1 33d4437f4932bb903ab6903faf4ef65ecb0cad06
- SHA512 3749fbfee6de0fb8a0b42ccd370876aaaeb15067881479e3c95ae39f2c4954ef48fbe60f6ed6e7c749a100c9c1ddd69a4a568324b7b22ab77d71b58c25043cd1
- SSDEEP 3072:aGwwpj1+5GpxSQUt3YcLXEJWoskaTCsN2OzIlGYnm6y6PEMAJ2lrM8jtKTr:Xwwpj1+Yp7U3lloskSCczE8fV8kf
- TLSH T194248D1175C1C43EC57F023444BADB369A3CA8604FB499DF739D4E6A5FB01C0AA39EA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fc:d5:3c:0b:c3:42:06:df:38:03:82:e6:04:56:eb:bb:54:38:71:04:47:41:87:50:ec:f3:a9:53:e8:33:5d:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
47744
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\ElevationHelper\out\Release\f5ProxyStubDll.pdb
kernel32
FindNextFileA
LeaveCriticalSection
lstrlenA
FindClose
LocalAlloc
CreateFileW
GetCurrentThreadId
GetModuleHandleA
GetLocaleInfoA
GetTempPathA
GetSystemDirectoryA
GetVersionExA
GetSystemInfo
HeapAlloc
LocalFree
GetCurrentProcessId
GetProcessHeap
WideCharToMultiByte
GetUserDefaultUILanguage
GetSystemTime
FormatMessageA
GetTempFileNameA
CreateEventA
QueryPerformanceCounter
DisableThreadLibraryCalls
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
HeapReAlloc
HeapSize
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
WriteFile
LCMapStringW
SetFilePointerEx
GetSystemDefaultUILanguage
GetCurrentProcess
EnterCriticalSection
HeapFree
FindFirstFileA
GetModuleFileNameA
FlushFileBuffers
CreateProcessA
InitializeCriticalSectionAndSpinCount
DeleteFileA
GetFileAttributesA
CopyFileA
TerminateProcess
FreeLibrary
DeleteCriticalSection
GetProcAddress
DecodePointer
RaiseException
CloseHandle
LoadLibraryA
GetLastError
MultiByteToWideChar
ReleaseMutex
WaitForSingleObject
CreateMutexA
SetStdHandle
GetStringTypeW
GetStdHandle
GetACP
GetModuleHandleExW
ExitProcess
SetEndOfFile
GetFileType
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
GetModuleHandleW
CreateEventW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringW
IsDebuggerPresent
WriteConsoleW
advapi32
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
RegEnumKeyExA
GetTokenInformation
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
oleaut32
BSTR_UserSize
BSTR_UserFree
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserSize
BSTR_UserUnmarshal
VARIANT_UserMarshal
BSTR_UserMarshal
rpcrt4
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_Invoke
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
NdrOleFree
CStdStubBuffer_AddRef
IUnknown_Release_Proxy
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
NdrOleAllocate
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
wininet
InternetSetOptionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Run
Name
.text
Size
127KB
Virtual Size
127KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
355B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=24610,
count=154, id=261, version=24610,
count=18, id=260, version=24610,
count=16, id=260, version=29804,
count=20, id=259, version=29804,
count=40, id=261, version=29804,
count=19, id=257, version=24610,
count=262, id=1, productName=Unmarked objects,
count=8, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
F5ElHelper.exe
- IMPHASH c2a86eb835b71e9d33e8a860dc8b400b
- SHA256 ee8ebcf1f638f87950ce6a698cd30c68d273701aefea9f3d61d3222bb45c130c
- MD5 ca3ee4ccb12518b56f34a76206a66921
- SHA1 c880d5598a122e369c0a6961fa1a564c1353ebfc
- SHA512 b2ecc055a86b5457d7aefca5ac3cbfdcd83870db24b8ef3f5e011362bb671f8c1c765bf0c0f3a43948504e57065545ed8fdd4b0c7130db3ff6445a772d8fc89e
- SSDEEP 12288:IVrn/+snmxfkXNLveHmZX5HBeIqHRIK0mwbjMDMYLAcjQxOWXNN4hg2:IrhB35HB7M0xMDMYsOsN4hg2
- TLSH T14CC46B20746AE834C97342F44D6CE77FE81CA8305BB901D373BC161879599E29B3BE66
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ac:72:86:3f:dc:6e:48:e0:8e:c0:d8:bf:8d:37:be:cd:e9:f8:35:ae:6e:14:6e:95:3f:b3:23:63:18:5d:28:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
283376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\ElevationHelper\out\Release\f5ElevationHelper.pdb
kernel32
SetEvent
GetSystemDirectoryA
GetVersionExA
GetSystemInfo
VerSetConditionMask
GetCurrentProcessId
WideCharToMultiByte
VerifyVersionInfoW
CreateDirectoryA
GetSystemTime
FormatMessageA
GetTempFileNameA
CreateEventA
QueryPerformanceCounter
GetTickCount
SizeofResource
LoadLibraryExA
FindResourceA
GetCommandLineA
CreateThread
IsDBCSLeadByte
LoadResource
GetLocalTime
lstrcmpiA
IsWow64Process
SetUnhandledExceptionFilter
OpenEventA
TerminateThread
WritePrivateProfileStringA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetTempPathA
IsValidCodePage
FindFirstFileExA
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
LCMapStringW
SetFilePointerEx
SetStdHandle
GetStringTypeW
HeapReAlloc
HeapSize
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
SetEndOfFile
GetFileType
LoadLibraryExW
Sleep
GetLocaleInfoA
GetModuleHandleA
CreateFileW
FindClose
lstrlenA
InitializeCriticalSection
LeaveCriticalSection
FindNextFileA
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
EnterCriticalSection
FindFirstFileA
GetModuleFileNameA
GetProcessHeap
LocalFree
HeapAlloc
VirtualProtect
LocalAlloc
HeapFree
FlushFileBuffers
SetFileAttributesA
DeleteFileA
CreateFileA
MoveFileExA
GetFileAttributesA
CopyFileA
TerminateProcess
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateProcessA
CloseHandle
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionEx
SetLastError
VirtualQuery
FlushInstructionCache
GetLastError
GetCurrentThreadId
VirtualAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetModuleHandleExA
GetCurrentProcess
VirtualFree
GetOEMCP
WriteConsoleW
user32
LoadStringA
SetWindowPos
DestroyWindow
LoadCursorA
GetWindowRect
ShowWindow
CallWindowProcA
PostThreadMessageA
GetClassInfoExA
wsprintfA
GetMessageA
CharNextA
SetFocus
GetClientRect
RegisterClassExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
CreateWindowExA
DispatchMessageA
UnregisterClassA
ShutdownBlockReasonDestroy
ShutdownBlockReasonCreate
gdi32
GetStockObject
advapi32
AllocateAndInitializeSid
OpenServiceA
DeleteService
OpenSCManagerA
RegQueryInfoKeyW
ConvertSidToStringSidA
LookupAccountSidA
ConvertStringSidToSidA
RegDeleteKeyA
GetSidSubAuthorityCount
GetSidSubAuthority
RegCreateKeyExW
ControlService
CheckTokenMembership
RegOpenKeyExW
RegEnumKeyExA
IsValidSid
OpenProcessToken
FreeSid
GetLengthSid
GetTokenInformation
RegCreateKeyExA
RegFlushKey
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
CreateServiceA
CloseServiceHandle
ole32
CoTaskMemFree
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoRegisterClassObject
CoTaskMemRealloc
CoRevokeClassObject
oleaut32
SysAllocString
SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString
rpcrt4
UuidToStringA
RpcEpRegisterA
RpcBindingInqAuthClientA
RpcServerInqBindings
UuidCreate
RpcServerUnregisterIf
RpcMgmtWaitServerListen
RpcServerRegisterIfEx
RpcServerListen
NdrServerCall2
RpcServerUseProtseqEpA
RpcMgmtStopServerListening
RpcServerUseProtseqA
RpcStringFreeA
mpr
WNetCancelConnection2A
WNetAddConnection3A
rasapi32
RasSetEntryPropertiesW
RasSetEntryPropertiesA
traffic
TcDeleteFilter
TcCloseInterface
TcDeleteFlow
TcAddFlow
TcAddFilter
TcRegisterClient
TcEnumerateInterfaces
TcDeregisterClient
TcOpenInterfaceW
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
setupapi
SetupDiChangeState
SetupDiGetClassDevsA
SetupDiSetClassInstallParamsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
wininet
InternetSetOptionA
InternetSetOptionW
ws2_32
htonl
htons
inet_addr
WSASetEvent
Name
.text
Size
378KB
Virtual Size
378KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=24610,
count=158, id=261, version=24610,
count=18, id=260, version=24610,
count=54, id=261, version=29804,
count=18, id=260, version=29804,
count=20, id=259, version=29804,
count=1, id=262, version=24610,
count=31, id=257, version=24610,
count=354, id=1, productName=Unmarked objects,
count=27, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
F5ElHelper64.dll
- IMPHASH f1266dc976390700e9546b4c0a18dcc3
- SHA256 05075c957b1a8c350b3eb180b4175150696191583ca447903657ae65960ba4fa
- MD5 5da92ff174fd425b6bdb9985ab71015c
- SHA1 dea4b714d391ce446549433b7252b9589ab82b7e
- SHA512 5ab872518cd24efe4c90ed406967d4ccd7909a35807e27496951c337113f35bd04ef5b9685a0cd0196a023ba353cc10b0bfe32581c461c2e7a83653af6f85d38
- SSDEEP 3072:kpj9iT/xFUqGrc48qfunz4c7xxFA52jvdu80+jWrq36GR2vfXkYPJyrboWMaaUeC:YaJWTc48SK4c742E6KiIKV3jn
- TLSH T12E447C4C73940D75ECA7C239C4A35916F7B2BC0147B5DAEF1394426A9F2B3C0AA3AB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0a:2f:c8:09:40:86:4e:a1:11:22:72:72:9c:e8:1f:59:b5:e9:6a:ac:eb:51:af:c0:09:d1:d5:2b:8e:e5:d7:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
50320
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\ElevationHelper\out\Release\f5ProxyStubDll64.pdb
kernel32
FindNextFileA
LeaveCriticalSection
lstrlenA
FindClose
LocalAlloc
CreateFileW
GetCurrentThreadId
GetModuleHandleA
GetLocaleInfoA
GetTempPathA
GetSystemDirectoryA
GetVersionExA
GetSystemInfo
HeapAlloc
LocalFree
GetCurrentProcessId
GetProcessHeap
WideCharToMultiByte
GetUserDefaultUILanguage
FormatMessageA
GetTempFileNameA
CreateEventA
QueryPerformanceCounter
DisableThreadLibraryCalls
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
HeapReAlloc
HeapSize
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
WriteFile
LCMapStringW
SetFilePointerEx
SetStdHandle
GetSystemDefaultUILanguage
GetCurrentProcess
EnterCriticalSection
HeapFree
FindFirstFileA
GetModuleFileNameA
FlushFileBuffers
CreateProcessA
DeleteFileA
GetFileAttributesA
CopyFileA
TerminateProcess
InitializeCriticalSectionAndSpinCount
FreeLibrary
DeleteCriticalSection
GetProcAddress
RaiseException
CloseHandle
LoadLibraryA
GetLastError
MultiByteToWideChar
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetSystemTime
GetStringTypeW
GetStdHandle
GetACP
GetModuleHandleExW
ExitProcess
SetEndOfFile
GetFileType
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
GetModuleHandleW
CreateEventW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent
advapi32
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
RegEnumKeyExA
GetTokenInformation
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
oleaut32
BSTR_UserSize
VARIANT_UserSize64
VARIANT_UserMarshal64
BSTR_UserFree
BSTR_UserUnmarshal64
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserSize
BSTR_UserUnmarshal
VARIANT_UserMarshal
BSTR_UserMarshal
VARIANT_UserFree64
VARIANT_UserUnmarshal64
BSTR_UserFree64
BSTR_UserSize64
BSTR_UserMarshal64
rpcrt4
IUnknown_QueryInterface_Proxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_Invoke
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
wininet
InternetSetOptionA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Run
Name
.text
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
281B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=24610,
count=6, id=259, version=24610,
count=151, id=261, version=24610,
count=16, id=260, version=29804,
count=9, id=259, version=29804,
count=41, id=261, version=29804,
count=19, id=257, version=24610,
count=277, id=1, productName=Unmarked objects,
count=8, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
urxhost.dll
- IMPHASH 4ef0e3ebe12e28ec2bcb08a98f096b0f
- SHA256 34f1a9d5a01da6f99c2be90d6d7add3f59eea951676c993d947412f8686b5603
- MD5 6bf060b531946a4d6aad1b9cab0ba02f
- SHA1 94b5a634d2d6ccd6148d23f8ea4e07c13739d2c3
- SHA512 344457c15537eaa3a35c99f5323d91d08e5f737ac17022c8c0212f8495340c042dec105460dcbd18c8d2e45de15c73827162257385586afae172d7088da1c03b
- SSDEEP 49152:o+a7hcdRv/xx8LLDsR+7+cyjZqcnpIkv4F0C1p/pfec6+yX9g27Mlu2eABm+:Ja7hM/xx8LLIRO+cAqcnpIkv4F0CH/pJ
- TLSH T171955C23BA1EC032E5BD10B49D2C77EFE02C6573273604C362949EA86B685D26635F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
56:2c:98:8f:73:42:27:df:54:f0:83:16:e1:f6:2e:b4:19:22:4f:04:3d:2b:9c:95:2a:8f:bb:81:fc:12:02:3f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
1228592
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\ActiveXHost\out\Release\f5ActiveXHost.pdb
bcrypt
BCryptGenRandom
mpr
WNetGetConnectionA
WNetAddConnection3A
WNetCancelConnection2A
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
setupapi
SetupOpenInfFileA
SetupInitDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupDefaultQueueCallbackA
SetupCloseInfFile
SetupInstallFromInfSectionA
SetupTermDefaultQueueCallback
wininet
InternetSetCookieA
InternetSetStatusCallback
InternetCloseHandle
InternetErrorDlg
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetSetOptionA
InternetQueryOptionA
InternetOpenA
InternetCrackUrlA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetQueryDataAvailable
comctl32
ord17
kernel32
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
GetExitCodeProcess
GetFileSize
CreateFileW
GetFileAttributesExA
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetLongPathNameA
GetEnvironmentVariableA
GetCurrentProcessId
ResetEvent
CreateMutexA
ReleaseMutex
GetLocaleInfoA
GetModuleHandleExA
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemTime
QueryPerformanceCounter
CallNamedPipeA
ReadFile
WriteFile
SetNamedPipeHandleState
WaitNamedPipeA
lstrcpyA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
SetCurrentDirectoryA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileTime
CompareFileTime
GetCurrentThread
GetSystemTimeAsFileTime
lstrcpyW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVersionExA
GetSystemInfo
VerifyVersionInfoW
GetStdHandle
GetDateFormatA
WriteConsoleW
GetConsoleMode
SetEndOfFile
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualProtect
LoadLibraryExW
TlsSetValue
TlsGetValue
InterlockedFlushSList
RtlUnwind
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
GetStringTypeExA
GetUserDefaultLCID
LCMapStringA
LCMapStringW
GetStringTypeW
GetCPInfo
CompareStringEx
LCMapStringEx
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
VerSetConditionMask
lstrlenA
MoveFileExA
FlushFileBuffers
CreateFileA
TerminateProcess
CreateProcessA
CopyFileA
SetFileAttributesA
CreateThread
GetLogicalDriveStringsA
GetExitCodeThread
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetTimeZoneInformation
SetStdHandle
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
CompareStringW
GetFileAttributesA
ExpandEnvironmentStringsA
lstrlenW
GlobalFree
GlobalHandle
DeleteFileA
WritePrivateProfileStringA
GetSystemDirectoryA
SetThreadExecutionState
Sleep
EncodePointer
DecodePointer
DisableThreadLibraryCalls
InitializeCriticalSectionEx
GetTickCount
LoadLibraryExA
FindResourceA
IsDBCSLeadByte
lstrcmpiA
OpenEventA
CreateEventA
lstrcmpA
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
HeapSize
RaiseException
GetModuleFileNameA
InitializeCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentThreadId
GetModuleHandleA
SetLastError
TlsFree
MultiByteToWideChar
FindFirstFileA
SetEvent
TerminateThread
WaitForMultipleObjects
DeleteCriticalSection
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
WideCharToMultiByte
FormatMessageW
FormatMessageA
FreeLibrary
CloseHandle
GetCurrentProcess
HeapFree
LocalAlloc
LocalFree
GetProcessHeap
HeapAlloc
GetLastError
GetProcAddress
LoadLibraryA
ReadConsoleW
GetConsoleCP
SetFilePointerEx
ExitProcess
GetACP
HeapReAlloc
user32
BeginPaint
EndPaint
GetWindowTextLengthA
GetWindowTextA
GetMessageA
ReplyMessage
DialogBoxParamA
OpenInputDesktop
GetUserObjectInformationA
IsChild
GetFocus
RegisterWindowMessageA
UnregisterClassA
PostThreadMessageA
CloseDesktop
PostMessageA
SetTimer
UpdateWindow
KillTimer
PeekMessageA
SetWindowRgn
DispatchMessageA
TranslateMessage
MessageBoxA
PostQuitMessage
DialogBoxIndirectParamA
GetForegroundWindow
BringWindowToTop
EnableWindow
wsprintfA
EndDialog
IsWindowVisible
SetWindowContextHelpId
GetSystemMetrics
GetDlgItemTextA
SetDlgItemTextA
PtInRect
UnionRect
IntersectRect
EnumWindows
LockWorkStation
ShowWindow
MsgWaitForMultipleObjects
OffsetRect
RegisterClassExA
LoadCursorA
DefWindowProcA
SetWindowLongA
GetWindowLongA
DestroyAcceleratorTable
GetDesktopWindow
ReleaseDC
GetDC
InvalidateRect
CallWindowProcA
InvalidateRgn
GetClientRect
FillRect
ReleaseCapture
SetCapture
MoveWindow
ScreenToClient
EqualRect
GetParent
ClientToScreen
CreateAcceleratorTableA
DestroyWindow
CreateWindowExA
GetClassInfoExA
RedrawWindow
SetWindowPos
CharNextA
GetSysColor
GetClassNameA
IsWindow
SendMessageA
GetDlgItem
GetWindow
SetFocus
GetWindowThreadProcessId
LoadStringA
IsIconic
CreateDialogParamA
SetLayeredWindowAttributes
SetForegroundWindow
SendDlgItemMessageW
MapDialogRect
SetWindowTextA
gdi32
SaveDC
SetMapMode
CreateDCA
SetWindowOrgEx
SetViewportOrgEx
RestoreDC
CreateRectRgnIndirect
Rectangle
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
BitBlt
DeleteDC
GetStockObject
GetObjectA
LPtoDP
GetDeviceCaps
SelectObject
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
CheckTokenMembership
GetSidSubAuthority
GetSidSubAuthorityCount
LookupAccountSidA
ConvertStringSidToSidA
ConvertSidToStringSidA
RegFlushKey
LsaClose
LsaFreeMemory
LsaQueryInformationPolicy
LsaOpenPolicy
GetUserNameA
CredReadA
CredFree
CryptDecrypt
CryptReleaseContext
CryptDestroyKey
CryptSetKeyParam
CryptImportKey
CryptGenRandom
CryptAcquireContextA
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyW
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
CloseServiceHandle
FreeSid
AllocateAndInitializeSid
OpenProcessToken
IsValidSid
GetLengthSid
GetTokenInformation
MapGenericMask
RegCreateKeyA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumValueA
shell32
ShellExecuteExA
ole32
CoTaskMemRealloc
CoGetObject
CoInitialize
CoUninitialize
CoInitializeEx
IIDFromString
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
OleUninitialize
StringFromCLSID
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
CreateStreamOnHGlobal
OleLockRunning
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
oleaut32
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
VarUI4FromStr
SysAllocStringByteLen
OleCreateFontIndirect
OleCreatePropertyFrame
VariantChangeType
VarBstrCat
VarCmp
VariantCopy
VarBstrCmp
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
SysStringByteLen
shlwapi
PathFileExistsA
urlmon
CreateURLMoniker
ws2_32
ntohl
recvfrom
sendto
accept
listen
getsockopt
__WSAFDIsSet
ioctlsocket
select
setsockopt
htonl
bind
recv
send
connect
htons
closesocket
shutdown
gethostbyname
getpeername
inet_ntoa
freeaddrinfo
getaddrinfo
inet_addr
ntohs
WSAGetLastError
WSAStringToAddressW
WSASetLastError
WSACleanup
WSAStartup
WSAAddressToStringA
getnameinfo
inet_pton
WSAStringToAddressA
socket
rpcrt4
RpcEpRegisterNoReplaceA
NdrClientCall2
RpcStringFreeA
RpcBindingFree
RpcBindingSetAuthInfoExA
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcEpUnregister
RpcSsDestroyClientContext
crypt32
CertOpenStore
CertDuplicateCertificateContext
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertGetCertificateContextProperty
CertGetNameStringA
CertCloseStore
CertFreeCertificateContext
CertFindChainInStore
CertGetCertificateChain
CryptFindOIDInfo
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerUser
DllUnregisterServer
DllUnregisterServerUser
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
355KB
Virtual Size
355KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
113KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=259, version=24610,
count=179, id=261, version=24610,
count=22, id=260, version=24610,
count=16, id=260, version=29804,
count=24, id=259, version=29804,
count=6, id=261, version=29912,
count=84, id=261, version=29804,
count=12, id=262, version=24610,
count=39, id=257, version=24610,
count=536, id=1, productName=Unmarked objects,
count=29, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=2, id=151,
count=1, id=258, version=29912,
urxhost.inf
- SHA256 e9356ee15732e1d8623fee2d19a19907ca074a3829c8699a21cee0c01961510a
- MD5 140ce802f63588df138611bc8954d9bd
- SHA1 f10fa5b3c192c33c8871c8dc275df810fc758284
- SHA512 9477157d5c5f8942b7b7b78bc31d03664eaddbd404881592e68224663d6523d01e43031f2598634b0857d632d272ed9801174f82765c9e31ad63de89e0f14a85
- TLSH T19801F519C05B0BED04591A6CC1A223A4ABDB63EC9F683918710277A70996D1C57B0DFE
- MD5 SHA1 SHA512 TLSH
urxhostres.dll
- SHA256 9fa1037fb6e983d79605d9d6b9f5a20133d73ae475950fbd453c2eb041503442
- MD5 c1db1334065c1be60a23bbdf227ce92c
- SHA1 c17146a8d239e0941d26adb98358c7ff23f37fdb
- SHA512 c29f8f800814279785636ce6cdd9e04ea0ef51076f1b96142048f326f3d2848a318b4e38ce42f8a2fa40e30c6f47b96b5aac2facf11e3a85afbc33c82b5a3050
- SSDEEP 3072:4qp0EL1JcI5Q05g51PkhasoztFVJncguSQKT5:i1PkhasozDt1
- TLSH T12BD3FA2653F98A05F1F2BF30AE7646911E36FC91AE39C64E4205589E1870F64EE31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
46:93:70:95:4c:b6:4a:96:06:9c:77:e4:30:82:86:4e:b3:5c:0d:b5:09:4a:6d:86:13:d8:25:e0:5b:a9:07:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\ActiveXHost\out\Release\f5ActiveXHostRes.pdb
Name
.rdata
Size
512B
Virtual Size
320B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/F5_TMP/urxshost.cab
- SHA256 319d757865bb6a41eaaad6d4ceffe69dc6d601cc06e2bd0cc5df8a8b4a3ced01
- MD5 8b5aec64b4ecc0e277df28f1acfbb25b
- SHA1 5ae811b4a94fdcd44f31f630080981b2d4f6a301
- SHA512 471ff2b2d7d0030a605c3a8acb28b058718267158be81876141ff0367bdddacf27826e2bc752fde8ef15b3c898139dca857e9171b00c9aec167a5f4e28f652aa
- SSDEEP 24576:9nkGjN2jW7NTrz3A/RxApsiDKzwN+PkAmc+36rjLpvvq3ZUwvTSrXl:9kWN2jeVA/fcsiDykJurHFvq3TvGr
- TLSH T108753320C6743B73D87A986C33A7C735A377C86980EB94F483D1616E570DD9C8EA06B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4dcf1f553d8956258aa1d68dbd13f0fd86812f3d0cb92856f706083d19dadbae
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
big_ip_client_2026/F5 VPN/F5_TMP/urxvpn.cab
- SHA256 cb2ab328d34c1dfd8b0244d8b0487bb33b46bcc328f8098b043db75576cd3f72
- MD5 f54d736601ee1b77f360c76000513199
- SHA1 6b9e656993bd423d3fc4ddf3eba6beeb81508bb0
- SHA512 2324304891f445a98016fa9b333cc2c8ae348bba75224caff4ef107c568505cad4a8d1e7b3630c29038f19cf37f59e6639dc89375b20c4ec2b536a3ba93add9b
- SSDEEP 24576:gmnG2fuQGPsbca/vgyLifjaWY2F/74Qk5s20/c5DOV96Ld:PnbGLEQalLiraWY2Ct5sp6DOL6
- TLSH T1A97533D30B941799D8D6F5794486A11F3C8E0A3FDE881A83381789C168DBB762F1E27D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
402a6a649277473e20830f464cc153ba1ea8100ea1c98b1cab65302ec250c897
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
big_ip_client_2026/F5 VPN/F5_TMP/vdeskctrl.cab
- SHA256 6db1a83cf73e38b52d2393de4f5cfb620429067f21b35ccbbbd3976e88bf4191
- MD5 c76066fa5d2f9b0c5a83dc9a9c76e33c
- SHA1 dcefbdc216af1a5b8114255feabd530711190915
- SHA512 45fbbffd1ebfe1f9c1ab646b6451bd732ea3eddc3b0bcf530c6c0d74ec11eba19c499bb6e62d19d60a880052bb3c8d012999e672ceea9756b4805f271b32bc93
- SSDEEP 24576:g+AFZHBym0z0uWt5Z0rXlNy+NoRBBxReerZ4I7OZ/7uV+8yZ8fdeL6fQF2toe/Q/:PIZHBu0F6pQ+uxRe27hN0qdeL6fY2t5G
- TLSH T1544533928A37719CC91AAD2DC3F9ECB7DC56D4EAC662784833E8E4700BB44718279DD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1ce69544bc952e8ed0ac5cbcd4d4c7033a9147629ecc22af10633747a73ef6f
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
big_ip_client_2026/F5 VPN/amd64/F5FltDrv.sys
- IMPHASH efee26af5a71c2edde5a5c1d4507a745
- SHA256 ab5c8cd7382d2b8ba769a6315a67361d028936a95e5ca2f8b400450715fcfedc
- MD5 02d45ac8d7194adf647cadf73ba0da59
- SHA1 6142a950c3d3153a1c6d83277cd84398a00c9612
- SHA512 ec619d0f501df3788c4b1a90f820c3739325364126a8608df5264f6523f54a4af8060c387d9eb1ac1e8a3873fb8c61c2ebd32138d00e0448057ed7a0156c3608
- SSDEEP 768:m9wm9D+j32wb78F8W3aXr5I7s4cTYX8+EuabFR1krdBkbOKXOPleMuyO:u+j3pTXCxr0TS4uleMuyO
- TLSH T1B6437DC663BC11C1F5EBC63482E59257FE70F6823752C6DF06A5C5A01EA3BE0A639316
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d7:91:8e:a8:65:c1:63:f3:d6:62:86:21:86:fe:00:97:8a:0c:ed:3a:bb:40:b2:b8:0a:b2:23:c6:0c:e2:18:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 11, 2018
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
b0:db:60:9e:fc:16:78:de:4a:74:26:32:3f:7c:e9:77:79:91:5a:5b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
Chains
Apr 26, 2018
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
Serial Number
12:3b:92:d6:69:6f:02:74:00:00:00:00:55:66:25:5d
Issuer
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 25, 2017 - Dec 12, 2019
Subject
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
43:c1:0b:1c:00:00:00:00:51:d3:73:da
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 10, 2015 - Nov 10, 2030
Subject
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2015 - Jul 7, 2025
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58
Issuer
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 1, 2017 - Nov 1, 2018
Subject
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0b:aa:c1:00:00:00:00:00:09
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a7:64:5d:c5:28:0f:01:3d:44:00:00:00:00:00:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
10
Entry point
53624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
G:\cc-builds\apm-main-win\1003745\src\rh\TerminalProxy\AppTunnelPortRedirector\driver\out\Release\x64\F5FltDrv.pdb
ntoskrnl.exe
IofCompleteRequest
MmIsAddressValid
RtlInitUnicodeString
RtlIsNtDdiVersionAvailable
KeInitializeEvent
KeQueryTimeIncrement
MmGetSystemRoutineAddress
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoGetDeviceObjectPointer
ObfDereferenceObject
IoAttachDeviceToDeviceStackSafe
KeClearEvent
KeSetEvent
KeWaitForMultipleObjects
KeWaitForSingleObject
ExInterlockedInsertTailList
ExInterlockedRemoveHeadList
PsCreateSystemThread
PsTerminateSystemThread
KeReleaseSpinLock
ZwClose
sprintf
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
PsGetCurrentProcessId
IoAllocateIrp
IofCallDriver
IoFreeIrp
RtlCompareMemory
MmAllocateNonCachedMemory
MmFreeNonCachedMemory
MmProbeAndLockPages
IoAllocateMdl
IoBuildDeviceIoControlRequest
IoFreeMdl
IoGetRelatedDeviceObject
ZwCreateFile
__C_specific_handler
KeBugCheckEx
ObReferenceObjectByHandle
KeAcquireSpinLockRaiseToDpc
ZwSetSecurityObject
IoDeviceObjectType
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
ExFreePoolWithTag
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
ExAllocatePoolWithTag
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
ZwOpenKey
ZwSetValueKey
ZwQueryValueKey
ZwCreateKey
RtlFreeUnicodeString
RtlAnsiCharToUnicodeChar
tdi.sys
TdiMapUserRequest
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=262, version=24610,
count=73, id=1, productName=Unmarked objects,
count=5, id=257, version=24610,
count=4, id=261, version=24610,
count=6, id=259, version=24610,
count=14, id=260, version=24610,
count=8, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
big_ip_client_2026/F5 VPN/amd64/F5FltSrv.exe
- IMPHASH 6643854ea75998df8bb831250fa6e26b
- SHA256 8df343affe3725ab083719d60eade1f7a77986673cc1940dfc56f17ff9be6234
- MD5 d770374e65c1867e85eaf81043f27fe0
- SHA1 ae4b3e6209b9dfb9f984ef4ee60219144b8cee34
- SHA512 c7dce95bfc954faa4dd039147501d4ac055fe9c2204919b95005b0d7a3cf71ac0bd91a8d54de938fbf4a6e4dabe829509e4f20e1f75f3cb9a71e364e3646c84f
- SSDEEP 12288:kNHMwsxbYPisrcfTXyHtixIpAoTRFYCwLA9w6qK+fM+9:+stbYK1OfoCwLA9XqnfM+9
- TLSH T1BC05196CE3C903A4D4F6D238C6636417E571B8154B3A96EF0183569D1E33AA0EF3BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b7:58:52:9d:d6:cf:e7:a7:8e:54:95:a4:b6:48:34:b5:31:80:32:78:61:83:8d:58:3b:96:52:07:65:a1:16:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
411648
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\AppTunnelPortRedirector\out\Release\f5FltRedirSrv64.pdb
rpcrt4
NdrServerCallAll
NdrServerCall2
RpcBindingSetAuthInfoExW
RpcMgmtStopServerListening
RpcServerUseProtseqEpW
RpcServerRegisterIfEx
RpcServerListen
RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingFree
NdrClientCall3
ws2_32
WSAStringToAddressW
WSAEnumNetworkEvents
sendto
recvfrom
recv
listen
inet_addr
bind
accept
WSACleanup
WSAStartup
WSAAddressToStringW
ntohs
ntohl
htons
inet_ntoa
WSAResetEvent
WSARecv
WSAGetOverlappedResult
WSACreateEvent
socket
send
connect
closesocket
inet_pton
htonl
InetNtopW
WSAGetLastError
WSAEventSelect
iphlpapi
GetAdaptersAddresses
CancelMibChangeNotify2
GetUnicastIpAddressEntry
NotifyUnicastIpAddressChange
dnsapi
DnsReplaceRecordSetW
DnsAcquireContextHandle_W
kernel32
FlushFileBuffers
GetTempPathW
GetLastError
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetSystemTime
GetTickCount
GetVersionExW
CloseHandle
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
FindFirstFileW
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageW
lstrlenW
CopyFileW
GetComputerNameW
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
DeviceIoControl
SetUnhandledExceptionFilter
GetLocalTime
DuplicateHandle
GetHandleInformation
TerminateThread
GetSystemTimeAsFileTime
GetCommandLineA
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RtlUnwindEx
RaiseException
RtlPcToFileHeader
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
FindClose
DeleteFileW
CreateFileW
GetModuleHandleExW
VerSetConditionMask
GetCommandLineW
GetACP
GetStringTypeW
GetFileType
CompareStringW
LCMapStringW
GetConsoleCP
GetConsoleMode
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetEndOfFile
WriteConsoleW
RtlCaptureContext
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
user32
LoadStringW
wsprintfW
advapi32
RegNotifyChangeKeyValue
LogonUserW
RevertToSelf
ImpersonateLoggedOnUser
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
ConvertStringSidToSidW
StartServiceW
QueryServiceStatusEx
QueryServiceStatus
CreateServiceW
LookupAccountSidW
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Name
.text
Size
567KB
Virtual Size
566KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
185KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=148, id=261, version=24610,
count=18, id=260, version=29804,
count=8, id=259, version=29804,
count=49, id=261, version=29804,
count=19, id=257, version=24610,
count=318, id=1, productName=Unmarked objects,
count=7, id=259, version=24610,
count=11, id=260, version=24610,
count=8, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/amd64/F5PrelogonHelperService64.exe
- IMPHASH 25dc4aefd395829275d606419499c7a7
- SHA256 02f1894daad72d76bad3c19ec664e0c90847a2c834e6db1ac581b2e4ecf5b922
- MD5 53e4c50cea058cc36c1bbb635b2afcbf
- SHA1 822c6967d3f13dc024f38d06fdd6d3f44a27ad7c
- SHA512 d8de187f1de1dfe9788597a37f7e880859dafe0af53e5df9310a41b50915a5f93a8656d4f6b71481c5e2f8951df41cb70451688bc73fdd3c269a98e295ad12da
- SSDEEP 6144:0CORlxjohvYov6esv1fPNvNFzSTohjlAbJ73GjzF:0fLoDCJ9fPFzEoxKJ6fF
- TLSH T119941955F7F808F8F0B39274CCB29516EA72BC5A47718AEF2364425A0F236D09D7A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ee:24:ce:e3:ac:24:34:a5:4f:3c:01:2a:6c:db:1b:e7:8a:6d:63:ae:0f:79:64:a7:6d:5e:dc:7b:d4:0f:be:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
95312
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\F5PreLogonHelperService\x64\Release\F5PrelogonHelperService.pdb
advapi32
RegQueryValueExW
RegOpenKeyExW
FreeSid
RegEnumKeyExW
AllocateAndInitializeSid
RegCloseKey
GetTokenInformation
OpenThreadToken
GetUserNameW
GetLengthSid
StartServiceCtrlDispatcherW
CreateProcessAsUserW
OpenProcessToken
ImpersonateLoggedOnUser
InitializeSid
RegisterServiceCtrlHandlerW
CopySid
GetSidLengthRequired
GetSidSubAuthority
SetServiceStatus
SetTokenInformation
EqualSid
PrivilegeCheck
RevertToSelf
secur32
LsaFreeReturnBuffer
LsaLogonUser
rpcrt4
RpcRevertToSelfEx
RpcMgmtStopServerListening
NdrServerCallAll
NdrServerCall2
RpcServerUseProtseqEpW
I_RpcBindingIsClientLocal
RpcServerListen
RpcServerUnregisterIf
RpcServerRegisterIfEx
RpcImpersonateClient
userenv
LoadUserProfileW
UnloadUserProfile
CreateEnvironmentBlock
DestroyEnvironmentBlock
kernel32
HeapReAlloc
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
FindFirstFileW
HeapFree
EnterCriticalSection
FindNextFileW
GetCurrentProcess
lstrlenW
GetModuleHandleExW
GetSystemDefaultUILanguage
GetModuleFileNameW
GetUserDefaultUILanguage
LeaveCriticalSection
InitializeCriticalSection
GetTempPathW
FindClose
GetLocaleInfoW
WaitForSingleObject
CreateFileW
GetCurrentThreadId
GetVersionExW
ReleaseMutex
CreateEventW
MultiByteToWideChar
FormatMessageW
GetLastError
OutputDebugStringW
SetEvent
DeleteFileW
GetOEMCP
GetSystemInfo
LoadLibraryW
HeapAlloc
GetProcAddress
LocalFree
DeleteCriticalSection
VerSetConditionMask
FindFirstFileExW
GetProcessHeap
GetModuleHandleW
FreeLibrary
CopyFileW
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
QueryPerformanceCounter
FlushFileBuffers
GetVolumeInformationW
LocalAlloc
SetInformationJobObject
SetLastError
RegisterWaitForSingleObject
AssignProcessToJobObject
TerminateProcess
CreateJobObjectW
GetQueuedCompletionStatus
ResumeThread
DuplicateHandle
OpenProcess
QueueUserWorkItem
ProcessIdToSessionId
GetCurrentThread
CreateThread
UnregisterWaitEx
TerminateJobObject
CreateIoCompletionPort
GetConsoleOutputCP
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsValidCodePage
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
HeapSize
WriteConsoleW
SetEndOfFile
CloseHandle
RtlUnwind
user32
wvsprintfW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
crypt32
CertFreeCertificateContext
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CryptUnprotectMemory
CryptMsgClose
bcrypt
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptGetProperty
Name
.text
Size
243KB
Virtual Size
243KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
127KB
Virtual Size
127KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=27412,
count=19, id=260, version=27412,
count=177, id=261, version=27412,
count=18, id=260, version=29804,
count=10, id=259, version=29804,
count=82, id=261, version=29804,
count=23, id=257, version=27412,
count=291, id=1, productName=Unmarked objects,
count=4, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/amd64/F5TrafficSrv.exe
- IMPHASH dd76c129c5cb47ad9fc7b0857b74407b
- SHA256 ab16f612a9fe76650f0e56e7a36358c1435d41495f5a03ab876558bc9832980a
- MD5 84b91bc4b08bbf6a2c1c017ad2e2972f
- SHA1 9e14c9e4eb5c6c811ee4bf976746dd49b0c61169
- SHA512 32a3de5d7a56f37f9a173b8e1f09a8039a3a7cb3764c7a996c45ba29dd0a07fd3f4c57a72a21cbd9e6ed7ddad3f4509913c8c7b9182b7a04a4c63fee9e1f63cd
- SSDEEP 6144:8vGaXOH+WHaJu1zf1x3bi+vONJYzsp2prHyi8:8jXOHMJSzrXKYzi28
- TLSH T1E0743C5CE68543F0E0E7C239CA838117E171B8518B76A6EF32C756052E375E1EE3BA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:cb:2b:18:96:25:9a:df:a5:d8:6f:36:60:36:f7:a0:a1:49:5d:76:51:3e:8f:22:03:b7:f7:81:fb:d5:d1:0b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
131744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\TrafficMgr\out\Release\f5TrafficMgr64.pdb
traffic
TcDeleteFilter
TcRegisterClient
TcDeleteFlow
TcDeregisterClient
TcAddFilter
TcAddFlow
TcCloseInterface
TcOpenInterfaceW
TcEnumerateInterfaces
rpcrt4
NdrServerCall2
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
RpcServerUseProtseqEpA
RpcServerRegisterIfEx
RpcServerListen
NdrServerCallAll
kernel32
GetTempPathA
CloseHandle
GetLastError
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ReleaseMutex
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetSystemTime
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
LocalFree
FormatMessageA
lstrlenA
CopyFileA
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
HeapReAlloc
GetConsoleMode
GetConsoleCP
GetFileType
LCMapStringW
CompareStringW
GetStringTypeW
GetACP
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FlushFileBuffers
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateFileW
VerSetConditionMask
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
HeapSize
WriteConsoleW
SetEndOfFile
EncodePointer
SetLastError
RtlUnwindEx
RaiseException
RtlPcToFileHeader
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ReadFile
ReadConsoleW
advapi32
RegCloseKey
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ws2_32
htonl
htons
WSASetEvent
Name
.text
Size
229KB
Virtual Size
228KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=145, id=261, version=24610,
count=18, id=260, version=29804,
count=8, id=259, version=29804,
count=47, id=261, version=29804,
count=8, id=259, version=24610,
count=13, id=260, version=24610,
count=19, id=257, version=24610,
count=257, id=1, productName=Unmarked objects,
count=4, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/arm64/F5FltDrv.sys
- SHA256 6a6b4e4ed6e3ba2c2af8191e3f8181d675b70b8cd2fbcc98dcbf5a762198b4bd
- MD5 bd34349a2090189ef3c0dc84a3a075e7
- SHA1 4e7ac66cc22141fcd6040c0fb6bad61153fc1501
- SHA512 a8c4bdae37cd5f74a7995114480c89d25c1db8e2790382f05178c594040d93243c6893e2d7999ab7444ea2d2e75ca8b89eaaa6f25bc50240bbc9de051a28f967
- SSDEEP 768:1rx3BYD3yiwMHN64cTTZz/tX+DSPuFijQhJyKxnVbIayAAb3BXzg9zP0:R9BYD35YNx+DSPuIkyKxnOGAbRDozP
- TLSH T17D338F9196CC2C82FAC6D530E5D4C763783F7BA09A12C06A7136811DDDA37D1DF64276
- MD5 SHA1 SHA512 SSDEEP TLSH
big_ip_client_2026/F5 VPN/arm64/F5FltSrv.exe
- SHA256 a0cfa0e805db1b0f0cd7141e6655c5b9b5c8ea626a82a7a7ae9d5ab42062ece2
- MD5 a823e7a57ff3de19c4d6329305612509
- SHA1 41fa95018f7f97dc90acf5f3988698d3525678eb
- SHA512 6436fd6bd8643b766c70be9d3fe3c4ad7d401d513af4034d222e7a7efd56c663109c2fc87aaad8e251bd071172fdbc24606c20d64bf44361f8d1eac376646fc7
- SSDEEP 24576:ZzzPzPUVJ2/w60yqNGVA93MOTwA00YIAP:Rw6DqR93MDN
- TLSH T1BE15F7649FCC5CBCE6E49BFE6E7146307633B8787620C2CE7162451DEDE2A914B50B22
- MD5 SHA1 SHA512 SSDEEP TLSH
big_ip_client_2026/F5 VPN/arm64/F5PrelogonHelperServiceARM64.exe
- SHA256 6d9bc1310a2a8f13ae0212d592cb0e87a3cddd6d5cc7ceb593eb5cfb526e1222
- MD5 7a6566c51c495d04ab13865e0ed11073
- SHA1 e4fc117dc433a3efe496ed3abf6298e57566b045
- SHA512 a71e4c329034556bc635178f4bc4825ff6c1a7a4d5c855f060ed172b90961910e0efde0c4a3310d807307cd165f075fe10d5ceef0209b40a4afc3f0dbf75210e
- SSDEEP 6144:CLF18cVVMA6YX9Z9EyJUBvmv2JfRrg7+Nl756eqsZOUXEKB:5cVVMA6YXrtUBxftg7+NX6eqKfEKB
- TLSH T1AE841840EFDC6C84F1E2A77CEC768A50653BBDB84930C64F7129424DDEA69C18EA1772
- MD5 SHA1 SHA512 SSDEEP TLSH
big_ip_client_2026/F5 VPN/config.f5c
- SHA256 028be4c74bbfb245be41008c480a34fb53d372a6c6c8d3c592680aa2ffd2c1da
- MD5 8465160af4de69277f688176e5ece367
- SHA1 5e08b61785881a24b1bfc75ed1a702b66ed1bebb
- SHA512 4a2a1f4482d7b6e9d2ac2f881656faa7845418ffca9b936c41443b53bea122d0ede373b2861ef8d10733691fb7caedceb53d52502005d58b0acd010f4c49b5fd
- SSDEEP 1536:qKNhQdqMKNhQdqjKNhQdqJKNhQdqfKNhQdq5KNhQdqTKNhQdqwKNhQdqkKNhQdqE:piyiVifiHidiZi+iYi5
- TLSH T13A73A03566E1B259802D5B93D9EE49F22E30532EC50D9F399C3EB43F0B5E69780C3586
- MD5 SHA1 SHA512 SSDEEP TLSH
big_ip_client_2026/F5 VPN/f5InspectorService.exe
- IMPHASH 2d22dc4b029b4eb3171e78938a1cc85f
- SHA256 f8d92a47384aea3acc356ef808e677ca672ad7d4b4c34c5524a24f4c73751f0f
- MD5 a158f491386b6ec4d5bb769c7c5add23
- SHA1 5393b611d8226143113562eb3a12e295c153c173
- SHA512 a6083b6eb38d4ee427dd6f3c8635f46c48c16691f3a541675900459701270c10d3bad69f4da36ce92c3971ce83f38195cdc33b40d9eb69c1fc1e8a1f797ffcbd
- SSDEEP 12288:kaAybrtLmsf11DdBCKOIvKqXCCuksIu+D+3plYlP:kaA2Lmsf1zX9uiuFylP
- TLSH T1F9D45C203595E935E1B741F04A79967BA53EFC319B7248CBB3D8432D1D20AD26F3263A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ca:71:82:33:60:2c:57:4e:b7:65:9c:b4:61:2f:49:45:cd:39:82:0e:12:42:19:0e:9a:ee:d6:32:71:72:00:ef
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
249024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\InspectionHostService\out\Release\f5InspectorService.pdb
rpcrt4
I_RpcBindingInqLocalClientPID
NdrServerCall2
RpcServerInqBindings
RpcBindingInqAuthClientW
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcServerRegisterIfEx
RpcServerListen
RpcEpRegisterW
kernel32
GetTempPathW
OutputDebugStringW
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResetEvent
ReleaseSemaphore
ReleaseMutex
CreateMutexW
CreateEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateProcessW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
LocalAlloc
lstrcmpA
lstrcpyW
lstrlenW
CopyFileW
VerifyVersionInfoW
FileTimeToSystemTime
MultiByteToWideChar
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
ReadFile
WriteFile
DuplicateHandle
SetLastError
CreateNamedPipeW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CancelIo
InitializeCriticalSectionAndSpinCount
SleepEx
SetWaitableTimer
CreateWaitableTimerW
QueueUserAPC
TerminateProcess
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleA
GetStdHandle
GetCommandLineW
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
GetConsoleScreenBufferInfo
SetConsoleTitleW
AllocConsole
GetConsoleWindow
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
GetACP
CreateWaitableTimerA
ExitProcess
GetFileType
SetStdHandle
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
DeleteFileW
CreateFileW
VerSetConditionMask
WideCharToMultiByte
QueryFullProcessImageNameW
FormatMessageW
FormatMessageA
LocalFree
OpenProcess
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
RaiseException
CloseHandle
DecodePointer
SetEndOfFile
ResumeThread
OpenEventA
WaitForMultipleObjectsEx
WaitForSingleObjectEx
QueryPerformanceFrequency
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
CreateIoCompletionPort
WriteConsoleW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
user32
DrawMenuBar
GetMessageW
CharUpperW
CharNextW
GetSystemMenu
EnableMenuItem
MessageBoxW
DispatchMessageW
TranslateMessage
LoadStringW
advapi32
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
DeleteService
CreateServiceW
ChangeServiceConfig2W
ReportEventW
RegisterEventSourceW
DeregisterEventSource
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
CoAddRefServerProcess
CoReleaseServerProcess
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromString
oleaut32
VarUI4FromStr
SysFreeString
SysAllocString
VariantClear
VariantInit
ws2_32
WSACleanup
WSAStartup
Name
.text
Size
399KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=177, id=261, version=24610,
count=19, id=260, version=29804,
count=23, id=259, version=29804,
count=86, id=261, version=29804,
count=15, id=259, version=24610,
count=23, id=260, version=24610,
count=1, id=262, version=24610,
count=17, id=257, version=24610,
count=320, id=1, productName=Unmarked objects,
count=14, id=261, version=29912,
count=1, id=255, version=29912,
count=3, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/f5fpapi.dll
- IMPHASH 59fe922cf19da8ac56237a0c87998c42
- SHA256 4b5c40a271b697694746d6834e81908ff7301d58830b61a227f1aa3797fb4ca7
- MD5 b2c0397f8f753d90e73d03c30a749c55
- SHA1 4052989ca0cb87c26c93e09900edeabdfe22366e
- SHA512 42ca631f49ecd6480588efc89fba7e44f46719719ae47543de475b84572ed95c7a21299409466d45516536d939c1ee10a3273daa09201f0be383d921bc5bf2dc
- SSDEEP 49152:MWTpgxZcTCTjn6pgb2YldbUWIvmvk/L4yhFqn/ml3z:Jpg4TCb2YlxfIvmvKLn
- TLSH T1D7C58E32E505C033E6FD50745B39AB7BE49DA172676136C36390FB7838684C3AA35A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
96:45:90:df:9f:30:92:69:1c:73:88:3c:2b:81:ff:7d:03:fc:0b:2c:bc:c8:8e:ab:b2:7f:a8:0a:2f:cf:c6:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
1490688
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\AppCtrl\out\Release\F5fpAPI.pdb
ws2_32
ntohl
WSASetLastError
WSARecv
WSASend
WSASocketW
WSAStringToAddressW
inet_pton
getaddrinfo
getnameinfo
WSAAddressToStringA
freeaddrinfo
WSAStartup
WSACleanup
inet_ntoa
htonl
setsockopt
WSAGetLastError
socket
connect
closesocket
send
recv
select
shutdown
ioctlsocket
__WSAFDIsSet
getsockopt
inet_addr
gethostbyname
htons
bind
listen
accept
sendto
ntohs
recvfrom
setupapi
SetupInstallFromInfSectionA
SetupInitDefaultQueueCallbackEx
SetupInitDefaultQueueCallback
SetupOpenInfFileA
SetupTermDefaultQueueCallback
SetupDefaultQueueCallbackA
SetupCloseInfFile
ole32
CreateBindCtx
MkParseDisplayName
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
ReadClassStm
OleSaveToStream
WriteClassStm
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoGetObject
scew_uls
ord119
ord127
ord139
ord146
ord101
ord151
ord152
ord140
ord137
ord128
ord116
ord141
ord109
ord126
ord124
ord115
ord110
ord131
ord136
ord132
ord135
ord134
ord133
ord145
ord106
ord105
ord138
ord16
ord159
ord155
ord129
kernel32
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedPushEntrySList
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
QueryPerformanceFrequency
VirtualProtect
VirtualFree
GetCurrentProcess
VirtualAlloc
GetCurrentThreadId
SuspendThread
ResumeThread
GetLastError
GetCurrentThread
GetThreadContext
FlushInstructionCache
SetThreadContext
VirtualQuery
SetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
InitializeCriticalSection
lstrcmpiA
IsDBCSLeadByte
FindResourceA
LoadLibraryExA
lstrlenA
SetDefaultDllDirectories
DisableThreadLibraryCalls
EncodePointer
GetModuleHandleW
lstrcmpA
LockResource
FindResourceW
CloseHandle
CreateFileA
WriteFile
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetSystemTimeAsFileTime
FindClose
FindFirstFileA
GetUserDefaultLCID
GetLocaleInfoA
SetEvent
UnmapViewOfFile
SetErrorMode
GetCurrentProcessId
HeapFree
GetProcessHeap
GetTickCount
DeleteFileA
TerminateProcess
CreateThread
TerminateThread
HeapAlloc
CreateFileMappingA
MapViewOfFile
OpenFileMappingA
DuplicateHandle
LocalFree
FormatMessageA
GlobalFree
LoadLibraryA
MoveFileExA
VerSetConditionMask
VerifyVersionInfoW
FindNextFileA
RemoveDirectoryA
CreateDirectoryA
GetFileAttributesA
CopyFileA
Sleep
FindNextFileW
SetFileAttributesA
GetFileSize
FlushFileBuffers
CreateFileW
GetFileAttributesExA
GetTempPathA
GetTempFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
TryEnterCriticalSection
CreateEventA
ResetEvent
CreateMutexA
ReleaseMutex
GetModuleHandleExA
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemTime
QueryPerformanceCounter
CallNamedPipeA
ReadFile
SetNamedPipeHandleState
WaitNamedPipeA
lstrcpyA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
SetCurrentDirectoryA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileTime
CompareFileTime
LocalAlloc
lstrcpyW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVersionExA
GetSystemInfo
GetComputerNameW
GetStdHandle
GetDateFormatA
FormatMessageW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
SleepEx
CreateEventW
SetWaitableTimer
QueueUserAPC
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateWaitableTimerA
VerifyVersionInfoA
LCMapStringEx
GetStringTypeW
InterlockedPopEntrySList
GetCPInfo
RtlUnwind
InterlockedFlushSList
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileType
SetEndOfFile
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
ExitProcess
GetModuleFileNameW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
HeapSize
HeapReAlloc
GetFileSizeEx
SetStdHandle
GetTimeZoneInformation
CreateProcessW
GetFileAttributesExW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
OpenEventA
WaitForMultipleObjects
user32
GetDlgItemInt
GetDlgItemTextA
EnableWindow
CheckRadioButton
SetDlgItemInt
SetDlgItemTextA
CallNextHookEx
UnhookWindowsHookEx
IsWindowVisible
GetAsyncKeyState
SetWindowsHookExA
GetKeyState
LoadIconA
PostQuitMessage
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
MessageBoxW
SetTimer
KillTimer
FindWindowExA
SetForegroundWindow
UpdateWindow
wsprintfW
PostMessageA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetWindow
GetDlgItem
SendMessageA
GetClassNameA
GetSysColor
EndDialog
CreateAcceleratorTableA
ClientToScreen
DialogBoxParamA
MoveWindow
SetCapture
ReleaseCapture
FillRect
InvalidateRgn
DestroyAcceleratorTable
PtInRect
UnionRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
CharNextW
LoadStringA
ShowWindow
MessageBoxA
BeginPaint
IsChild
GetFocus
SetFocus
CharNextA
SetWindowPos
LoadCursorA
GetClassInfoExA
RegisterClassExA
DefWindowProcA
GetWindowLongA
SetWindowLongA
GetParent
GetClientRect
CallWindowProcA
InvalidateRect
RedrawWindow
IsIconic
GetDC
ReleaseDC
GetDesktopWindow
CreateWindowExA
DestroyWindow
IsWindow
UnregisterClassA
GetForegroundWindow
CreateDialogParamA
SetLayeredWindowAttributes
SendDlgItemMessageW
wsprintfA
ScreenToClient
EndPaint
gdi32
DeleteDC
Rectangle
SetTextAlign
GetDeviceCaps
DeleteMetaFile
CloseMetaFile
SaveDC
LPtoDP
CreateDCA
SetWindowExtEx
CreateMetaFileA
CreateRectRgnIndirect
GetObjectA
RestoreDC
SetMapMode
GetStockObject
BitBlt
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
SetWindowOrgEx
SetViewportOrgEx
TextOutA
advapi32
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegQueryValueExA
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegEnumValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
MapGenericMask
CryptReleaseContext
CryptCreateHash
CryptHashData
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
GetSidSubAuthorityCount
CryptAcquireContextW
CryptGetHashParam
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
shell32
ShellExecuteA
oleaut32
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
LoadTypeLi
VariantInit
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
OleCreateFontIndirect
SysAllocStringLen
VariantCopy
VarBstrCat
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VarBstrCmp
VarR4FromStr
SafeArrayCreate
SysFreeString
shlwapi
StrStrIA
PathFileExistsA
SHDeleteKeyA
comctl32
ord17
InitCommonControlsEx
crypt32
CertFindChainInStore
CertVerifyCertificateChainPolicy
CertOpenStore
CertDuplicateCertificateContext
CertGetCertificateChain
CertGetCertificateContextProperty
CertGetNameStringA
CertCloseStore
CertFreeCertificateContext
CryptFindOIDInfo
CryptBinaryToStringA
CertFreeCertificateChain
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllWebLogonEntryPoint
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
434KB
Virtual Size
434KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
144KB
Virtual Size
143KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=259, version=27412,
count=199, id=261, version=27412,
count=1, id=253, version=28518,
count=17, id=260, version=29804,
count=24, id=259, version=29804,
count=96, id=261, version=29804,
count=38, id=260, version=27412,
count=1, id=262, version=27412,
count=2, id=257, version=29912,
count=20, id=261, version=29912,
count=27, id=257, version=27412,
count=612, id=1, productName=Unmarked objects,
count=32, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/f5fpc.exe
- IMPHASH c39afd431f91988c0881447b36e67102
- SHA256 287c1c3aaf01955d294b1e6bfdac1d8744cad7b8e9d60acb9e8e9dd4fc83bae1
- MD5 fbdf1604ae7c9aa0fa89411e8354f340
- SHA1 11f8468a22f1517eb6c9b1ac10c2f537c7a1c195
- SHA512 cd5db78e5dd6eab1486e06143eb17847d18ffd19b31258fd5bfd19ae8e6c246e9116267a5932a0cbf94550fd6336ae9797e4f852e803fa730a11efb78c5ffa8c
- SSDEEP 12288:o4RCBVKSFRmskf+XdyYweV5GtBl2sLPX/UOniHsCqiGMPuojTIwU:oMOKOc8keV5GtBlPLDesTFoX7U
- TLSH T12AA4AE2275A2E033D9B241744C6EEB76657DE8300F2215CBB3E8276D6F716D16B31A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
44:e8:83:8b:1b:d7:c7:9a:09:b5:2f:30:f0:bd:1e:e9:7b:2c:78:22:c9:38:0c:c5:54:50:66:2a:95:e0:58:53
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
187376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\StandaloneCtrl\out\Release\f5StandaloneCtrl.pdb
scew_uls
ord152
ord151
ord140
ord146
ord142
ord139
ord137
ord133
ord134
ord132
ord131
ord119
ord110
ord129
ord116
ord126
ord124
ord115
ord128
kernel32
CreateFileA
CreateFileW
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetTempPathA
OutputDebugStringA
QueryPerformanceCounter
HeapAlloc
HeapFree
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateProcessA
GetSystemInfo
GetSystemTime
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
LocalAlloc
LocalFree
FormatMessageA
lstrlenA
CopyFileA
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
SetUnhandledExceptionFilter
GetLocalTime
GetStdHandle
GetFileType
SetEndOfFile
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
AreFileApisANSI
GetCPInfo
CompareStringEx
VerSetConditionMask
K32EnumProcesses
QueryFullProcessImageNameA
OpenProcess
GetLastError
CloseHandle
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
ReadFile
ReadConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetTimeZoneInformation
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
HeapSize
GetModuleHandleExA
WriteConsoleW
GetACP
GetCommandLineW
GetCommandLineA
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
WriteFile
user32
IsWindow
PostQuitMessage
SendMessageTimeoutA
RegisterWindowMessageA
wsprintfA
LoadCursorA
FindWindowA
CreateWindowExA
RegisterClassExA
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadIconA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
Name
.text
Size
323KB
Virtual Size
322KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=259, version=24610,
count=165, id=261, version=24610,
count=18, id=260, version=29804,
count=22, id=259, version=29804,
count=73, id=261, version=29804,
count=23, id=260, version=24610,
count=10, id=257, version=24610,
count=3, id=257, version=29912,
count=254, id=1, productName=Unmarked objects,
count=1, id=260, version=29912,
count=10, id=261, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/f5fpclientW.exe
- IMPHASH 7f8c638e5a5e590d4ec033faa87dbea0
- SHA256 e3123222848835e0274553c81b9db733a4a79ea11250b8f48f742a837414a365
- MD5 1c598231b16d92b7c9a0b2227458a8c9
- SHA1 47502fdafd620eb2b83901f11ee82b03e17e30a8
- SHA512 c88a23ceb1e28b395ef850c6917721633c39d1885a2a611f7d3220c08c12f99a613d1b77145002e356be8798ae93a8d33fc2a335f03051ebd53dbce8cc98f059
- SSDEEP 98304:KCgCLSCeKPq2nDS7YxyuqCLALUUoFylnpUb5BDcYbtmrh0PyCuRjaxqGYdMyQaA/:KCLLS/KPq2nDS7YxyuqCLALUUoFylnp+
- TLSH T190363B117EAF50E8F06332705A3EA675616EBC38373584CF5254BE1998707E28A73B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
85:ca:6c:74:ff:1e:13:cf:c4:e3:8b:06:ea:da:d4:01:0f:b6:ea:78:f8:64:39:e2:42:e3:ba:61:8f:58:ed:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
2505056
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\Standalone\out\ReleaseUnicode\f5fpclientW.pdb
setupapi
SetupCloseInfFile
SetupInstallFromInfSectionW
SetupInitDefaultQueueCallbackEx
SetupInitDefaultQueueCallback
SetupOpenInfFileW
SetupTermDefaultQueueCallback
SetupDefaultQueueCallbackW
ws2_32
WSAAddressToStringW
WSACleanup
WSAStartup
InetNtopW
WSAAddressToStringA
htons
getservbyname
inet_addr
htonl
gethostbyname
getservbyport
ntohs
gethostbyaddr
WSAGetLastError
inet_ntoa
WSASetLastError
rpcrt4
RpcStringBindingComposeW
NdrClientCall2
RpcStringFreeW
RpcBindingFree
RpcBindingSetAuthInfoExW
RpcBindingFromStringBindingW
scew_uls
ord141
ord131
ord132
ord134
ord133
ord146
ord152
ord150
ord149
ord110
ord151
ord140
ord129
ord160
ord161
ord116
ord101
ord109
ord128
ord119
ord124
ord126
ord115
ord139
ord137
kernel32
FlushInstructionCache
SetThreadContext
VirtualQuery
OutputDebugStringA
GetModuleHandleA
VirtualProtect
EncodePointer
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
MoveFileW
GetThreadLocale
SetThreadPriority
CompareStringA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetDiskFreeSpaceW
ReplaceFileW
GetUserDefaultLCID
SystemTimeToTzSpecificLocalTime
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalFree
GlobalFlags
GetFileSizeEx
SetErrorMode
FindResourceExW
GetProfileIntW
SearchPathW
WaitForSingleObjectEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LoadLibraryExA
WinExec
GetSystemInfo
GetVersionExW
FileTimeToLocalFileTime
lstrcmpA
LocalAlloc
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
lstrcpyW
SetLastError
WaitNamedPipeW
SetNamedPipeHandleState
QueryPerformanceCounter
GetSystemTime
ReleaseMutex
ResetEvent
InitializeCriticalSection
GetEnvironmentVariableW
GetCurrentDirectoryW
GetWindowsDirectoryW
GetSystemDirectoryW
LocalFree
FormatMessageW
GetTempFileNameW
GetFileAttributesExW
FlushFileBuffers
MoveFileExW
SetFileAttributesW
lstrcmpW
GetThreadContext
CreateDirectoryW
RemoveDirectoryW
FindNextFileW
VerifyVersionInfoW
VerSetConditionMask
FreeResource
lstrlenW
DuplicateHandle
GetFileSize
MapViewOfFileEx
DecodePointer
HeapReAlloc
HeapSize
GetSystemTimeAsFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
FindFirstFileW
FindClose
GetExitCodeThread
ExpandEnvironmentStringsW
GetCurrentThread
CopyFileW
OpenMutexW
ExitProcess
CreateMutexW
TerminateProcess
OpenProcess
SetDefaultDllDirectories
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetLocalTime
GetTempPathW
GetModuleFileNameW
LoadLibraryExW
EnterCriticalSection
RaiseException
LeaveCriticalSection
lstrcmpiW
WideCharToMultiByte
OutputDebugStringW
Sleep
SetEnvironmentVariableW
OpenEventW
GetCurrentThreadId
GetFileTime
GetFileAttributesW
ReadFile
GetOEMCP
GetACP
SetHandleInformation
CreatePipe
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
ResumeThread
WriteFile
CreateFileW
GetModuleHandleExW
InitializeCriticalSectionEx
DeleteCriticalSection
MulDiv
DeleteFileW
CallNamedPipeW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
GetTickCount
CompareFileTime
SystemTimeToFileTime
FileTimeToSystemTime
WaitForMultipleObjects
TerminateThread
WaitForSingleObject
SetEvent
CreateEventW
HeapAlloc
GetSystemDirectoryA
LoadLibraryA
HeapFree
GetProcessHeap
GetProcAddress
LoadLibraryW
FreeLibrary
CloseHandle
GetLastError
CreateProcessW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
SuspendThread
VirtualAlloc
GetExitCodeProcess
VirtualFree
LCMapStringW
LCMapStringA
GetStringTypeExA
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
GetFileType
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetFilePointerEx
SetStdHandle
HeapQueryInformation
QueryPerformanceFrequency
GetStdHandle
GetStringTypeW
GetDateFormatW
GetTimeFormatW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GlobalSize
GlobalGetAtomNameW
user32
UpdateLayeredWindow
UnionRect
SetCursorPos
IsZoomed
DrawEdge
SetWindowRgn
SetClassLongW
EnumDisplayMonitors
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetMenuDefaultItem
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
GetNextDlgGroupItem
PostThreadMessageW
DeleteMenu
IsClipboardFormatAvailable
InvalidateRgn
CopyAcceleratorTableW
RealChildWindowFromPoint
CopyImage
GetSysColorBrush
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
IntersectRect
GetMessageW
SendDlgItemMessageA
MapVirtualKeyW
GetKeyNameTextW
GetNextDlgTabItem
CreateDialogIndirectParamW
CharUpperW
GetWindowDC
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
CheckDlgButton
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetLastActivePopup
GetTopWindow
GetClassLongW
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
GetScrollPos
ScrollWindow
ValidateRect
SetActiveWindow
SetMenu
GetMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExW
GetMessageTime
GetMessagePos
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
SetFocus
GetAsyncKeyState
CreatePopupMenu
GetMenuItemInfoW
GetMenuItemCount
ReleaseCapture
SetCapture
ChildWindowFromPointEx
IsWindowEnabled
GetCapture
EqualRect
ScreenToClient
SetScrollRange
IsRectEmpty
SetScrollPos
GetCaretPos
GetWindow
GetClassNameW
GetMenuItemID
MonitorFromPoint
SetMenuDefaultItem
CopyIcon
SetLayeredWindowAttributes
SetParent
CreateWindowExW
LoadStringW
DefWindowProcW
GetDlgCtrlID
RegisterClassW
BeginPaint
EndPaint
MoveWindow
UnregisterClassW
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
LoadCursorW
EnumWindows
ExitWindowsEx
GetClassInfoW
RegisterClipboardFormatW
wsprintfW
CharNextW
FlashWindowEx
AttachThreadInput
GetWindowThreadProcessId
SendMessageTimeoutW
ReplyMessage
FindWindowW
TranslateMessage
ShutdownBlockReasonDestroy
RedrawWindow
EnumChildWindows
FindWindowExW
GetDoubleClickTime
ShutdownBlockReasonCreate
DrawIconEx
CheckMenuItem
DrawIcon
IsIconic
PostQuitMessage
GetSystemMetrics
AppendMenuW
GetSystemMenu
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
DrawAnimatedRects
TabbedTextOutW
DrawTextExW
GrayStringW
CloseDesktop
GetUserObjectInformationW
GetThreadDesktop
TrackMouseEvent
DefDlgProcW
GetLastInputInfo
BringWindowToTop
AnimateWindow
SystemParametersInfoW
GetForegroundWindow
RegisterSuspendResumeNotification
SetRectEmpty
RegisterWindowMessageW
GetKeyState
EnableMenuItem
GetAncestor
FrameRect
CreateIconIndirect
GetIconInfo
FillRect
DrawStateW
OffsetRect
InflateRect
GetActiveWindow
WindowFromPoint
ClientToScreen
SetCursor
DestroyMenu
DestroyCursor
LoadBitmapW
LoadImageW
SetForegroundWindow
SetRect
DestroyIcon
DialogBoxParamW
DestroyWindow
EndDialog
SetDlgItemTextW
ShowWindow
SetWindowTextW
SetWindowPos
GetDlgItem
MessageBeep
LoadIconW
GetScrollBarInfo
CloseClipboard
SetClipboardData
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
CharUpperBuffW
ModifyMenuW
LockWindowUpdate
EmptyClipboard
OpenClipboard
GetFocus
GetSubMenu
LoadMenuW
GetCursorPos
KillTimer
IsWindow
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
TrackPopupMenu
UpdateWindow
TranslateAcceleratorW
SetTimer
GetDesktopWindow
GetWindowRect
LoadAcceleratorsW
PostMessageW
SetWindowLongW
DrawFocusRect
DrawTextW
DrawFrameControl
GetSysColor
CopyRect
EnableWindow
ReleaseDC
GetDC
PtInRect
GetClientRect
GetWindowLongW
GetParent
InvalidateRect
SendMessageW
CallWindowProcW
MessageBoxW
IsWindowVisible
GetComboBoxInfo
LoadStringA
gdi32
RealizePalette
MoveToEx
LineTo
GetClipBox
SetWindowOrgEx
EnumFontFamiliesW
GetTextCharsetInfo
StretchBlt
SetDIBColorTable
CreateEllipticRgn
GetObjectW
CreatePolygonRgn
CreateRoundRectRgn
LPtoDP
CreateSolidBrush
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
SelectPalette
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
GetDIBits
StretchDIBits
PtVisible
RectVisible
TextOutW
Escape
CreatePen
EnumFontFamiliesExW
CreateDIBSection
GetDeviceCaps
SetPixel
CreatePalette
PtInRegion
GetTextExtentPoint32W
CreateDIBitmap
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
GetRgnBox
GetPixel
DeleteDC
SelectObject
CreateBitmap
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
PatBlt
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ModifyWorldTransform
SetWorldTransform
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
CreateDCW
GetStockObject
DeleteObject
ExtTextOutW
SetTextColor
SetBkColor
GetTextMetricsW
CreateFontIndirectW
SaveDC
RestoreDC
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
ExcludeClipRect
CreatePatternBrush
CreateHatchBrush
CopyMetaFileW
SetDIBits
Polyline
SetTextJustification
PolyPolygon
SelectClipRgn
CreateRectRgn
Polygon
SetTextAlign
Ellipse
SetBkMode
Rectangle
ExtSelectClipRgn
advapi32
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegSetValueW
IsTextUnicode
EqualPrefixSid
GetSidIdentifierAuthority
InitializeSid
GetSidLengthRequired
IsValidSid
LsaClose
LsaFreeMemory
CopySid
LsaQueryInformationPolicy
LsaOpenPolicy
LookupAccountSidW
ConvertStringSidToSidW
ConvertSidToStringSidW
GetLengthSid
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
CloseServiceHandle
MapGenericMask
RegCreateKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
shell32
ShellExecuteW
DragAcceptFiles
SHAppBarMessage
Shell_NotifyIconW
SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
comctl32
ImageList_AddMasked
ImageList_Draw
ImageList_ReplaceIcon
shlwapi
PathFindFileNameW
PathRemoveExtensionW
PathFileExistsW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindExtensionW
ole32
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoRevokeClassObject
CoRegisterClassObject
CLSIDFromString
ReleaseStgMedium
OleDuplicateData
StringFromCLSID
CoGetObject
StringFromGUID2
CoInitializeEx
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoCreateGuid
CLSIDFromProgID
oleaut32
SafeArrayDestroy
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VarBstrCmp
VarUI4FromStr
SysStringLen
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantClear
crypt32
CryptUnprotectData
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
695KB
Virtual Size
694KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
41KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
238KB
Virtual Size
237KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=259, version=24610,
count=21, id=260, version=24610,
count=6, id=261, version=29912,
count=200, id=261, version=24610,
count=17, id=262, version=24610,
count=2, id=257, version=29912,
count=29, id=257, version=24610,
count=1054, id=1, productName=Unmarked objects,
count=20, id=260, version=29804,
count=24, id=259, version=29804,
count=383, id=261, version=29804,
count=103, id=265, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/f5netprov.dll
- IMPHASH d36e520aef82c0ac6c3cbe169e5bdffe
- SHA256 e7729e410c5109e8e7edf0d3d8f99a64419df2c12e0f0923818e23ccf4f22e07
- MD5 02b5c8ac470eba35ef8b2a63b0b87273
- SHA1 658143de6fd056762f482d2c26849d3436846534
- SHA512 b084c6be1e8efb2d42c3ed3ab8b54da63f398cf2ebd68c6e2b06d8de19a793959e106f13d0e4d8a10ebe66cace60cafefb6fc1169bd48567faa1faeab555313d
- SSDEEP 3072:A3WbdBaU0aUAHC09HmiAZ0AboUw+JI6bYgedoLCxs4HE2jFWERCrJWP8m06Iq/+l:AQdn0MHC0Of77LKLjFarJgvJlKNMwtCG
- TLSH T1F5445C917584C531F5BF16345A3A8B6F8939B4321BB0C5CB63C48E196E216C26A31FBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
af:48:d8:47:8f:ef:81:c7:29:6a:8a:4c:9f:53:c1:56:15:71:1f:47:39:1e:be:bd:a5:48:2f:f4:5f:8e:84:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
95696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\LogonNotify\out\ReleaseUnicode\f5netprov.pdb
userenv
UnloadUserProfile
LoadUserProfileW
CreateEnvironmentBlock
DestroyEnvironmentBlock
netapi32
NetApiBufferFree
NetUserGetInfo
NetGetAnyDCName
rpcrt4
RpcBindingSetAuthInfoExW
RpcStringFreeW
NdrClientCall2
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingFree
kernel32
CreateFileW
GetCurrentThreadId
GetVersionExW
ReleaseMutex
CreateEventW
MultiByteToWideChar
FormatMessageW
OutputDebugStringW
SetEvent
DeleteFileW
GetSystemInfo
LoadLibraryW
ResetEvent
GetProcAddress
VerSetConditionMask
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
CopyFileW
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTime
QueryPerformanceCounter
LocalAlloc
FindFirstFileExW
HeapReAlloc
HeapSize
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetFileType
GetStdHandle
LCMapStringW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetLocaleInfoW
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
SetEndOfFile
GetUserDefaultUILanguage
GetModuleFileNameW
GetSystemDefaultUILanguage
GetModuleHandleExW
lstrlenW
GetCurrentProcess
FindNextFileW
EnterCriticalSection
FindFirstFileW
GetProcessHeap
LocalFree
HeapAlloc
HeapFree
GetTickCount
DeleteCriticalSection
DecodePointer
RaiseException
CloseHandle
DisableThreadLibraryCalls
GetLastError
Sleep
InitializeCriticalSectionEx
SetLastError
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
SetStdHandle
ReadFile
ReadConsoleW
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
FindClose
WriteConsoleW
FlushFileBuffers
advapi32
LookupAccountNameW
ImpersonateLoggedOnUser
RevertToSelf
QueryServiceStatus
QueryServiceConfigW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
OpenServiceW
RegQueryValueExW
LsaFreeMemory
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidLengthRequired
CopySid
ConvertStringSidToSidW
InitializeSid
IsValidSid
EqualPrefixSid
ConvertSidToStringSidW
LsaQueryInformationPolicy
GetLengthSid
LsaOpenPolicy
LsaClose
LookupAccountSidW
GetSidIdentifierAuthority
LogonUserW
crypt32
CryptProtectData
DllRegisterServer
DllUnregisterServer
NPGetCaps
NPLogonNotify
NPPasswordChangeNotify
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=27412,
count=157, id=261, version=27412,
count=18, id=260, version=27412,
count=17, id=260, version=29804,
count=18, id=259, version=29804,
count=40, id=261, version=29804,
count=21, id=257, version=27412,
count=250, id=1, productName=Unmarked objects,
count=7, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/f5netprov64.dll
- IMPHASH 439845fe9cb5f8552b4de156e0d7ee82
- SHA256 77dbd33db03d0598a909f69fa093eac62de2fade26802a7a84b4f8e35e36514c
- MD5 dcd1f434b9ba2c17450f844fa198bc04
- SHA1 8a663c50faf2622174d2ec00e475f04aa7a1fda1
- SHA512 529fb67816909c303f94bc432847fd43df84b930e69d91aae5cdc47f148d2d999f0d0d7fd2e3056b982a4bc4901994fcf9982bb25fcbaf2083293b015a726bc3
- SSDEEP 3072:oIYa59ri9mutEyn0she3ZG8e2OKrbNEQCsoz/Cdh7o7BNoX4ANIKJgKpnP+wGyF6:7xGjEgxQe2Ln+Cq2NIKJ7yqbGmUdqNm
- TLSH T166742928B3E50665E0B3C638C8A34457EAB63854077DD6FF179146AA2F33790F939B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a4:71:a6:de:38:cc:49:1f:3c:0f:a6:4e:fb:13:c5:06:eb:3c:58:84:23:eb:32:40:04:37:53:77:b0:a8:e4:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
84400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\LogonNotify\out\ReleaseUnicode\f5netprov64.pdb
userenv
UnloadUserProfile
LoadUserProfileW
CreateEnvironmentBlock
DestroyEnvironmentBlock
netapi32
NetApiBufferFree
NetUserGetInfo
NetGetAnyDCName
rpcrt4
RpcBindingSetAuthInfoExW
RpcStringFreeW
NdrClientCall3
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingFree
kernel32
CreateFileW
GetCurrentThreadId
GetVersionExW
ReleaseMutex
CreateEventW
MultiByteToWideChar
FormatMessageW
OutputDebugStringW
SetEvent
DeleteFileW
GetSystemInfo
LoadLibraryW
ResetEvent
GetProcAddress
VerSetConditionMask
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
CopyFileW
WideCharToMultiByte
VerifyVersionInfoW
QueryPerformanceCounter
FlushFileBuffers
LocalAlloc
FindFirstFileExW
HeapReAlloc
HeapSize
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetFileType
GetStdHandle
LCMapStringW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetLocaleInfoW
GetSystemTime
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
GetUserDefaultUILanguage
GetModuleFileNameW
GetSystemDefaultUILanguage
GetModuleHandleExW
lstrlenW
GetCurrentProcess
FindNextFileW
EnterCriticalSection
FindFirstFileW
GetProcessHeap
LocalFree
HeapAlloc
HeapFree
GetTickCount
DeleteCriticalSection
RaiseException
CloseHandle
DisableThreadLibraryCalls
GetLastError
Sleep
InitializeCriticalSectionEx
SetLastError
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
SetStdHandle
ReadFile
ReadConsoleW
WriteConsoleW
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
FindClose
SetEndOfFile
IsValidCodePage
advapi32
LookupAccountSidW
ImpersonateLoggedOnUser
RevertToSelf
QueryServiceStatus
QueryServiceConfigW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
OpenServiceW
RegQueryValueExW
LsaFreeMemory
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidLengthRequired
CopySid
ConvertStringSidToSidW
InitializeSid
IsValidSid
EqualPrefixSid
ConvertSidToStringSidW
LsaQueryInformationPolicy
GetLengthSid
LsaOpenPolicy
LsaClose
LookupAccountNameW
GetSidIdentifierAuthority
LogonUserW
crypt32
CryptProtectData
DllRegisterServer
DllUnregisterServer
NPGetCaps
NPLogonNotify
NPPasswordChangeNotify
Name
.text
Size
225KB
Virtual Size
225KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=154, id=261, version=27412,
count=16, id=260, version=29804,
count=9, id=259, version=29804,
count=41, id=261, version=29804,
count=21, id=257, version=27412,
count=257, id=1, productName=Unmarked objects,
count=7, id=265, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=151,
count=1, id=258, version=29912,
big_ip_client_2026/F5 VPN/f5netprovARM64.dll
- SHA256 cde6943a01aaad8dc6c1389618a7b0d4c4cf4e8b37ccd258b8364692975a0728
- MD5 c5760c95b25aebba8f96c7085487d0c2
- SHA1 857b1ea77d7d65b565cbf2b229d1127108167f15
- SHA512 61fd8a9d2276474f0d5f5687fdbcf99a42be3013b14ef54b6c1c414a7d3095c6a214312010f7488b8fe994501635b755fbce0a906c151499f5ffdbd66c8369aa
- SSDEEP 6144:sZerxjAD1MiLbxwt90yp7+pATnqL6MPxywyQJC6fvd:+e81pS37QATn6xZJRd
- TLSH T1CE745B009F8C4C58F6E9977CAD734B247433BA685B30C18FF625011CDEE7AE196A5BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
big_ip_client_2026/F5 VPN/scew_uls.dll
- IMPHASH c354cfa0de26605c8651e527e5a7cb02
- SHA256 450af1f4e237644a26bcf2d7a72bc0f74df3fd6d6ebd32c5c4eb98278eb40d32
- MD5 f24ef421673f34c785df342bdbd33e91
- SHA1 cc1bf1348a2c23ca88747838be0da1a83c01571e
- SHA512 65c4b4d644337d00c6faa862890ccb575f0402670f52bc21b04182d667c040c4eb88d1515d0bfa0950cf5162a8b8e5ff589f916a835f7735c67416df069d270e
- SSDEEP 3072:3Btqu2qRseUqDfdqn0Elw1Us6gvvkdyrJJ1wX9kFVGnqg/lkja4rvvMAq+FUWdKU:3DqDGg0Elw/6gEawX9kFyWH3F1oU
- TLSH T128448C21B8C2C436E4DA043155788772597DABA11BEAC5EBAF40617C8E335C33A35F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:15:f6:56:e8:78:23:ea:3f:8e:fd:79:9a:8a:4e:c3:f6:c8:31:db:cf:16:14:56:9c:bf:1d:49:f2:9d:95:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
112320
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
G:\cc-builds\apmclients726x-win\1532018\src\rh\TerminalProxy\Vendor\SCEW\scew-0.4.0\win32\out\ReleaseUnicode\scew_uls.pdb
kernel32
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStringTypeW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
HeapReAlloc
GetACP
GetStdHandle
GetFileType
CloseHandle
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
CompareStringW
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
CreateFileW
FlushFileBuffers
SetFilePointerEx
HeapSize
SetEndOfFile
WriteConsoleW
DecodePointer
XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg
scew_attribute_by_index
scew_attribute_by_name
scew_attribute_count
scew_attribute_create
scew_attribute_free
scew_attribute_name
scew_attribute_next
scew_attribute_set_name
scew_attribute_set_value
scew_attribute_value
scew_element_add
scew_element_add_attr
scew_element_add_attr_pair
scew_element_add_elem
scew_element_by_index
scew_element_by_name
scew_element_contents
scew_element_count
scew_element_create
scew_element_del
scew_element_del_attr
scew_element_del_by_index
scew_element_del_by_name
scew_element_free
scew_element_list
scew_element_list_del
scew_element_list_free
scew_element_name
scew_element_next
scew_element_set_contents
scew_element_set_name
scew_error_code
scew_error_expat_code
scew_error_expat_column
scew_error_expat_line
scew_error_expat_string
scew_error_string
scew_parser_create
scew_parser_expat
scew_parser_free
scew_parser_ignore_whitespaces
scew_parser_load_buffer
scew_parser_load_file
scew_parser_load_file_fp
scew_parser_load_file_w
scew_parser_load_stream
scew_parser_set_stream_callback
scew_parser_tree
scew_strdup
scew_strtrim
scew_tree_add_root
scew_tree_create
scew_tree_free
scew_tree_root
scew_tree_set_xml_encoding
scew_tree_set_xml_preamble
scew_tree_set_xml_standalone
scew_tree_set_xml_version
scew_writer_tree_file
scew_writer_tree_file_w
scew_writer_tree_fp
set_last_error
Name
.text
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=144, id=261, version=24610,
count=30, id=261, version=29804,
count=15, id=260, version=29804,
count=19, id=259, version=29804,
count=19, id=260, version=24610,
count=3, id=257, version=24610,
count=85, id=1, productName=Unmarked objects,
count=15, id=260, version=29912,
count=1, id=256, version=29912,
count=1, id=255, version=29912,
count=1, id=258, version=29912,
big_ip_client_2026/MD5_Archivo.txt
- SHA256 4d80d8dfe3960e398e76bf3828515efcef89819acf147f5a9c0372dc98ebbde0
- MD5 25c7315caf398874432a0e413ef0598d
- SHA1 afab4a62568df3216c9a463049e9f4858037f0a4
- SHA512 ea2a16a47a546c598d114ae2dc489c3cd2a645404bde7d531248f977230d964c26c638e3474c25d9de22fd532ad49d52ba8713d27fea613f74830e4b9c22fd32
- TLSH T1B5218339D9D98BF19FE46F4A5151CAF8105B477E09132C08905C6384DD0FEB9B20329E
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/MD5_Instalador.txt
- SHA256 9fb6cda10994e4b9b634cf3caa52b7a7897d91f8e4b0fdee45a3d4f15a8968bf
- MD5 63aee367919c2ae2f01a84ff393b2e90
- SHA1 a7b36b42e8222099a0737768fbf483979ca1c863
- SHA512 91c5832989a6203611f5dcc2c681965abe60058f29b46f7f63df596ec24f27995edd054b8142062ee175c8fbf39d82b2f15bb7d34e634b9310a6d4e48fe1fbdb
- TLSH T1D3511FEDC6D616F16BDC3F8947FD897AC646877A45B36D080C4973864E84C68B534073
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/Setup.bat
- SHA256 ec9390bab75cf825eed0a315ee3dc049a6dc88b23fa8f553cc01c4a37dde0089
- MD5 971dcf7b37da31d2c117f09aa87d0ffe
- SHA1 8ba8721346d065cc94293591bba6284f924a20b0
- SHA512 6cc0a46c3b32d7b3252a1a251b15d67edfe9b9a9ec1a34791e43815c2dbbed9995a9de4e209515dd10f8b1d3b8137358e5d2cf6dfc3ea82a81f1e0d0963b830a
- TLSH T10131DE653E1FBEE582A4CA239DF3B040FA2B931372048C0075DB5539DF596D3726D58A
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/Uninstall.bat
- SHA256 7e1a00a0350000ed17d07ec36de642f01aea156076408de3619905c04a014b75
- MD5 995b8940d71176e9205fa3b5e425f0f4
- SHA1 a2d1e8ec7828e2aa57178fd8f780c51b6fc97a27
- SHA512 6859ddeb983658202e7d2618736f8a00ea41388f0353e9206c60e2b31f874e0cc805a843825401257301e8908092b2cb980e784315f234b6037211b8e8f00a6e
- TLSH T1BA31F2657E6FAAE841A4C42179B7A1C0F93B92277200CC0069D39931EE157DAA33C99B
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/_setup_configuration_.f5c
- SHA256 6e08dc39f64935295b1560eab6c530e302880f1cdd1a470e636fd8babd83a2de
- MD5 b7646f76b8ae9678057c2c6dd1cc6b6a
- SHA1 8c3b783caed26e589a3aa52ac97f1901caa25698
- SHA512 625d4e7bb4c19c6557fd634850a98895df2f0280e129797fceb14c157a0a7af10894bcc77ab7247212e65db82d5d12f38c18df6567e1e937fcbe5b49a8fcca97
- TLSH T1EC1188E4E6456A60D283DE07845E48C660A994D672B74EF43F898FCAFCDC938725306F
- MD5 SHA1 SHA512 TLSH
big_ip_client_2026/f5fpclients.msi
- SHA256 21cd3733c8c6a53536d17abc7129e7d6487e23541c8be9099f475031223d9917
- MD5 74632f09de792a71c3ca25f28b412c2c
- SHA1 43834b9864d0376426880d773f543b701035db63
- SHA512 b4aededea049fe01a4a4c85c06dff73323fb8b07092629f3d4cde59263803774513c54ee13cfccc267b228be52b24193b4a73c85705313192309280ad6efa90d
- SSDEEP 24576:m8iVY6Esx1MhovXk7m8bQZ7+Fnj7QLF6pK1Lc:m8iVYC1M4k7tbQEFjMLFH1
- TLSH T1C5455B22F107D572ED2E02BC550A977EA56C6D301736C8E363C43F6A2EF05D16A39A87
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c1d7a6fef365c5a316b26bfe0c75ac123f835dcc9b1e447495e49456e5cd4207
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Dec 3, 2025
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
SERIALNUMBER=601692492,CN=F5\, Inc.,O=F5\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
11:b4:1a:cd:ce:55:6f:4b:e3:24:6c:a6:97:68:f5:46
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 5, 2024 - Sep 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
big_ip_client_2026/f5wininfo.exe
- IMPHASH c4c1718900cb1788f1188e238ae8e5d9
- SHA256 4a8a430516fc6d092c011ceb97c9713bb6383db8045f59f0a56b6ba0d6c917ac
- MD5 a78d27ba519b80cb4bb3a5f2bc8ded9d
- SHA1 0ba43d03a251483c06d4c718c78f2fcfbe8b0df0
- SHA512 217146170e84bf6e911da9cf462b8493c619884926f82bbcd971df1fdccdbcee2333da263f1062deca1ccb5cbfcc46ffbe0bf98216df2e374588d92a06d0fae6
- SSDEEP 98304:tJRTNsFyYiOjaNmnBPc33/+ZViAXpW90PQ90Go:tJRTNsFraUE33mm90PQ90L
- TLSH T14AF58D217E9A8537C57B03328919F2BA23BCFF702F3545D762843B196D706D21A35A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
33:4d:f3:e8:d4:00:70:a3:74:2c:e7:cd:b5:c1:50:3d
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=F5 Networks Inc,O=F5 Networks Inc,L=Seattle,ST=Washington,C=US
Serial Number
12:3b:92:d6:69:6f:02:74:00:00:00:00:55:66:25:5d
Issuer
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2017 - Dec 12, 2019
Subject
CN=Entrust Code Signing CA - OVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
43:c1:0b:1c:00:00:00:00:51:d3:73:da
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 10, 2015 - Nov 10, 2030
Minor OS version
0
Major OS version
6
Entry point
1990067
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\cc-builds\apmclients717x-win\1073275\src\rh\TerminalProxy\WinInfo\out\Release\f5WinInfo.pdb
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
setupapi
SetupTermDefaultQueueCallback
ws2_32
socket
closesocket
getnameinfo
freeaddrinfo
getaddrinfo
WSAStartup
WSACleanup
iphlpapi
IcmpSendEcho
Icmp6SendEcho2
IcmpCloseHandle
GetAdaptersAddresses
Icmp6CreateFile
IcmpCreateFile
GetAdaptersInfo
msi
ord104
ord44
ord67
shlwapi
StrFormatKBSizeA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
SHDeleteKeyA
PathFindExtensionA
psapi
GetProcessImageFileNameA
EnumProcesses
kernel32
GlobalSize
GetModuleFileNameW
GetModuleHandleW
LoadLibraryW
EncodePointer
GetSystemDirectoryW
FreeResource
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
GetFullPathNameA
LockFile
SetEndOfFile
UnlockFile
MoveFileA
GetVolumeInformationA
GetThreadLocale
lstrcpyW
SetThreadPriority
SuspendThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
ReplaceFileA
GetUserDefaultLCID
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
CompareStringW
GetLocaleInfoW
GlobalFlags
VirtualProtect
GetOEMCP
GetCPInfo
GetFileSizeEx
GetACP
FindResourceExW
VerifyVersionInfoA
GetProfileIntA
SearchPathA
GetStringTypeW
CreateEventW
LCMapStringW
WaitForSingleObjectEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
lstrcpyA
lstrcpynA
FormatMessageA
GetShortPathNameA
LocalFree
LocalAlloc
VirtualFree
VirtualAlloc
GetVersionExA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
CreateMutexA
ReleaseMutex
ResetEvent
InitializeCriticalSection
QueryPerformanceCounter
SetErrorMode
SetLastError
OutputDebugStringA
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoA
VerifyVersionInfoW
OutputDebugStringW
GetCurrentDirectoryW
GetFileAttributesW
GetFileAttributesExW
GetTempFileNameA
SetFileTime
LocalFileTimeToFileTime
GetLongPathNameA
GetFileAttributesExA
FlushFileBuffers
FindNextFileW
FindFirstFileW
FileTimeToLocalFileTime
DeleteFileW
CreateFileW
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
MulDiv
GlobalFree
IsWow64Process
GetFileTime
GetDiskFreeSpaceA
WaitNamedPipeA
CallNamedPipeA
OpenMutexA
GetCurrentThread
OpenEventA
IsDBCSLeadByte
FindResourceA
LoadLibraryExA
GetLocalTime
OpenProcess
GetCurrentThreadId
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
GetTempPathA
CopyFileA
CreateFileMappingA
lstrcmpiA
lstrcmpA
GetProcAddress
GetModuleHandleA
UnmapViewOfFile
MapViewOfFileEx
GetFileSize
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointerEx
DeviceIoControl
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
GetModuleFileNameA
WriteProcessMemory
VirtualProtectEx
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
ExitProcess
GetCurrentProcess
Sleep
DuplicateHandle
GetExitCodeThread
MultiByteToWideChar
TerminateProcess
DeleteFileA
LoadLibraryA
FreeLibrary
GetWindowsDirectoryA
WriteFile
SetFilePointer
ReadFile
CreateFileA
GlobalLock
GlobalUnlock
GlobalAlloc
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
TerminateThread
WaitForMultipleObjects
CreateEventA
WaitForSingleObject
SetEvent
CompareFileTime
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
CreateProcessA
GetLastError
CloseHandle
AreFileApisANSI
RtlUnwind
QueryDosDeviceA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
lstrlenA
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
VirtualQuery
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetFileType
SetStdHandle
HeapQueryInformation
QueryPerformanceFrequency
GetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
FindFirstFileExA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetStringTypeExA
user32
SetClassLongA
EnumDisplayMonitors
GetMenuDefaultItem
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
GetNextDlgGroupItem
CopyAcceleratorTableA
LoadAcceleratorsW
SetWindowRgn
LockWindowUpdate
GetDCEx
UnionRect
LoadImageW
TrackMouseEvent
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
DestroyCursor
LoadCursorW
SetCursorPos
SetCapture
IsZoomed
WindowFromPoint
DeleteMenu
GetSystemMenu
ReuseDDElParam
UnpackDDElParam
LoadImageA
DestroyIcon
InsertMenuItemA
CreatePopupMenu
LoadMenuA
ReleaseCapture
BringWindowToTop
GetMessageA
IntersectRect
GetActiveWindow
GetNextDlgTabItem
CreateDialogIndirectParamA
SetRectEmpty
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
CharUpperA
IsDialogMessageA
SendDlgItemMessageA
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextA
MoveWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ValidateRect
SetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetMessageTime
GetMessagePos
DefMDIChildProcA
SetMenuItemInfoA
DrawStateA
FillRect
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
IsWindowEnabled
SetFocus
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
SetParent
SetWindowTextA
GetForegroundWindow
MsgWaitForMultipleObjects
EndDialog
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExA
DefWindowProcA
PeekMessageA
LoadStringA
GetDialogBaseUnits
GetDlgItem
GetClassNameA
GetWindowTextA
CheckMenuItem
PostQuitMessage
GetAsyncKeyState
CharNextA
RegisterClipboardFormatA
wsprintfA
UnregisterClassA
LoadStringW
LoadBitmapW
DrawIcon
IsIconic
CopyIcon
LoadCursorA
SetCursor
GetWindowThreadProcessId
EnumWindows
EnumChildWindows
ClientToScreen
SetMenuItemBitmaps
EnableMenuItem
CharNextExA
CharNextW
IsRectEmpty
OffsetRect
InflateRect
DrawEdge
FrameRect
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
SetRect
ScreenToClient
RedrawWindow
InvalidateRgn
GetSystemMetrics
GetKeyState
IsCharAlphaNumericA
DispatchMessageA
TranslateMessage
GetScrollBarInfo
LoadIconW
LoadIconA
GetDesktopWindow
GetCursorPos
MessageBeep
GetWindowRect
UpdateWindow
GetSubMenu
LoadMenuW
TranslateAcceleratorA
LoadAcceleratorsA
KillTimer
SetTimer
GetFocus
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
IsWindow
PostMessageA
GetParent
SetWindowLongA
GetWindowLongA
PtInRect
CopyRect
DrawFocusRect
GetSysColor
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextA
EnableWindow
CallWindowProcA
SendMessageA
DrawFrameControl
MessageBoxA
IsWindowVisible
TranslateMDISysAccel
SubtractRect
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
GetMenuCheckMarkDimensions
DefFrameProcA
CreateMenu
GetWindowRgn
RegisterWindowMessageA
ScrollWindow
gdi32
GetDeviceCaps
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
CreateDCA
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
SetROP2
SetPolyFillMode
GetLayout
GetStockObject
CopyMetaFileA
GetObjectA
CreateDIBSection
SelectObject
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExA
GetRgnBox
GetTextColor
LPtoDP
Ellipse
CreateEllipticRgn
StretchDIBits
GetCharWidthA
CreateFontA
GetBkColor
CreateCompatibleBitmap
DPtoLP
SetRectRgn
GetMapMode
GetTextExtentPoint32A
PatBlt
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
TextOutA
MoveToEx
GetCurrentObject
DeleteObject
CreateRectRgnIndirect
CreateFontIndirectA
CreateCompatibleDC
CombineRgn
BitBlt
ExtTextOutA
SetTextAlign
GetTextMetricsA
SetTextColor
SetBkColor
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetSaveFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
GetSidSubAuthorityCount
RegEnumKeyExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
CloseServiceHandle
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegSetValueA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyA
RegEnumValueA
MapGenericMask
RegCloseKey
GetSidSubAuthority
GetUserNameA
DeleteService
ControlService
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
RegSetValueExA
RegQueryInfoKeyW
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
shell32
ShellExecuteExA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
comctl32
ImageList_GetImageCount
ImageList_Draw
ImageList_GetImageInfo
ord8
ImageList_ReplaceIcon
ImageList_AddMasked
uxtheme
CloseThemeData
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
GetThemePartSize
IsAppThemed
DrawThemeText
GetThemeColor
ole32
CoInitialize
CLSIDFromString
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
StringFromCLSID
CoUninitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleDuplicateData
CoInitializeEx
ReleaseStgMedium
CoCreateGuid
CLSIDFromProgID
CoDisconnectObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
oleaut32
SysAllocStringLen
OleCreateFontIndirect
VarBstrFromDate
SafeArrayDestroy
LoadTypeLi
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysAllocString
VarBstrCat
VarUI4FromStr
SysStringLen
SysFreeString
oledlg
ord8
wininet
InternetErrorDlg
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetStatusCallback
InternetSetOptionA
InternetQueryOptionA
InternetQueryDataAvailable
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA
winmm
PlaySoundA
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
GdipGetImageGraphicsContext
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
507KB
Virtual Size
507KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
49KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.giats
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
419KB
Virtual Size
418KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
174KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=28, id=259, version=24610,
count=25, id=260, version=24610,
count=3, id=199, version=41118,
count=2, id=261, version=23013,
count=222, id=261, version=24610,
count=25, id=259, version=24123,
count=36, id=260, version=24123,
count=18, id=262, version=24610,
count=51, id=257, version=24610,
count=982, id=1, productName=Unmarked objects,
count=385, id=261, version=24123,
count=12, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=28, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,