Anyburn.zip
- SHA256 76364100989648c85e4c82ef34f3384ff7c3ab536f68ee34c92949d05ea0f68a
Overview
overview
4Static
static
3Anyburn/an...it.exe
windows10-2004-x64
4Anyburn/an...it.exe
windows11-ltsc_2024-x64
4$0.exe
windows10-2004-x64
3$0.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...pt.dll
windows10-2004-x64
3$PLUGINSDI...pt.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3AnyBurn.exe
windows10-2004-x64
3AnyBurn.exe
windows11-ltsc_2024-x64
3MACDll.dll
windows10-2004-x64
3MACDll.dll
windows11-ltsc_2024-x64
3abcmd.exe
windows10-2004-x64
3abcmd.exe
windows11-ltsc_2024-x64
3lame_enc.dll
windows10-2004-x64
3lame_enc.dll
windows11-ltsc_2024-x64
3libFLAC.dll
windows10-2004-x64
3libFLAC.dll
windows11-ltsc_2024-x64
3libvorbis.dll
windows10-2004-x64
3libvorbis.dll
windows11-ltsc_2024-x64
3unicows.dll
windows10-2004-x64
3unicows.dll
windows11-ltsc_2024-x64
3Anyburn/an...it.exe
windows10-2004-x64
4Anyburn/an...it.exe
windows11-ltsc_2024-x64
4$0.exe
windows10-2004-x64
3$0.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...pt.dll
windows10-2004-x64
3$PLUGINSDI...pt.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3AnyBurn.exe
windows10-2004-x64
3AnyBurn.exe
windows11-ltsc_2024-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Anyburn/anyburn_setup 32-bit.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Anyburn/anyburn_setup 32-bit.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
$0.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
$0.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
AnyBurn.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
AnyBurn.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
MACDll.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
MACDll.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
abcmd.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
abcmd.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
lame_enc.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
lame_enc.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
libFLAC.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
libFLAC.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
libvorbis.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
libvorbis.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
unicows.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
unicows.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
Anyburn/anyburn_setup_x64-bit.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral24
Sample
Anyburn/anyburn_setup_x64-bit.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral25
Sample
$0.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
$0.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
AnyBurn.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
AnyBurn.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Anyburn.zip
- Size 5.0MB
- Sample260916-w3ftescc66
- SHA256 76364100989648c85e4c82ef34f3384ff7c3ab536f68ee34c92949d05ea0f68a
- MD5 4e176ad49da6f4b6f7285e9e1a986995
- SHA1 8cd2f5054d897d1b9b4853542abe6ad9065a3449
- SHA512 c15cfa8499ab2b9994e57cda6e2e07a45658a3a62fd835cf6d05b9c6ce46e6d1c3c4c3f8612a0e5c8d8464f07701c19bbab77d39a1914a37a0c8f81e3de76b31
- SSDEEP 98304:GhDxBB1uI9vgfvwz7OYtaBz8fPIdZtUK19PcivaTxjwYeJ0Hfit:4hwI9CvwzPtQAfFMih1jxeJPt
- TLSH T1EA3633E69527814A1AC8784273884FB0E8A7D4D1BBA6F35869BD4DFF60FF710539E240
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 12 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/InstOpt.dll unpack002/$PLUGINSDIR/System.dll unpack002/MACDll.dll unpack002/lame_enc.dll unpack002/libFLAC.dll unpack002/libvorbis.dll unpack003/$PLUGINSDIR/InstOpt.dll unpack003/$PLUGINSDIR/System.dll unpack003/MACDll.dll unpack003/lame_enc.dll unpack003/libFLAC.dll unpack003/libvorbis.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/unicows.dll
File Explorer
-
Anyburn.zip.zip 5.0MB
-
Anyburn/anyburn_setup 32-bit.exe.exe 2.5MB
-
$0.exe 4.8MB
-
$PLUGINSDIR/InstOpt.dll.dll 8KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
AnyBurn.exe.exe 4.8MB
-
Lang/Arabic.ini70KB
-
Lang/Bulgarian.ini81KB
-
Lang/Croatian.ini78KB
-
Lang/Danish.ini75KB
-
Lang/Dutch.ini81KB
-
Lang/English.ini75KB
-
Lang/EnglishUK.ini76KB
-
Lang/Finnish.ini72KB
-
Lang/French.ini87KB
-
Lang/German.ini88KB
-
Lang/Greek.ini84KB
-
Lang/Hungarian.ini79KB
-
Lang/Indonesian.ini77KB
-
Lang/Italian.ini82KB
-
Lang/Japanese.ini70KB
-
Lang/Korean.ini49KB
-
Lang/Polish.ini80KB
-
Lang/PortugueseBrazil.ini80KB
-
Lang/PortuguesePortugal.ini82KB
-
Lang/Romanian.ini83KB
-
Lang/Russian.ini75KB
-
Lang/SimpChinese.ini37KB
-
Lang/Slovenian.ini80KB
-
Lang/Spanish.ini83KB
-
Lang/Swedish.ini76KB
-
Lang/TradChinese.ini37KB
-
Lang/Turkish.ini81KB
-
Lang/Ukrainian.ini76KB
-
License.txt4KB
-
MACDll.dll.dll 100KB
-
Readme.txt939B
-
abcmd.exe.exe 26KB
-
lame_enc.dll.dll 200KB
-
libFLAC.dll.dll 152KB
-
libvorbis.dll.dll 1.6MB
-
unicows.dll.dll 252KB
-
uninstall.exe.nsis23KB
-
Anyburn/anyburn_setup_x64-bit.exe.exe 2.6MB
-
$0.exe 5.4MB
-
$PLUGINSDIR/InstOpt.dll.dll 8KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
AnyBurn.exe.exe 5.4MB
-
Lang/Arabic.ini70KB
-
Lang/Bulgarian.ini81KB
-
Lang/Croatian.ini78KB
-
Lang/Danish.ini75KB
-
Lang/Dutch.ini81KB
-
Lang/English.ini75KB
-
Lang/EnglishUK.ini76KB
-
Lang/Finnish.ini72KB
-
Lang/French.ini87KB
-
Lang/German.ini88KB
-
Lang/Greek.ini84KB
-
Lang/Hungarian.ini79KB
-
Lang/Indonesian.ini77KB
-
Lang/Italian.ini82KB
-
Lang/Japanese.ini70KB
-
Lang/Korean.ini49KB
-
Lang/Polish.ini80KB
-
Lang/PortugueseBrazil.ini80KB
-
Lang/PortuguesePortugal.ini82KB
-
Lang/Romanian.ini83KB
-
Lang/Russian.ini75KB
-
Lang/SimpChinese.ini37KB
-
Lang/Slovenian.ini80KB
-
Lang/Spanish.ini83KB
-
Lang/Swedish.ini76KB
-
Lang/TradChinese.ini37KB
-
Lang/Turkish.ini81KB
-
Lang/Ukrainian.ini76KB
-
License.txt4KB
-
MACDll.dll.dll 162KB
-
Readme.txt939B
-
abcmd.exe.exe 26KB
-
lame_enc.dll.dll 369KB
-
libFLAC.dll.dll 236KB
-
libvorbis.dll.dll 1.7MB
-
uninstall.exe.nsis23KB
Anyburn/anyburn_setup 32-bit.exe
- IMPHASH 24f4223e271413c25abad52fd456a9bc
- SHA256 e128481aa93098f5bfff8b910b0cacb3d4a9adf993be91c4a6723cb852d373dc
- MD5 35e24137f2b9a7fcbaae808b10c0259d
- SHA1 09324c7322548d3ad2eb0b8cbf37d7d8f10aa2fe
- SHA512 03abdbde4b93a6352a32d8040121762d2351d7c519c303676f2d37b4d1ef69eb6e28c75a13d0494b6f5e3c6d49b35f9d48bff15cfe94102e618f9ca4f8eb6223
- SSDEEP 49152:lCsdgZEhfvYsWHBTUle/Af/6j8NgDz6zNAJly5xVJTpg/dF:lBdHvDleUlNgDz6zNw2pg/dF
- TLSH T19CC533A26756C10AD4C848306AE81FB16DF3FC727B69A70BB375B63BE0763516E15308
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c6:8e:70:28:b2:74:ef:eb:06:d7:00:87:c2:7a:c1:5c:f0:9f:e0:cc:ea:88:7a:ab:78:29:3d:28:07:56:81:9e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Digest
bb:fd:5b:af:6e:ba:6a:6c:33:eb:62:23:7c:88:0a:a0:78:62:e5:3d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
13581
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
MoveFileW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
lstrcmpW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
ReadFile
MulDiv
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringW
FreeLibrary
GetPrivateProfileStringW
GetModuleHandleW
LoadLibraryExW
user32
GetWindowRect
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
ScreenToClient
EnableMenuItem
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
SystemParametersInfoW
EndDialog
RegisterClassW
DialogBoxParamW
CreateWindowExW
GetClassInfoW
DestroyWindow
CharNextW
ExitWindowsEx
SetWindowTextW
LoadImageW
SetTimer
ShowWindow
PostQuitMessage
wsprintfW
SetWindowLongW
FindWindowExW
IsWindow
CreatePopupMenu
AppendMenuW
GetSystemMetrics
DrawTextW
EndPaint
CreateDialogParamW
SendMessageTimeoutW
SetForegroundWindow
gdi32
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetBkColor
shell32
ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHFileOperationW
SHBrowseForFolderW
advapi32
AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ord17
ImageList_Destroy
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=164, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$0
- IMPHASH 01231af0dc8849c268106136612ebb4f
- SHA256 e25c786a4dd4ca85751336b15049f76f2c5306b84dddb85c17045e60e6a7ab20
- MD5 d9824f805ece6a5f310c019bb4a9a85c
- SHA1 bc74ec634e667da6f8ffe53fad0b2f0a0df8b2bb
- SHA512 8a1e95da5fb9e758447ab2e8fa3eb0c0f88b313a5e6396bc64a943a72e563a6c35cfacbaa079dc7a5c6ba23710b5456a2fa65202e0bf249292b743f6ee35bea8
- SSDEEP 49152:ecY2P0ecQZizJplMdsv5r2jODCcNXq/xU6xdPbwJjhwBT1u:bYDuozJp2sEjOPM/xU6xdPk4t1
- TLSH T14B36E55573FC5068F2F36EBA6BB55775893BBDA65A22C16F11F0A40F0931AA08D21333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a3:92:1a:48:e7:60:2b:31:d0:82:6f:b6:5a:59:fd:a0:fa:0b:c0:be:7e:e6:c8:88:78:cd:e0:a8:00:d3:12:a6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Digest
bd:b0:90:13:d6:58:a4:63:1a:22:9a:fe:f8:cf:ef:be:bd:f3:01:73
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
1605847
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
winmm
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutClose
waveOutReset
waveOutOpen
waveOutGetDevCapsW
kernel32
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
GetCurrentDirectoryA
GetSystemTimeAsFileTime
SetStdHandle
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
VirtualAlloc
IsBadWritePtr
GetStringTypeA
SetUnhandledExceptionFilter
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
IsValidLocale
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetSystemTime
CreateFileA
CompareStringA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedExchange
FindResourceA
GlobalAddAtomA
GetProfileStringA
GetVersion
Sleep
CreateThread
GlobalFree
DeviceIoControl
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
ExitProcess
SetEvent
ReadFile
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
GetCurrentProcessId
FindClose
SystemTimeToFileTime
GetLastError
GlobalHandle
GetTimeZoneInformation
TerminateProcess
RtlUnwind
SetErrorMode
GetThreadLocale
UnlockFile
LockFile
DuplicateHandle
GlobalSize
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
SetThreadPriority
WaitForSingleObject
ResumeThread
GetDriveTypeA
SuspendThread
MulDiv
GetProcessVersion
lstrcmpiA
lstrcmpA
InterlockedDecrement
InterlockedIncrement
lstrlenA
GlobalDeleteAtom
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetFileType
SetThreadExecutionState
CreateEventA
GetOverlappedResult
GetSystemDefaultLangID
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
SetFilePointer
MapViewOfFile
GetCurrentProcess
UnmapViewOfFile
GetLocalTime
GetCurrentThreadId
VirtualProtect
DefineDosDeviceW
GetLogicalDrives
GetExitCodeProcess
GetFileTime
SetEndOfFile
WriteFile
FlushFileBuffers
SetFileTime
LocalFileTimeToFileTime
LoadResource
SizeofResource
LockResource
FreeLibrary
ResetEvent
CloseHandle
SetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
user32
GetNextDlgGroupItem
SetParent
GetDCEx
SetWindowContextHelpId
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
IsZoomed
SetRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
DestroyMenu
SetRectEmpty
MapDialogRect
GetAsyncKeyState
EndDialog
GetActiveWindow
EndPaint
BeginPaint
DestroyCursor
SetCursorPos
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
GetNextDlgTabItem
IsWindowEnabled
IsDlgButtonChecked
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
ScrollWindow
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetMenu
TrackPopupMenu
DestroyWindow
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
IntersectRect
IsRectEmpty
AdjustWindowRectEx
IsChild
MessageBoxA
CharToOemA
OemToCharA
GetDesktopWindow
DrawEdge
CreateIconIndirect
ShowWindow
GetScrollInfo
GetIconInfo
UnhookWindowsHookEx
GetWindowPlacement
GetDlgCtrlID
SetWindowPos
DrawFrameControl
DrawFocusRect
InvalidateRgn
CheckMenuItem
GetMenuItemCount
GetMenuItemID
MessageBeep
DrawIcon
GetSystemMetrics
OffsetRect
EnumChildWindows
SendMessageA
CallNextHookEx
GetSysColorBrush
GetWindowTextLengthA
HideCaret
FrameRect
ReleaseCapture
SetCapture
CopyRect
UpdateWindow
DrawIconEx
DestroyIcon
ShowScrollBar
IsIconic
GetWindowDC
CheckMenuRadioItem
PtInRect
WindowFromPoint
EmptyClipboard
OpenClipboard
SetClipboardData
CloseClipboard
LockWindowUpdate
SetFocus
MoveWindow
IsWindowVisible
DeferWindowPos
IsWindow
GetSubMenu
RemoveMenu
GetSystemMenu
SetMenu
GetWindow
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
SetWindowsHookExA
GetClassNameA
GetWindowRect
GetClientRect
InvalidateRect
InflateRect
GetSysColor
RedrawWindow
ReleaseDC
GetDC
EndDeferWindowPos
BeginDeferWindowPos
EqualRect
GetParent
ScreenToClient
GetMessagePos
SetTimer
GetCapture
KillTimer
EnableMenuItem
SetMenuDefaultItem
CreatePopupMenu
GetKeyState
SetCursor
GetCursorPos
ClientToScreen
FillRect
GetDlgItem
GetFocus
CheckRadioButton
gdi32
SetStretchBltMode
SetPixel
GetPixel
GetTextColor
GetBkColor
GetDeviceCaps
GetDIBits
CreateRectRgn
PtVisible
RectVisible
Escape
SetDIBits
LPtoDP
DPtoLP
GetClipBox
GetMapMode
CreatePatternBrush
CombineRgn
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
CreateBitmap
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
CreatePen
PolyPolyline
SetBkMode
SetTextColor
SetBkColor
CreateRectRgnIndirect
SetRectRgn
MoveToEx
LineTo
DeleteDC
RoundRect
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
CreateSolidBrush
GetStockObject
ExtTextOutA
GetTextExtentPointA
SelectObject
CreateDIBitmap
PatBlt
winspool.drv
ClosePrinter
advapi32
RegCloseKey
OpenProcessToken
GetTokenInformation
shell32
DragAcceptFiles
SHGetMalloc
DragFinish
SHGetSpecialFolderPathW
SHGetDesktopFolder
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_SetBkColor
PropertySheetW
DestroyPropertySheetPage
_TrackMouseEvent
CreatePropertySheetPageW
ole32
RegisterDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
CoLockObjectExternal
CoRegisterMessageFilter
CoGetClassObject
CoRevokeClassObject
OleSetClipboard
DoDragDrop
OleGetClipboard
CoTaskMemFree
CoCreateGuid
ReleaseStgMedium
PropVariantClear
CoInitialize
CoCreateInstance
CoUninitialize
RevokeDragDrop
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
olepro32
ord253
oleaut32
SysStringLen
VariantTimeToSystemTime
SysFreeString
SysAllocStringLen
VariantClear
VariantCopy
SysAllocString
VariantChangeType
wininet
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpSendRequestW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
InternetAttemptConnect
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
916KB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
340KB
Virtual Size
339KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=6, id=12, version=7291,
count=168, id=105, version=2067,
count=180, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=506, id=1, productName=Unmarked objects,
count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=33, id=14, version=7299,
count=592, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=520, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
$PLUGINSDIR/InstOpt.dll
- IMPHASH 52963c73128befcc683116d6ab0cd3f1
- SHA256 313648b948243e992f08eec6e567aca26c2131ca6b9d307dd11071470521baf7
- MD5 a9b4e84b5c71be9aad7cbe44506a6b4e
- SHA1 d3a7b3bed2f4f3cc3edc85e202d202a1a535d62f
- SHA512 0c78a4d8c0c129c26fd3d99e8b04e4598e5d844d0d9f213dd318ae873ffd23db1cb06c0fec636ad7ac8a6f9306dbcae58cf4d8e7d33dca2b7a3a31e6ad36bab8
- SSDEEP 96:S1+HVx8GJYcudkED74Kx2otnc12lDIvyYUJjlMYXJIuT+f9yFGTp:SsPulD74uh2XUtlMwIuqEFGT
- TLSH T16FF155E4A3D17DB7F7BB0B323AE2A3F5DB19BD055E1040446F73025D6435591CA68362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6553
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
LocalAlloc
user32
CreateDialogParamW
MapWindowPoints
CallWindowProcW
SetWindowLongW
ShowWindow
IsDialogMessageW
GetWindowRect
MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
GetDlgItem
SetWindowTextW
SendMessageW
PostMessageW
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyExW
shell32
ShellExecuteExW
msvcrt
_itow
swprintf
wcsncpy
memset
wcscpy
wcscmp
Dialog
InitDialog
Show
Uninstall
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
590B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=1, productName=Unmarked objects,
count=9, id=19, version=8034,
count=5, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
$PLUGINSDIR/System.dll
- IMPHASH fc0224e99e736751432961db63a41b76
- SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
- MD5 8cf2ac271d7679b1d68eefc1ae0c5618
- SHA1 7cc1caaa747ee16dc894a600a4256f64fa65a9b8
- SHA512 ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
- SSDEEP 192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL
- TLSH T121427D1193B089F2F590593805A67F2A6FBEAC6C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10719
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
AnyBurn.exe
- IMPHASH 01231af0dc8849c268106136612ebb4f
- SHA256 e25c786a4dd4ca85751336b15049f76f2c5306b84dddb85c17045e60e6a7ab20
- MD5 d9824f805ece6a5f310c019bb4a9a85c
- SHA1 bc74ec634e667da6f8ffe53fad0b2f0a0df8b2bb
- SHA512 8a1e95da5fb9e758447ab2e8fa3eb0c0f88b313a5e6396bc64a943a72e563a6c35cfacbaa079dc7a5c6ba23710b5456a2fa65202e0bf249292b743f6ee35bea8
- SSDEEP 49152:ecY2P0ecQZizJplMdsv5r2jODCcNXq/xU6xdPbwJjhwBT1u:bYDuozJp2sEjOPM/xU6xdPk4t1
- TLSH T14B36E55573FC5068F2F36EBA6BB55775893BBDA65A22C16F11F0A40F0931AA08D21333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a3:92:1a:48:e7:60:2b:31:d0:82:6f:b6:5a:59:fd:a0:fa:0b:c0:be:7e:e6:c8:88:78:cd:e0:a8:00:d3:12:a6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Digest
bd:b0:90:13:d6:58:a4:63:1a:22:9a:fe:f8:cf:ef:be:bd:f3:01:73
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
1605847
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
winmm
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutClose
waveOutReset
waveOutOpen
waveOutGetDevCapsW
kernel32
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
GetCurrentDirectoryA
GetSystemTimeAsFileTime
SetStdHandle
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
VirtualAlloc
IsBadWritePtr
GetStringTypeA
SetUnhandledExceptionFilter
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
IsValidLocale
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetSystemTime
CreateFileA
CompareStringA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedExchange
FindResourceA
GlobalAddAtomA
GetProfileStringA
GetVersion
Sleep
CreateThread
GlobalFree
DeviceIoControl
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
ExitProcess
SetEvent
ReadFile
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
GetCurrentProcessId
FindClose
SystemTimeToFileTime
GetLastError
GlobalHandle
GetTimeZoneInformation
TerminateProcess
RtlUnwind
SetErrorMode
GetThreadLocale
UnlockFile
LockFile
DuplicateHandle
GlobalSize
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
SetThreadPriority
WaitForSingleObject
ResumeThread
GetDriveTypeA
SuspendThread
MulDiv
GetProcessVersion
lstrcmpiA
lstrcmpA
InterlockedDecrement
InterlockedIncrement
lstrlenA
GlobalDeleteAtom
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetFileType
SetThreadExecutionState
CreateEventA
GetOverlappedResult
GetSystemDefaultLangID
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
SetFilePointer
MapViewOfFile
GetCurrentProcess
UnmapViewOfFile
GetLocalTime
GetCurrentThreadId
VirtualProtect
DefineDosDeviceW
GetLogicalDrives
GetExitCodeProcess
GetFileTime
SetEndOfFile
WriteFile
FlushFileBuffers
SetFileTime
LocalFileTimeToFileTime
LoadResource
SizeofResource
LockResource
FreeLibrary
ResetEvent
CloseHandle
SetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
user32
GetNextDlgGroupItem
SetParent
GetDCEx
SetWindowContextHelpId
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
IsZoomed
SetRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
DestroyMenu
SetRectEmpty
MapDialogRect
GetAsyncKeyState
EndDialog
GetActiveWindow
EndPaint
BeginPaint
DestroyCursor
SetCursorPos
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
GetNextDlgTabItem
IsWindowEnabled
IsDlgButtonChecked
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
ScrollWindow
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetMenu
TrackPopupMenu
DestroyWindow
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
IntersectRect
IsRectEmpty
AdjustWindowRectEx
IsChild
MessageBoxA
CharToOemA
OemToCharA
GetDesktopWindow
DrawEdge
CreateIconIndirect
ShowWindow
GetScrollInfo
GetIconInfo
UnhookWindowsHookEx
GetWindowPlacement
GetDlgCtrlID
SetWindowPos
DrawFrameControl
DrawFocusRect
InvalidateRgn
CheckMenuItem
GetMenuItemCount
GetMenuItemID
MessageBeep
DrawIcon
GetSystemMetrics
OffsetRect
EnumChildWindows
SendMessageA
CallNextHookEx
GetSysColorBrush
GetWindowTextLengthA
HideCaret
FrameRect
ReleaseCapture
SetCapture
CopyRect
UpdateWindow
DrawIconEx
DestroyIcon
ShowScrollBar
IsIconic
GetWindowDC
CheckMenuRadioItem
PtInRect
WindowFromPoint
EmptyClipboard
OpenClipboard
SetClipboardData
CloseClipboard
LockWindowUpdate
SetFocus
MoveWindow
IsWindowVisible
DeferWindowPos
IsWindow
GetSubMenu
RemoveMenu
GetSystemMenu
SetMenu
GetWindow
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
SetWindowsHookExA
GetClassNameA
GetWindowRect
GetClientRect
InvalidateRect
InflateRect
GetSysColor
RedrawWindow
ReleaseDC
GetDC
EndDeferWindowPos
BeginDeferWindowPos
EqualRect
GetParent
ScreenToClient
GetMessagePos
SetTimer
GetCapture
KillTimer
EnableMenuItem
SetMenuDefaultItem
CreatePopupMenu
GetKeyState
SetCursor
GetCursorPos
ClientToScreen
FillRect
GetDlgItem
GetFocus
CheckRadioButton
gdi32
SetStretchBltMode
SetPixel
GetPixel
GetTextColor
GetBkColor
GetDeviceCaps
GetDIBits
CreateRectRgn
PtVisible
RectVisible
Escape
SetDIBits
LPtoDP
DPtoLP
GetClipBox
GetMapMode
CreatePatternBrush
CombineRgn
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
CreateBitmap
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
CreatePen
PolyPolyline
SetBkMode
SetTextColor
SetBkColor
CreateRectRgnIndirect
SetRectRgn
MoveToEx
LineTo
DeleteDC
RoundRect
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
CreateSolidBrush
GetStockObject
ExtTextOutA
GetTextExtentPointA
SelectObject
CreateDIBitmap
PatBlt
winspool.drv
ClosePrinter
advapi32
RegCloseKey
OpenProcessToken
GetTokenInformation
shell32
DragAcceptFiles
SHGetMalloc
DragFinish
SHGetSpecialFolderPathW
SHGetDesktopFolder
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_SetBkColor
PropertySheetW
DestroyPropertySheetPage
_TrackMouseEvent
CreatePropertySheetPageW
ole32
RegisterDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
CoLockObjectExternal
CoRegisterMessageFilter
CoGetClassObject
CoRevokeClassObject
OleSetClipboard
DoDragDrop
OleGetClipboard
CoTaskMemFree
CoCreateGuid
ReleaseStgMedium
PropVariantClear
CoInitialize
CoCreateInstance
CoUninitialize
RevokeDragDrop
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
olepro32
ord253
oleaut32
SysStringLen
VariantTimeToSystemTime
SysFreeString
SysAllocStringLen
VariantClear
VariantCopy
SysAllocString
VariantChangeType
wininet
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpSendRequestW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
InternetAttemptConnect
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
916KB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
340KB
Virtual Size
339KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=6, id=12, version=7291,
count=168, id=105, version=2067,
count=180, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=506, id=1, productName=Unmarked objects,
count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=33, id=14, version=7299,
count=592, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=520, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
Lang/Arabic.ini
- SHA256 9ae5205995a346a4a787585fe901f156ce2cc7e5233f25ebd33a8a7a4dc29321
- MD5 6de1b30a0388288e8558a4deb9e8e804
- SHA1 6cdf6ef456e8934204874db8808812ffa4e55fa1
- SHA512 02666a7c90bc7e8e088ac2c249d9137c168abe0535b2a151e2f40ec1139f149463dfaf8a3af4a3925ef5f66ae11325d9046318fbc5505e62d670128f84cbee69
- SSDEEP 768:5IJU6O1OVg55xFEFFVFucuCDEUUBwjLoiUrbhvpc+32Ajh0Lks5sxGUzcza+E/Ik:eLyGQXq/0yD9/as+Rh7xGi6atg6sU1j
- TLSH T1666367259E8CC23C73A6A724C296CA236354695BECEC763906F64D050AE0530569FFFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Bulgarian.ini
- SHA256 d57db73af8e8988ac367bfb0e388147032f9eefbb0ed04d707bfcf37ce37a98b
- MD5 8aa2a671c87da0fb91ab24ccf7599257
- SHA1 76add94c75218a22d6fb7e69d77434cd3e239628
- SHA512 ad7cc62ce822aaf262c0d53e86f5518c311adfd9a3e5241956855c6b61c3f9c91fe981d7f9d87f8be661a05f678ca5add003bd883c02300c05f14a5bb20549cb
- SSDEEP 1536:WKW8WpQ7cJrE5cbL5kfpOuFT0rmkHVTMst0yLn5p0D9VzCb5s:WKW8WpQ7cJrE5cbL5kfpOuFT0rmkHVTU
- TLSH T1E283DE1FB87D921576A8D2409F9647E322FA7711232D5AC582CF3E98A0DD63233526CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Croatian.ini
- SHA256 af29d56943b55ba02e663eee7c1ade49b635e942d477acc0f4f391fc498ba51e
- MD5 8ab8987ebe805232a490a8e2e4297b86
- SHA1 b32296527e9fb7bced3e9c247a68c077532a89d8
- SHA512 59c919813c5e9bd311a5228520ca5be2159a95cd7ad5fee7f86589f89b2c54070adddeba2e329a8f6860f6d1ce9f576e0e7223f11d03cf87daf6e3db9818442b
- SSDEEP 768:RuaXSjPQMQY8KPGVkrIpTH5qa5GMzzHibtH/bncYV54IlcTwRUXLXYL0wGu5Ivmb:3XOPdykrIprjOBbNvPtG8mbZ0
- TLSH T18273A12766FC1219F6F7BF10EAB512715B7A7CA2BD3CC51D10C1024D09F2A8199A27BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Danish.ini
- SHA256 91d7f6f9273027e092ad3f34b10e09b13e5d351615818f9c6b739c6f79628690
- MD5 86b120e9f2db73a5781dc52ecb2844a3
- SHA1 ee2186bcffbd77a5b56c7e25ba88bf00643b6819
- SHA512 2cd866e239755212ac30ab13bbd8e54e8a08804f248a81727c9b7715a40c697baa1724a56c4bdbefaaa13aad86042c685166d06af5074ac3f4a039e1c7311348
- SSDEEP 1536:7BD7AisLVHZ4B68T3iM96At6tHPw0cQ/uPdrkU21Na2vpHwLuKJ1:7BD7AisLVHZ4B68T3iM96At6tHPw0cQK
- TLSH T17773CB2613E8422EF2F66B20FDB5027167A5BC96B97CD61C11C1064C0DF2B9195F2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Dutch.ini
- SHA256 af09939ca72941a6090ca8448d6f4dba47e931e76ecd778a0c8e7d664b6aca4a
- MD5 d49f91c980fe93cb9ab577d847335820
- SHA1 22de1b19dbf7844ca94d962957120484abcfa652
- SHA512 b3306a601638a744ce6cd35bfc42baa39efdca027ff07961afb32ccb58209a9c4556cd53bc93138f62f3e63c28375e7be4249c99ce2a8daf605300266e86ef96
- SSDEEP 768:RZHmH4kp0pTF0jR7VBWb7VExkOf7GHfUhQzPxuru1nMdLbwWHEMe:PkNRxBWXWV7YuOUrlPwWH9e
- TLSH T1A9838E1627E98218F5F36F10E9B506715BB6BCD6BC78D51C02C0169D0DF1B80E8A6BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/English.ini
- SHA256 5304abfb5b65f21b58d95447498ef6a47efee61b06c5a5d233f0ef9cc0019a57
- MD5 c04269a6f4c8af6f2a81b0e4855de792
- SHA1 3d9a5bf680cb68e033fb50568770cc1a06120508
- SHA512 d64592e74a748fe0345f057b1b2fdb13cd78bbc252862604bef9e1fcbced000b99dee91085ab5eb3120e6905ceebfc81314e76a504d932e79ccac40e704c076d
- SSDEEP 768:RgomoTqToijERvEXdx8h4xU289N8c9ECI2NeYUXzwHTEwGu5Ivm3o6eAA4alZFlI:427c8NXLI2lKwveS
- TLSH T17D73752667ED4229F2F77F50EEB402315B76BC96ED7CD65C01C1414E09F2A4098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/EnglishUK.ini
- SHA256 b0633189b72cc02ce97648200542ee59a2c8d7829ef2ce8eaafb7b86e9ec9936
- MD5 ead85763965d0a7968c92bdd1065fd16
- SHA1 6b50fa24ff2fc5d1681b119337782d7c52aabc11
- SHA512 ebd7a8c03d782a8ea720270dc65011496b7110ba37e704f403594cb0a9c01fe5fde2824c2e6a0091c2884befcbf829e1ab519c5b51109047dc8cc984a623750c
- SSDEEP 768:TNgokYTa7wERCEXGx8h4xyw8YkcjfCp/lJuUcQHVL0wGu5Ivm3o6eAA4alZFj+X0:oAg4ZRap/p64HeH
- TLSH T11973772667EC4229F2F77F50EEB406315B76BC96ED7CD65C01C1414E09F2A4098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Finnish.ini
- SHA256 5ff5b4a9750dbcad4aef6008cdb16eb8662f57fd2c3eb6a5810b8e5916fa35fa
- MD5 08109a3563da759f555bbab19daf864a
- SHA1 e41c650eb087df086151e76d7d7cceefb6b167a3
- SHA512 1158f731e1b3b21ee474d20081db8de52d1d590b6efeb3c13008bc150c79ad80a7ed7d75752c2a21af30a2790b7317b07af1c6922a3908268cf638bb1e95742c
- SSDEEP 1536:8jnnX3mXWiJrOV6oCWj1krg9Hm+qsp+ihew3efXUoTyOMwUXmqL9HJDTd7bDH:8jnnX3m1JrOV6oCWj1krg9Hm+qsp+ih7
- TLSH T12273B16756FC5229F2F3AF00EEB402211BB27D97ADBCD55C06D1054D09E1681E8B2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/French.ini
- SHA256 6a55a99d2034f4d5820999eced542c4274f04eb83b0f9e650bee2929a9a79978
- MD5 2e3107fd03984e7f099801160cd954f4
- SHA1 2545b3c1c61f5c8a866ba01cee16f4baa47b2c98
- SHA512 ffe8f60df1a39dbd0aa09be90f8b067160810ba62b714c6cb029f60ea3940157a85261bd14a84b5c35a99ae2b886fae812e484b1838346e0c4cb97efccf185b0
- SSDEEP 768:R7RBQ2eC/BEqY8vca17Z+Aw/aN1VtgHN3MDHTgmkLUZVqU7YNE99gX6bMMoHAfHL:ZadMZlqtaL
- TLSH T16F93762663E9421AF6F27F01E9B802265F777C97EC3CD51C058151891DF2F40D8AABAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/German.ini
- SHA256 fcc4179be5c5cb80a476125e773bc2b541f0e4f7400d4e3558e946c8adf21219
- MD5 3874ec8777c2cf9b4e6ed7abdeff4f77
- SHA1 56170d1caaab98c26356f33a10ba3319b2b464d5
- SHA512 5f7724fedb824b5b8a3ab03959bfd7c47e5bf7e7e2c9ae1693be7ea20860725ff642401e0c09272ada1e39922971bd00adbb36ffe5ef22841ba6011cefdfe67a
- SSDEEP 1536:cwIdlaFVVtxDTvmekUnLg2uuX3/nNxV4fSxcVYofuPTeFzSrMiVeZaUEgCQrhd2F:sdlMtxDTvmekUnLg2uuX3/nNxV4fSxcm
- TLSH T1E693F42617EA4618F2F26F54FEB412746B62BDD2BD7DD81D12C0418D0CF1A40A867BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Greek.ini
- SHA256 f40e1d42573dfcb6647f28418a51279303320689bb736fb408d12ef00789b212
- MD5 c0ef520567b1aa8272b43f6717a6f15f
- SHA1 94d1ea7b0aaae459c354a7d3518e97fe44f1677c
- SHA512 1f5cdab1d9041bc0c744f25a13472344ebd2ff9da7807b8a304b589428f76d0c6a3f665fdf8a32a2640eb3a4ce80a9e8a4f3700298dba2a83de505bb2d1538fe
- SSDEEP 768:R2/eYFq96By/gdXZEHZQzfn6tnsNnDnitEdZKv5pRh2lzoebVL0wGu5Ivm3o6eAn:c/lm6By/ar2nsNnmEdZKv5gB7F3PEW
- TLSH T16A83765E0DEB4225AEF5A9F1D47241325B6EF592482CED2EB1E13148CAED8015CC3F9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Hungarian.ini
- SHA256 6eddfb60599139092b701d04f9f9ebc56978b5ca7ee2430b5eac7268f225460e
- MD5 52462e5b860f26a312dc4e08d2d3d5ee
- SHA1 45f3d33d0c48f0719ba530082f46fcdc27fdb525
- SHA512 5991575c99582523a95ba65f736c714f8027d92b60a82f8e4d490b833069e9bb1a3bc901ea86232dbfa6745269f983d25587e5b0d7dcf85b3599604f4e7db4c9
- SSDEEP 1536:GL2g/C3QEaY3a+F4L++ird5/XlBpj6v1de9LuUf0U6FuPMAflPBsN7WiO+Ryk483:GL2OC3QEaY3a+F4L++ird5/Xnpj6v1df
- TLSH T1E783F21B12EC0256F5F78F52FDF012A54B65BCA1BE3DD51C81C1228C1AF6680D5B2BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Indonesian.ini
- SHA256 adfddf01d20d7716a24d5b64df4ce1e5b22b14d15f2262fc384c71b0f4858fb8
- MD5 f8b14f775a09e701ed43e2d2470045f4
- SHA1 5a6e9b6118cf48f5fcee244aafdb3b44fabc6e4f
- SHA512 c9aa8a502e267b851ba9dfda145f1f0a3b44b2dfbfa88971a60039fc070813b3b51a56ff9579a778ec53563252d542d81c2b377553078defae550b81bfa8b0b0
- SSDEEP 768:CcbcMcqc/HaUlmTO69HoyERvEXdp8Z4xU589N8caEKIGMegUXLXYL0wGu5Ivm3ou:CcbcMcqca3wLH8NArIGUBv
- TLSH T1B373762667EC4219F6F77F50EAB402715B76BC96FD7CD65C01C1014E09F2A8098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Italian.ini
- SHA256 bc1d103a387dc1cb1b97230e04729ad578f5f90c4f0e0dd084ca16ded491e76f
- MD5 b72cd362de7fb90f5ceddea19433f7c3
- SHA1 0e56bbcc3619a9722ea55fb45525a8286033803e
- SHA512 b59bd75d5a6120d13d288a714acc00ace348316b95e8df23310331a9481ecc32a02081eea40179c5cff90e85802da63f431c127982debceaeb9dcf77986f75ef
- SSDEEP 1536:A80vj3FctHg0qOtTOxqPsyNtQzsSv3moN3y01bXiXxzhBrz:A8KTFctg0qOtTOxqPsyNtQzsY3moN3y7
- TLSH T1EE83872667FC0219F2F3BB00EE7816355A7ABD56EC3CD52D01C2015D09F1E6598A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Japanese.ini
- SHA256 c02ac88a984866ce973d713abee01c38f4612e97c2ee726855c6346190de00c6
- MD5 c33b45de7a3ebc178eaecef5a5f31cc9
- SHA1 341f0bda585b666d91a11e0f0f94e5e8e3f17860
- SHA512 a0fe83a24e69eb68f04224ca5f1cb3f260c92ea70cc7190954b1b4da1a84de1109d7d319e0aace472b00df2f7bf19d6c23483004329e882d2ffaec3f64c0d1f0
- SSDEEP 768:rOPZTUyTERrEXdx2h+xlhz8li8caEhISJ6brjeYL0wGu5Ivm3o6eAA4alFwyJraV:mOxOzkiA4IS0n6rfDlSN
- TLSH T1D2630D2A67EC0229F2F77F50E9B412315B76BC56FD7CDA5C01C5054E09F2A4098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Korean.ini
- SHA256 9c2f965fb034635bc409c12b692df1f97fa97cc95cfde95dbe6f4bd1200030de
- MD5 5fc79d75d13236d68ec25c38cd62a66e
- SHA1 c4d628c00bcd67e8111b38f7d13837a6db7c0e98
- SHA512 574aef230844839a4a6dd42551160a45f43fc5c4116c0a6f12422632ba7f3c48c7e4875dc9661c37871be37cf6ef63f81ad75e8cbde5187ca50458b423fe6010
- SSDEEP 768:1PcIQuxTWJbE3kPTPxcX/fLSRYHJuriIS0hDh86TVFyros:1xZsJbE2xcXEqivs
- TLSH T155332D3F1599942662B0E744D3C20737B346A062B65E2C4981D72F8917F2B627AD33EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Polish.ini
- SHA256 7b9f8f641168e2c0bacbe84bbf852f55b415bc56c1adc250ed2d8d6f6ee28147
- MD5 a38a6ff7d2756fe96ff24e943787ce96
- SHA1 20db1e8f19b54e7988f8f25795f8e05c25526854
- SHA512 83701820d559f690c994130d3a23807bba9be32c0541dc741890c76a139d3a7c36aa5559bae6e57c3692de654576d50398f27937dda0e3f5e67ec081d53023c5
- SSDEEP 768:RsmvPbiJKCawg6g8AO4HzyvBI6dqSAi/ntsHQP2FT2VUg3q3RqPYi/zDu77gfbNo:v4FvtsHQisa1yzS+Q
- TLSH T15A833A1623F81255F6F76F51E9F521B59F7B7C22BE3C819F20C002090AF1A9195A27BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/PortugueseBrazil.ini
- SHA256 ec3bdcc6e1f59d152a254ecbf1df43b40a22b22f98691cc60dae062122af2802
- MD5 33efa85968aea0f193dde788fda1fb47
- SHA1 cca8afc928085b154f4b9a09e23c0397080f70be
- SHA512 ceb0ca68529d011c7fced1a8ef556282d623d32e4a0b0d7b62d3dc0ab3039818f2f1c059bc64e8709974ad79b48fbd0e9c8796e845a27a61a45f39f08590d1fb
- SSDEEP 768:Rmn/LXzFd1WlCyWd17lUSZtJGfTBP3UXLXYL0wGu5Ivm3o6eAA4alPRN9GfRn5rQ:0dg6ygGraGfRO
- TLSH T14483792667FC4219F6F3BF55EAB812315A7A7C92AD7CD51C00C1124E0EF1B4098A67BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/PortuguesePortugal.ini
- SHA256 9d7a87184a1e30bb29b788529d5d26ca982f488c337b287106da3d9c9d3cdd07
- MD5 c1e86221503fca4ff199ed561e7b4c38
- SHA1 bff571048c0ef846f1c8c9b0173c65a148e75bac
- SHA512 211328ae1531d6f4bd762bc62358ae2ede45792a3347db084a5cb306f7f604d18570eb41efdb4c42e85bcc5700d202ec83b37a5b7b82455f8b524cc1b39671b8
- SSDEEP 768:RzzVzyd1WlDy6d87lUSZtqGFTxP/RZmR2ersL0wGu5Ivm3o6eAA4almTNF43VlUt:6dg3DzG04P4nUt
- TLSH T17A839A2667FC4219F6F3BF45EAB812325A777C92AD7CD51C00C1125A0DF1B4098AA7BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Romanian.ini
- SHA256 ecb586f700446e2381f4b24ddd47cb01d0761592b8289c5152f37754f0e6cf9b
- MD5 e56ee3b29eb3f7dd2325c6dc00dcd21f
- SHA1 fc2e5e5b46b6eb4306189d3f62566830d900394c
- SHA512 e411d7c112884fcae955abf4b070dfa55c32e2873707f74f2fd957bd7f52b00239bcedf00ad1ff624c6f4e3cb3c1017bb9d88dd43f80cf22b4843e7f0a993412
- SSDEEP 768:nDs4cGREs64Ks6nQhqCeYm3BKHM//sG8kJV94WZ8LNIE0N+e+RvZR25udZUTcHCr:8Tsjq3YmxKMhr4vNXOowv
- TLSH T17B83CE6667EC0129F3F3BF00E97412295E777A63ED7CD50E0581058D1EF2E8098A2BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Russian.ini
- SHA256 c492cb45fb294d4af9a821988232b94a29a38ad30ff8a84c0c114969548c9ab7
- MD5 223d1a2048c35d775d508e2a8220adb5
- SHA1 a1a2d136f79299dcdde02f24a1e85d821c63dad9
- SHA512 6fa46e92c47f22aa3623b014c0a70cce42ca86fc09234ec8941d41706d898641a367b0794b7f32c6d71570520eb49ab1d5fd5b8ff38d8d0ee10e8fd97fb56db0
- SSDEEP 1536:3byG9YQzMNyE2i4A8tL1GfY/4SsKWba3C9FoPB3NOTaIjsfr:3byG9YQzMNyE2i4A8tL1GfY/4SsKWbaB
- TLSH T19373345FF9BC922165A4D2509B854AF322F9B710332D69C686CF3E6860EC27533126DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/SimpChinese.ini
- SHA256 c903e6834e0854f1994573f153e96d6f570c4730badc1620bb35340946522b8f
- MD5 1619228149b6f1b369361e523527f911
- SHA1 ecde8a4b69d7155e4d354be01f3ded0b95140d64
- SHA512 d0646c77cc7a5dbb712676cdaa6ec287c78a523c6b659b5e128123ad97c9de7a8fd08575f49b7dc510ac1d38d62a81dccb3553de7a63d091f4a0e324956c3cba
- SSDEEP 768:RfbkhDovl5jAxUsLF20OeJW1okjij9Sfos:SavDjMUsZFZWdih+T
- TLSH T19C03ED3E0F8911BA43F4CA60D1C00B27B7E4A55B679C6D1588DF4F8506E668235CBAFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Slovenian.ini
- SHA256 811ab8f079ee56bde6d1375ad87e8d13ca1ea8072a40c6b2bb9d1c51173ee58c
- MD5 ddee309ec6cb8d9932c244a573506721
- SHA1 9c7b31831738c82e12e0517b77efc96669a26703
- SHA512 bd7b44c010e2efab691ee341f2f1050c38f197f4bc3d376194e6fa1c62c10f2ce26a01be7492536a485437e7ed7aa870f753282b6c8aca7ee0fd58c5080bce95
- SSDEEP 1536:DZRfPdKoVotrkFowbQpOr203uWJoW7l2t6g:DZRPdKoVotYFowbQpOr203uWJoW7l2t7
- TLSH T17583C21B62FC124AF9F7BB01EAF506744B7A7DB1B93CC12D11D102890AE26C195E27B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Spanish.ini
- SHA256 dcb8b5f02fb12386700ef955b926cd8b9d973591d48dd2a5016b7881f84f7d9f
- MD5 413d6c22280d0a08e6e59753887cbe3f
- SHA1 e50e5a106930eee267a1819a3d94724776abc736
- SHA512 7f1c5266275509abd511474b46b85e6e7a5949a4c49304119977fab88212ce1980d9060b256e23cfa975c5a1053cef5d4560e38d2ef45bbb7e8deeb6ef08a1e0
- SSDEEP 768:RBzoH3atWQlrszHDVviwkKgdFjnajIVLoDjsO/l5o6eAA4almoUMau8+4:kbJviHFjn/GzMauW
- TLSH T179839D2217FD521AF2F3BF05EAB906255E76BC92EC3C941C0191125A0DF1F409DAABB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Swedish.ini
- SHA256 187c3f55491af0e511b5d2f08e9c052d92df28b67ea399e441c2cf81b8237b7f
- MD5 247de23d7130df2cab91c321daf2c0d3
- SHA1 c413535f4257007997cc9cda15ad7b6f5e1e1e1f
- SHA512 5a56aa669b6c5e4fdc10787e61d5dcde7efb6c951873a712b8984c1915c3559ef331e05071e814721cf05f8c31a6c25542487ce221ede23497f62688d9d86a44
- SSDEEP 1536:zZSpPKlTytVAkve6qmvSAB0i5wLBPFP40uDTMR8yoIJ53H783azvKd6ksLCiWBtZ:tSpPKlTytVAEe6qmvSAB0i5wLBdP40uB
- TLSH T164730B2657EC0629F1F3AB10FDB4067156A5BCE6BCBCD61C06C1058C09F1A95A4F2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/TradChinese.ini
- SHA256 6573168fde9efa71e1fa6a0b1750c25867ef779494ec29dad919d154155028c5
- MD5 6f041711b9dd18e0d64b8f8aced559e3
- SHA1 f3ae314c871ecaba9ee64b6279e6fb309db22588
- SHA512 c246813d751498b4027e811ddb5a5c1b9f80bb0009e0418a0352b5bee82af018d11bc51ce1e7de654133bbde44ce9fc516e989243e5ed51f8c4bd236b88fbc95
- SSDEEP 768:RN5soH9CQPdY1nsmEPQ/onbZOTcqOcQSk/I:QQlYWmEDwTZ
- TLSH T104030E3E0AC9013B9BB4CA44D2D5063277642497778C2E5A78D34B8417DBBC235DBAEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Turkish.ini
- SHA256 62060d072507ed2965b263cf577898e41589bb6d2e7e34bded3a248624e18dc8
- MD5 dbb148e2fc65be9a1c4a522f0729de3c
- SHA1 2cc83a67b7d7f58519639d0d4993bb83cc1e352e
- SHA512 f21a37e78920cfa1871ca49307413538b227a1066969ad7f68cbd0576a19cf757ce2ac55ef7552dd071554e54f7f0b378016d907a200ed7621b2463005446c71
- SSDEEP 1536:DqasQZaJMzjtjfVVr/PMl1VPkv8D3lzb4VLLOJimAKdt2OapvjywWZI+8sMwNc3q:DqfQZaJMzjtjfVVr/P0K8D3lzb4VLLON
- TLSH T1C383E12647EC4116FAF35F02E9F521721BE63DB2BD3C966E22D1024909F1680D466BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Ukrainian.ini
- SHA256 39897b9a9152ab49fe323f409c64629f9af3908df4d70c92d881c95b272207dc
- MD5 50aa7ab3d6281c30392d040570128a97
- SHA1 8a50f224fb748085ff870c56431c24b0fade68b2
- SHA512 116e77d7e4498839df097c752273fa2c23e4f7f06684c0187b7d39985e156d7e7ffea4058b774f4395253628670e98d6f91e762aefbfa4fb26c6260cc7dc7b61
- SSDEEP 1536:1c4l2ntorFde8XkbkH/2x8xDbfYZCvuJumTbShx8yTrY3ASqqrlVUyyEg2GbshpA:1c4lktorFde8XkbkH/2x8xDbfYZCvuJy
- TLSH T19D736B5FFDBC422566A4D251CB8146E322E8B71027AC99C8A2CF7E6450E933533527DF
- MD5 SHA1 SHA512 SSDEEP TLSH
License.txt
- SHA256 edeaef6a635102ad134b4efecf1d7d68e586591b2207c2d5a9be93b29a787132
- MD5 ea40ec498fca487e2d2044cc7880a734
- SHA1 62583010ca45e1ed90e194df32762856133ddb67
- SHA512 94d998a858dd64e3bd22f767a4532cfa4cd79b554e17b1b48008acc304111e46178e7b59f0dd9d85005e35c5e14358ab2a6032ac1fe0b5c50bcc95f8b73c2efc
- SSDEEP 96:ukxTEYydJDSNS52jzafhcu/zGw8CH2HmxMnFdvZj:JiJDSgcjehT/z8bHmxMFdvZj
- TLSH T1C181A76B770193B54B9703122646E8C5F72F917832BB69507269804F2792E38C3FB5D6
- MD5 SHA1 SHA512 SSDEEP TLSH
MACDll.dll
- IMPHASH 9cccf50fd736d2bf0d9e08c6a2a173a1
- SHA256 806e83bb5acd31473f7abeb3f7b9424d03c4eb4d7e5fc24eb7bf40fbe4ff64ac
- MD5 072a156ea3f8eba9d2e3c5030b0cffd0
- SHA1 602747e7db331ccec54e7d9e63183ba38b6bcec6
- SHA512 65e72b4bbbd5858ca524169854717550e4b4a5c31d04bf3a0283584ab8726b71506b23f0743df89489bd4e6c1d92906fac7d0bd8376dd91d749ffe0c9254941c
- SSDEEP 1536:OilGuA/ldU2Qmm/DcfFYFJpcBfsKEjRyX8y0o9f/5:OnWmmbUY9caKvMy0o1/5
- TLSH T13EA3492632E1C168E0A71231C5A62FB5E6F6DF31DF328A470754BD6F7D34A01AE11366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64187
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
memmove
strncpy
_purecall
wcscpy
_ftol
wcsrchr
atoi
_strnicmp
strstr
labs
_CxxThrowException
_wtoi
free
calloc
_initterm
malloc
_adjust_fdiv
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_wcsicmp
strncmp
sprintf
qsort
strcpy
strlen
_EH_prolog
wcslen
??2@YAPAXI@Z
memcpy
memset
__CxxFrameHandler
abs
_wcsnicmp
memcmp
??3@YAXPAX@Z
kernel32
DisableThreadLibraryCalls
Sleep
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
GetFileSize
SetEndOfFile
SetFilePointer
WriteFile
ReadFile
CreateFileW
CloseHandle
CompressFile
ConvertFile
DecompressFile
FillWaveFormatEx
FillWaveHeader
GetFieldTagW
GetInterfaceCompatibility
GetVersionNumber
RemoveTag
SetFieldTagW
TagFileSimple
VerifyFile
_GetID3Tag@8
c_APECompress_AddData
c_APECompress_Create
c_APECompress_Destroy
c_APECompress_Finish
c_APECompress_GetBufferBytesAvailable
c_APECompress_Kill
c_APECompress_LockBuffer
c_APECompress_Start
c_APECompress_StartW
c_APECompress_UnlockBuffer
c_APEDecompress_Create
c_APEDecompress_CreateW
c_APEDecompress_Destroy
c_APEDecompress_GetData
c_APEDecompress_GetInfo
c_APEDecompress_Seek
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=19, version=8034,
count=2, id=12, version=7291,
count=1, id=14, version=7299,
count=5, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=52, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=35, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=4, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Readme.txt
- SHA256 03db568b392cd07818e35f1bad081f27142f08a33e6505f827661759ca3f7cfe
- MD5 fe9d6ae784189e50451e50bd00370b1f
- SHA1 19575c9520131391487763bb5e5cdeb013e76cc6
- SHA512 62262f4d02779bb09359f8ed946228737eebe848452f96ac1f2f2126626c1a7e1d0d17721f5d76004bef566f49a0e35535e50a0d355fcfb5c4e2b85c60dea4e1
- TLSH T14E11D982BD0A70172A7167A8B2572802FE8D87DF09E793F1794D0512B71AACCC3FA025
- MD5 SHA1 SHA512 TLSH
abcmd.exe
- IMPHASH 08c6c6afda2527b8a47741d922302b10
- SHA256 a0e32021954d69fedbf785523a6d5425e5dc47a04ffa02309f07ca3f9e4d0c19
- MD5 72eb1fa737fb54829d73aa9dd8f5de7b
- SHA1 036bda25343867c808d47a708d2b7bfabf407712
- SHA512 f12a4e4e57afef5ae171f31672fd6a835fd8df8f559aa0df67e6deaf1b6f8ef2dfb4d2912e88baf22b9c1df2d0d96a55037f7e2e3ee511454edc8ababb4f8e2e
- SSDEEP 768:YP6vMNHQ1TYmjtuPiTZKnyTYmjtu7KiTZKl:YyWQemBu8Kn/mBuFKl
- TLSH T16CC22AE2AE1C94E2EF424F30E5D41423FD37B6D52E88249BA116C4A549CB7F17E6603D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:e9:7c:65:0b:f0:1c:e5:38:b6:83:a5:0a:ba:a4:ae:89:fb:a8:21:d6:4a:19:4d:48:c4:02:7e:7c:79:d8:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Mar 15, 2023
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Digest
24:e9:55:be:62:bb:2b:ed:de:90:3f:95:e9:f8:00:29:fa:42:2e:5c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Mar 15, 2023
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Serial Number
e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 11, 2018 - Sep 11, 2023
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 9, 2022 - Dec 6, 2032
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
5840
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvcirt
?cout@@3Vostream_withassign@@A
??6ostream@@QAEAAV0@PBD@Z
?flush@@YAAAVostream@@AAV1@@Z
?cerr@@3Vostream_withassign@@A
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_splitpath
strchr
printf
sprintf
kernel32
GetConsoleMode
GetStdHandle
CreateMutexA
CreateNamedPipeA
GetCurrentDirectoryA
CreateProcessA
ResumeThread
WaitForSingleObject
Sleep
GetExitCodeProcess
WriteFile
ConnectNamedPipe
ReadFile
TerminateThread
CreateThread
CloseHandle
SetConsoleMode
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=19, version=8034,
count=11, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=14, version=7299,
count=40, id=1, productName=Unmarked objects,
count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
lame_enc.dll
- IMPHASH c99914745d82a188c29bb89ee14d44a0
- SHA256 f991019a42b5f3fce8e906b7a224597b4b1856c7940eb01b39eb858e250f435a
- MD5 7a1f439156eccb4aeb8ff90e35e750b1
- SHA1 036ef0c1615a1ee0870fad068423f9e4bc32045d
- SHA512 b44c614074bf2cd6ffbdedafe36a84f7d591005baabf4eedcb83f8c4fbd289f26ad4249ff8c6a62bedd63c16cc0b0df0e8297e246a833116bb53689ccb37a6b0
- SSDEEP 3072:JlWoCDQIKB3EmEcmCu/IGfzOHem7imiNHTnSCqaAPeX+62suy9:JkoTI+35EdCuwlSmg+xaAIuy9
- TLSH T1A7148E43D182C8F1CD5A18395D8B3737DB3177850A24DF52BBA8EF166672B90E56838C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145939
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_vsnprintf
atoi
strncpy
_wfopen
_adj_fdiv_r
calloc
_adj_fdivr_m32
_adj_fdiv_m32i
_CIpow
free
fseek
_adj_fpatan
floor
_adj_fdivr_m64
fflush
vfprintf
ceil
malloc
_adj_fdiv_m32
fopen
fscanf
ftell
fwrite
strncmp
fread
tolower
strtol
sprintf
_snprintf
memmove
qsort
fprintf
exit
_initterm
_adjust_fdiv
_iob
fputs
fclose
abort
_ftol
kernel32
GetModuleFileNameA
OutputDebugStringA
GetPrivateProfileIntA
beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteInfoTagW
beWriteVBRHeader
beWriteVBRHeaderW
id3tag_add_v2
id3tag_init
id3tag_set_album
id3tag_set_artist
id3tag_set_comment
id3tag_set_genre
id3tag_set_title
id3tag_set_track
id3tag_set_year
id3tag_v1_only
id3tag_v2_only
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_bitstream
lame_init_params
lame_mp3_tags_fid
lame_set_bWriteVbrTag
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right
Name
.text
Size
140KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=19, version=8034,
count=2, id=14, version=7299,
count=1, id=12, version=7291,
count=46, id=1, productName=Unmarked objects,
count=32, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=4, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
libFLAC.dll
- IMPHASH 3a578b1e8977c8e4eb6e3e0cb14d130d
- SHA256 aa0603abb74ed604518063a5b7f037d007e63b6349f23c2c00d0985609365293
- MD5 ebbc719e881f2311d352ade3b5e48aee
- SHA1 bb411ad4ec3a350563efbd6bfd81e933ff5498fc
- SHA512 6c4431a9edd3fd6225fef57703e90e1b0247fabac2f5400820329126f609c31da1e8c15289cfb999ad7ce5f82b759c7d24aa88e61b8af3d572981152dde40cd7
- SSDEEP 3072:EkeDMKDmExyaCoaNVqaJrbw8X2HjmsXla/smxDa9IYSI:Ek0DmExyDoGjbbX2HjNaJxDg
- TLSH T11FE36D8CFF4A80F9FA51247A30EBA777AE364306261ED2539764DE725C21224F91D38D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
120133
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
malloc
realloc
qsort
frexp
_ftol
fclose
_errno
ftell
fopen
fseek
fread
fwrite
free
rename
memchr
_iob
_wfopen
_setmode
strtod
strchr
strncmp
_initterm
_adjust_fdiv
calloc
strrchr
memmove
_strdup
_unlink
_stat
_utime
_chmod
_strnicmp
_fstat
_fileno
kernel32
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
FLAC_API_SUPPORTS_OGG_FLAC
FLAC__ChannelAssignmentString
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ORDER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_RAW_LEN
FLAC__ENTROPY_CODING_METHOD_TYPE_LEN
FLAC__EntropyCodingMethodTypeString
FLAC__FRAME_FOOTER_CRC_LEN
FLAC__FRAME_HEADER_BITS_PER_SAMPLE_LEN
FLAC__FRAME_HEADER_BLOCKING_STRATEGY_LEN
FLAC__FRAME_HEADER_BLOCK_SIZE_LEN
FLAC__FRAME_HEADER_CHANNEL_ASSIGNMENT_LEN
FLAC__FRAME_HEADER_CRC_LEN
FLAC__FRAME_HEADER_RESERVED_LEN
FLAC__FRAME_HEADER_SAMPLE_RATE_LEN
FLAC__FRAME_HEADER_SYNC
FLAC__FRAME_HEADER_SYNC_LEN
FLAC__FRAME_HEADER_ZERO_PAD_LEN
FLAC__FrameNumberTypeString
FLAC__MetadataTypeString
FLAC__Metadata_ChainStatusString
FLAC__Metadata_SimpleIteratorStatusString
FLAC__STREAM_METADATA_APPLICATION_ID_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_IS_CD_LEN
FLAC__STREAM_METADATA_CUESHEET_LEAD_IN_LEN
FLAC__STREAM_METADATA_CUESHEET_MEDIA_CATALOG_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_NUM_TRACKS_LEN
FLAC__STREAM_METADATA_CUESHEET_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_ISRC_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUM_INDICES_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_PRE_EMPHASIS_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_TYPE_LEN
FLAC__STREAM_METADATA_IS_LAST_LEN
FLAC__STREAM_METADATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_COLORS_LEN
FLAC__STREAM_METADATA_PICTURE_DATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_DEPTH_LEN
FLAC__STREAM_METADATA_PICTURE_DESCRIPTION_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_HEIGHT_LEN
FLAC__STREAM_METADATA_PICTURE_MIME_TYPE_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_TYPE_LEN
FLAC__STREAM_METADATA_PICTURE_WIDTH_LEN
FLAC__STREAM_METADATA_SEEKPOINT_FRAME_SAMPLES_LEN
FLAC__STREAM_METADATA_SEEKPOINT_PLACEHOLDER
FLAC__STREAM_METADATA_SEEKPOINT_SAMPLE_NUMBER_LEN
FLAC__STREAM_METADATA_SEEKPOINT_STREAM_OFFSET_LEN
FLAC__STREAM_METADATA_STREAMINFO_BITS_PER_SAMPLE_LEN
FLAC__STREAM_METADATA_STREAMINFO_CHANNELS_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MD5SUM_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_SAMPLE_RATE_LEN
FLAC__STREAM_METADATA_STREAMINFO_TOTAL_SAMPLES_LEN
FLAC__STREAM_METADATA_TYPE_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_ENTRY_LENGTH_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_NUM_COMMENTS_LEN
FLAC__STREAM_SYNC
FLAC__STREAM_SYNC_LEN
FLAC__STREAM_SYNC_STRING
FLAC__SUBFRAME_LPC_QLP_COEFF_PRECISION_LEN
FLAC__SUBFRAME_LPC_QLP_SHIFT_LEN
FLAC__SUBFRAME_TYPE_CONSTANT_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_FIXED_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_LEN
FLAC__SUBFRAME_TYPE_LPC_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_VERBATIM_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_WASTED_BITS_FLAG_LEN
FLAC__SUBFRAME_ZERO_PAD_LEN
FLAC__StreamDecoderErrorStatusString
FLAC__StreamDecoderInitStatusString
FLAC__StreamDecoderLengthStatusString
FLAC__StreamDecoderReadStatusString
FLAC__StreamDecoderSeekStatusString
FLAC__StreamDecoderStateString
FLAC__StreamDecoderTellStatusString
FLAC__StreamDecoderWriteStatusString
FLAC__StreamEncoderInitStatusString
FLAC__StreamEncoderSeekStatusString
FLAC__StreamEncoderStateString
FLAC__StreamEncoderTellStatusString
FLAC__StreamEncoderWriteStatusString
FLAC__StreamMetadata_Picture_TypeString
FLAC__SubframeTypeString
FLAC__VENDOR_STRING
FLAC__VERSION_STRING
FLAC__format_cuesheet_is_legal
FLAC__format_picture_is_legal
FLAC__format_sample_rate_is_subset
FLAC__format_sample_rate_is_valid
FLAC__format_seektable_is_legal
FLAC__format_seektable_sort
FLAC__format_vorbiscomment_entry_is_legal
FLAC__format_vorbiscomment_entry_name_is_legal
FLAC__format_vorbiscomment_entry_value_is_legal
FLAC__metadata_chain_check_if_tempfile_needed
FLAC__metadata_chain_delete
FLAC__metadata_chain_merge_padding
FLAC__metadata_chain_new
FLAC__metadata_chain_read
FLAC__metadata_chain_read_ogg
FLAC__metadata_chain_read_ogg_with_callbacks
FLAC__metadata_chain_read_with_callbacks
FLAC__metadata_chain_sort_padding
FLAC__metadata_chain_status
FLAC__metadata_chain_write
FLAC__metadata_chain_write_with_callbacks
FLAC__metadata_chain_write_with_callbacks_and_tempfile
FLAC__metadata_get_cuesheet
FLAC__metadata_get_picture
FLAC__metadata_get_streaminfo
FLAC__metadata_get_tags
FLAC__metadata_get_tagsW
FLAC__metadata_iterator_delete
FLAC__metadata_iterator_delete_block
FLAC__metadata_iterator_get_block
FLAC__metadata_iterator_get_block_type
FLAC__metadata_iterator_init
FLAC__metadata_iterator_insert_block_after
FLAC__metadata_iterator_insert_block_before
FLAC__metadata_iterator_new
FLAC__metadata_iterator_next
FLAC__metadata_iterator_prev
FLAC__metadata_iterator_set_block
FLAC__metadata_object_application_set_data
FLAC__metadata_object_clone
FLAC__metadata_object_cuesheet_calculate_cddb_id
FLAC__metadata_object_cuesheet_delete_track
FLAC__metadata_object_cuesheet_insert_blank_track
FLAC__metadata_object_cuesheet_insert_track
FLAC__metadata_object_cuesheet_is_legal
FLAC__metadata_object_cuesheet_resize_tracks
FLAC__metadata_object_cuesheet_set_track
FLAC__metadata_object_cuesheet_track_clone
FLAC__metadata_object_cuesheet_track_delete
FLAC__metadata_object_cuesheet_track_delete_index
FLAC__metadata_object_cuesheet_track_insert_blank_index
FLAC__metadata_object_cuesheet_track_insert_index
FLAC__metadata_object_cuesheet_track_new
FLAC__metadata_object_cuesheet_track_resize_indices
FLAC__metadata_object_delete
FLAC__metadata_object_is_equal
FLAC__metadata_object_new
FLAC__metadata_object_picture_is_legal
FLAC__metadata_object_picture_set_data
FLAC__metadata_object_picture_set_description
FLAC__metadata_object_picture_set_mime_type
FLAC__metadata_object_seektable_delete_point
FLAC__metadata_object_seektable_insert_point
FLAC__metadata_object_seektable_is_legal
FLAC__metadata_object_seektable_resize_points
FLAC__metadata_object_seektable_set_point
FLAC__metadata_object_seektable_template_append_placeholders
FLAC__metadata_object_seektable_template_append_point
FLAC__metadata_object_seektable_template_append_points
FLAC__metadata_object_seektable_template_append_spaced_points
FLAC__metadata_object_seektable_template_append_spaced_points_by_samples
FLAC__metadata_object_seektable_template_sort
FLAC__metadata_object_vorbiscomment_append_comment
FLAC__metadata_object_vorbiscomment_delete_comment
FLAC__metadata_object_vorbiscomment_entry_from_name_value_pair
FLAC__metadata_object_vorbiscomment_entry_matches
FLAC__metadata_object_vorbiscomment_entry_to_name_value_pair
FLAC__metadata_object_vorbiscomment_find_entry_from
FLAC__metadata_object_vorbiscomment_insert_comment
FLAC__metadata_object_vorbiscomment_remove_entries_matching
FLAC__metadata_object_vorbiscomment_remove_entry_matching
FLAC__metadata_object_vorbiscomment_replace_comment
FLAC__metadata_object_vorbiscomment_resize_comments
FLAC__metadata_object_vorbiscomment_set_comment
FLAC__metadata_object_vorbiscomment_set_vendor_string
FLAC__metadata_simple_iterator_delete
FLAC__metadata_simple_iterator_delete_block
FLAC__metadata_simple_iterator_get_application_id
FLAC__metadata_simple_iterator_get_block
FLAC__metadata_simple_iterator_get_block_length
FLAC__metadata_simple_iterator_get_block_offset
FLAC__metadata_simple_iterator_get_block_type
FLAC__metadata_simple_iterator_init
FLAC__metadata_simple_iterator_insert_block_after
FLAC__metadata_simple_iterator_is_last
FLAC__metadata_simple_iterator_is_writable
FLAC__metadata_simple_iterator_new
FLAC__metadata_simple_iterator_next
FLAC__metadata_simple_iterator_prev
FLAC__metadata_simple_iterator_set_block
FLAC__metadata_simple_iterator_status
FLAC__stream_decoder_delete
FLAC__stream_decoder_finish
FLAC__stream_decoder_flush
FLAC__stream_decoder_get_bits_per_sample
FLAC__stream_decoder_get_blocksize
FLAC__stream_decoder_get_channel_assignment
FLAC__stream_decoder_get_channels
FLAC__stream_decoder_get_decode_position
FLAC__stream_decoder_get_md5_checking
FLAC__stream_decoder_get_resolved_state_string
FLAC__stream_decoder_get_sample_rate
FLAC__stream_decoder_get_state
FLAC__stream_decoder_get_total_samples
FLAC__stream_decoder_init_FILE
FLAC__stream_decoder_init_file
FLAC__stream_decoder_init_fileW
FLAC__stream_decoder_init_ogg_FILE
FLAC__stream_decoder_init_ogg_file
FLAC__stream_decoder_init_ogg_stream
FLAC__stream_decoder_init_stream
FLAC__stream_decoder_new
FLAC__stream_decoder_process_single
FLAC__stream_decoder_process_until_end_of_metadata
FLAC__stream_decoder_process_until_end_of_stream
FLAC__stream_decoder_reset
FLAC__stream_decoder_seek_absolute
FLAC__stream_decoder_set_md5_checking
FLAC__stream_decoder_set_metadata_ignore
FLAC__stream_decoder_set_metadata_ignore_all
FLAC__stream_decoder_set_metadata_ignore_application
FLAC__stream_decoder_set_metadata_respond
FLAC__stream_decoder_set_metadata_respond_all
FLAC__stream_decoder_set_metadata_respond_application
FLAC__stream_decoder_set_ogg_serial_number
FLAC__stream_decoder_skip_single_frame
FLAC__stream_encoder_delete
FLAC__stream_encoder_disable_constant_subframes
FLAC__stream_encoder_disable_fixed_subframes
FLAC__stream_encoder_disable_verbatim_subframes
FLAC__stream_encoder_finish
FLAC__stream_encoder_get_bits_per_sample
FLAC__stream_encoder_get_blocksize
FLAC__stream_encoder_get_channels
FLAC__stream_encoder_get_do_escape_coding
FLAC__stream_encoder_get_do_exhaustive_model_search
FLAC__stream_encoder_get_do_md5
FLAC__stream_encoder_get_do_mid_side_stereo
FLAC__stream_encoder_get_do_qlp_coeff_prec_search
FLAC__stream_encoder_get_loose_mid_side_stereo
FLAC__stream_encoder_get_max_lpc_order
FLAC__stream_encoder_get_max_residual_partition_order
FLAC__stream_encoder_get_min_residual_partition_order
FLAC__stream_encoder_get_qlp_coeff_precision
FLAC__stream_encoder_get_resolved_state_string
FLAC__stream_encoder_get_rice_parameter_search_dist
FLAC__stream_encoder_get_sample_rate
FLAC__stream_encoder_get_state
FLAC__stream_encoder_get_streamable_subset
FLAC__stream_encoder_get_total_samples_estimate
FLAC__stream_encoder_get_verify
FLAC__stream_encoder_get_verify_decoder_error_stats
FLAC__stream_encoder_get_verify_decoder_state
FLAC__stream_encoder_init_FILE
FLAC__stream_encoder_init_file
FLAC__stream_encoder_init_fileW
FLAC__stream_encoder_init_ogg_FILE
FLAC__stream_encoder_init_ogg_file
FLAC__stream_encoder_init_ogg_stream
FLAC__stream_encoder_init_stream
FLAC__stream_encoder_new
FLAC__stream_encoder_process
FLAC__stream_encoder_process_interleaved
FLAC__stream_encoder_set_apodization
FLAC__stream_encoder_set_bits_per_sample
FLAC__stream_encoder_set_blocksize
FLAC__stream_encoder_set_channels
FLAC__stream_encoder_set_compression_level
FLAC__stream_encoder_set_do_escape_coding
FLAC__stream_encoder_set_do_exhaustive_model_search
FLAC__stream_encoder_set_do_md5
FLAC__stream_encoder_set_do_mid_side_stereo
FLAC__stream_encoder_set_do_qlp_coeff_prec_search
FLAC__stream_encoder_set_loose_mid_side_stereo
FLAC__stream_encoder_set_max_lpc_order
FLAC__stream_encoder_set_max_residual_partition_order
FLAC__stream_encoder_set_metadata
FLAC__stream_encoder_set_min_residual_partition_order
FLAC__stream_encoder_set_ogg_serial_number
FLAC__stream_encoder_set_qlp_coeff_precision
FLAC__stream_encoder_set_rice_parameter_search_dist
FLAC__stream_encoder_set_sample_rate
FLAC__stream_encoder_set_streamable_subset
FLAC__stream_encoder_set_total_samples_estimate
FLAC__stream_encoder_set_verify
FLAC__treamEncoderReadStatusString
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=19, version=8034,
count=8, id=12, version=7291,
count=8, id=14, version=7299,
count=39, id=1, productName=Unmarked objects,
count=27, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=5, productName=Unmarked objects (old),
count=4, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
libvorbis.dll
- IMPHASH b9c3a479befdc7ea9a5d536df78e7324
- SHA256 cd51886c6b5e9dc3faf1b9f095717731c508382e32f22d221e03448755c487a8
- MD5 3d74a92b65f7a75a79719fbf6c158a00
- SHA1 7b9f74d6f4c43daed0941c3279fbbe7e2db293ac
- SHA512 55ecab3c1f99dd9c53346331a9cfc0bb7204a0f34d6e41a1c520c582b218fe0b721c8ae2b9ba41c9c678c5d949847d9e8f7fe48b77646d27f9a6ff16b3ed347f
- SSDEEP 3072:l8hsLKiQLE9te6RtZwYLjvu2TNs9fHvoiR1VcLm1lMR0IF:lLALeeajwYO2pmfP8LvR0g
- TLSH T1DB75D80759928B34C5BC51B588EB557843322C4DAE800F9E7BDCE67430D3578BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
105871
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
malloc
free
realloc
memmove
calloc
qsort
exit
memchr
toupper
ceil
ldexp
_ftol
_errno
ftell
fclose
fread
fseek
fopen
_wfopen
_initterm
_adjust_fdiv
_CIpow
floor
kernel32
DisableThreadLibraryCalls
_floor_P
_mapping_P
_residue_P
ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpackB_adv
oggpackB_adv1
oggpackB_bits
oggpackB_bytes
oggpackB_get_buffer
oggpackB_look
oggpackB_look1
oggpackB_read
oggpackB_read1
oggpackB_readinit
oggpackB_reset
oggpackB_write
oggpackB_writealign
oggpackB_writeclear
oggpackB_writecopy
oggpackB_writeinit
oggpackB_writetrunc
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writeclear
oggpack_writecopy
oggpack_writeinit
oggpack_writetrunc
ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_crosslap
ov_fopen
ov_fopenW
ov_halfrate
ov_halfrate_p
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_lap
ov_pcm_seek_page
ov_pcm_seek_page_lap
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_seek_lap
ov_raw_tell
ov_raw_total
ov_read
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_lap
ov_time_seek_page
ov_time_seek_page_lap
ov_time_tell
ov_time_total
vorbis_analysis
vorbis_analysis_blockout
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_analysis_init
vorbis_analysis_wrote
vorbis_bitrate_addblock
vorbis_bitrate_flushpacket
vorbis_block_clear
vorbis_block_init
vorbis_comment_add
vorbis_comment_add_tag
vorbis_comment_clear
vorbis_comment_init
vorbis_comment_query
vorbis_comment_query_count
vorbis_commentheader_out
vorbis_dsp_clear
vorbis_encode_ctl
vorbis_encode_init
vorbis_encode_init_vbr
vorbis_encode_setup_init
vorbis_encode_setup_managed
vorbis_encode_setup_vbr
vorbis_granule_time
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_idheader
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_version_string
vorbis_window
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=19, version=8034,
count=6, id=14, version=7299,
count=27, id=1, productName=Unmarked objects,
count=29, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=4, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
unicows.dll
- IMPHASH 628730441f2453f40c61ce661f08e0ca
- SHA256 f06f36fa03a5db4980c9d1120ada1d9e558515be73eff5b7cd34c48c0d9afd35
- MD5 f8d176db5b14aed7c9b25e0640226bd1
- SHA1 a31c1c641639f5b50e79e0330cfc91e6613bf7f9
- SHA512 ceb50c3de105cb8a9541161c2bc9d65cc86c9b2bf5e6e40dcb8c8227ba38e0713d30aa84d8479c78e03ee63ef2f75debe7a5bc6a86cc6dcbcee106d93b9597bf
- SSDEEP 6144:Y4OkcR5cbvIFc8vuB4ShpH4BemwbVkEZ77:YFkedmBPjHv777
- TLSH T10244F985BE80AE53DCB733BAB118763497EFDB6407186CD345C54F8A6571BC016382EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a7:a2:13:01:eb:da:5d:60:b9:4a:67:90:6b:06:79:8b:f5:ed:1c:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 7, 2004
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:7d:a7:00:00:00:00:00:48
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2003 - Jan 25, 2005
Minor OS version
2
Major OS version
5
Entry point
59636
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\dnsrv\sdktools\unicows\godot\obj\i386\unicows.pdb
kernel32
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesW
FindClose
IsDBCSLeadByte
GetFullPathNameA
GetFullPathNameW
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNumberFormatA
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionA
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProfileIntA
GetProfileIntW
GetProfileSectionA
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStringTypeExA
GetStringTypeExW
GetSystemDirectoryA
GetSystemDirectoryW
GetTempFileNameW
GetTempPathW
GetTimeFormatA
GetTimeFormatW
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomA
GlobalFindAtomW
GlobalGetAtomNameA
GlobalGetAtomNameW
IsBadStringPtrW
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryW
LoadLibraryExW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
MoveFileW
OpenEventA
GetDefaultCommConfigW
OpenFileMappingA
OpenFileMappingW
OpenMutexA
OpenMutexW
OpenSemaphoreA
OpenSemaphoreW
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PeekConsoleInputW
QueryDosDeviceA
QueryDosDeviceW
ReadConsoleA
ReadConsoleW
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputA
ReadConsoleOutputW
ReadConsoleOutputCharacterA
ReadConsoleOutputCharacterW
RemoveDirectoryA
RemoveDirectoryW
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathA
SearchPathW
SetComputerNameA
SetComputerNameW
SetConsoleTitleA
SetConsoleTitleW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFileAttributesA
SetFileAttributesW
SetLocaleInfoA
SetLocaleInfoW
SetVolumeLabelA
SetVolumeLabelW
VerLanguageNameA
VerLanguageNameW
WaitNamedPipeA
WaitNamedPipeW
WriteConsoleA
WriteConsoleW
WriteConsoleInputA
WriteConsoleInputW
WriteConsoleOutputA
WriteConsoleOutputW
WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WritePrivateProfileStructW
WriteProfileSectionA
WriteProfileSectionW
WriteProfileStringA
WriteProfileStringW
FindResourceA
IsBadWritePtr
SetErrorMode
GetStringTypeW
FindResourceW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetDefaultCommConfigA
GetDateFormatW
GetDateFormatA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrencyFormatW
GetCurrencyFormatA
GetConsoleTitleW
GetConsoleTitleA
GetComputerNameW
GetComputerNameA
GetAtomNameW
GetAtomNameA
FormatMessageW
FormatMessageA
HeapReAlloc
LocalAlloc
FreeEnvironmentStringsW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindAtomW
FindAtomA
FillConsoleOutputCharacterW
FillConsoleOutputCharacterA
FatalAppExitW
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
EnumTimeFormatsW
EnumTimeFormatsA
EnumSystemLocalesW
EnumSystemLocalesA
EnumSystemCodePagesW
EnumDateFormatsW
EnumDateFormatsA
EnumCalendarInfoW
EnumCalendarInfoA
DeleteFileW
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateProcessA
CreateNamedPipeW
CreateNamedPipeA
CreateMutexW
CreateMutexA
CreateMailslotW
CreateMailslotA
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateEventW
CreateEventA
CreateDirectoryExW
CreateDirectoryExA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
CompareStringW
CommConfigDialogW
CommConfigDialogA
CallNamedPipeW
CallNamedPipeA
BuildCommDCBAndTimeoutsW
BuildCommDCBAndTimeoutsA
BuildCommDCBW
BuildCommDCBA
AddAtomW
AddAtomA
InitializeCriticalSection
GetACP
GetOEMCP
DeleteCriticalSection
GetFileAttributesA
LoadLibraryExA
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
lstrlenW
FindResourceExW
SizeofResource
LoadResource
LockResource
FreeResource
GetTempFileNameA
GetTempPathA
DeleteFileA
MoveFileA
_lclose
_lread
_lwrite
_llseek
VirtualQuery
GetSystemInfo
VirtualFree
VirtualAlloc
VirtualProtect
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetCurrentProcessId
GetLastError
EnterCriticalSection
LeaveCriticalSection
CompareStringA
LocalFree
GlobalAddAtomA
lstrcpyA
AreFileApisANSI
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetCurrentThreadId
lstrcmpA
lstrcmpiA
GetLocaleInfoA
CreateFileA
GetFileSize
CloseHandle
IsDBCSLeadByteEx
LoadLibraryA
InterlockedExchange
FreeLibrary
GetCPInfo
GetVersion
GetModuleHandleA
GetProcAddress
lstrlenA
GetProcessHeap
HeapAlloc
SetLastError
MultiByteToWideChar
OpenEventW
HeapFree
RtlUnwind
user32
TranslateAcceleratorW
TabbedTextOutA
TabbedTextOutW
UnregisterClassA
UnregisterClassW
VkKeyScanExA
VkKeyScanExW
WinHelpA
WinHelpW
wvsprintfW
CharLowerW
CharUpperW
EnumClipboardFormats
GetClipboardData
VkKeyScanW
wsprintfW
IsCharUpperW
IsCharLowerW
IsCharAlphaNumericW
IsCharAlphaW
InsertMenuItemW
InsertMenuItemA
InsertMenuW
InsertMenuA
GrayStringW
GrayStringA
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetWindowLongW
GetTabbedTextExtentW
GetTabbedTextExtentA
GetPropW
GetMessageW
GetMenuStringW
GetMenuStringA
GetMenuItemInfoW
GetMenuItemInfoA
GetKeyNameTextW
GetKeyboardLayout
GetKeyNameTextA
GetKeyboardLayoutNameW
GetKeyboardLayoutNameA
GetDlgItemTextW
GetDlgItemTextA
GetClipboardFormatNameW
GetClipboardFormatNameA
GetClassNameW
GetClassLongW
GetClassLongA
GetClassInfoExW
GetClassInfoExA
GetClassInfoW
GetClassInfoA
FindWindowExW
FindWindowExA
FindWindowW
FindWindowA
EnableWindow
EnumPropsExW
EnumPropsExA
EnumPropsW
EnumPropsA
EnumDisplaySettingsW
EnumDisplaySettingsA
DrawTextExW
DrawTextExA
DrawTextW
DrawTextA
DrawStateW
DrawStateA
DlgDirSelectExW
DlgDirSelectExA
DlgDirSelectComboBoxExW
DlgDirSelectComboBoxExA
DlgDirListComboBoxW
DlgDirListComboBoxA
SystemParametersInfoW
DlgDirListA
DispatchMessageW
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DefMDIChildProcW
DefFrameProcW
DefDlgProcW
DdeQueryStringW
DdeQueryStringA
DdeQueryConvInfo
DdeInitializeW
DdeInitializeA
DdeCreateStringHandleW
DdeCreateStringHandleA
DdeConnectList
DdeConnect
CharUpperBuffW
IsCharLowerA
CharToOemBuffW
CharToOemW
CharPrevW
CharNextW
CharLowerBuffW
IsCharUpperA
SystemParametersInfoA
SetWindowTextW
SetWindowTextA
SetWindowsHookExW
SetWindowsHookW
SetWindowsHookA
SetWindowLongW
SetPropW
SetMenuItemInfoW
SetMenuItemInfoA
SetDlgItemTextW
SetDlgItemTextA
SetClassLongW
SetClassLongA
SendNotifyMessageW
SendMessageTimeoutW
SendMessageCallbackW
SendMessageW
SendDlgItemMessageW
RemovePropW
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClipboardFormatA
RegisterClassExW
RegisterClassExA
RegisterClassW
RegisterClassA
PostThreadMessageW
PostMessageW
PeekMessageW
OemToCharBuffW
OemToCharW
ModifyMenuW
ModifyMenuA
MessageBoxIndirectW
MessageBoxIndirectA
MessageBoxExW
MessageBoxW
MapVirtualKeyExW
ChangeMenuW
ChangeMenuA
ChangeDisplaySettingsW
ChangeDisplaySettingsA
CreateWindowExW
CreateWindowExA
CreateMDIWindowW
CreateMDIWindowA
CreateDialogParamW
CreateDialogParamA
CreateDialogIndirectParamW
CreateDialogIndirectParamA
CreateAcceleratorTableW
CreateAcceleratorTableA
CopyAcceleratorTableW
CopyAcceleratorTableA
CallWindowProcW
CallMsgFilterW
CallMsgFilterA
AppendMenuW
AppendMenuA
GetWindowThreadProcessId
SetWindowLongA
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
PeekMessageA
GetMessageA
PostThreadMessageA
PostMessageA
SendNotifyMessageA
SendMessageTimeoutA
SendMessageCallbackA
SendMessageA
DefWindowProcA
CallWindowProcA
DefMDIChildProcA
DefFrameProcA
DefDlgProcA
GetWindowLongA
GetParent
GetDlgItem
DestroyWindow
SetPropA
RemovePropA
GetClassNameA
UnhookWindowsHookEx
SetWindowsHookExA
RegisterWindowMessageA
CallNextHookEx
MapVirtualKeyExA
EnumChildWindows
MapVirtualKeyW
MapVirtualKeyA
LoadStringW
LoadMenuIndirectW
IsDlgButtonChecked
GetPropA
LoadMenuIndirectA
LoadMenuW
LoadMenuA
LoadKeyboardLayoutW
LoadKeyboardLayoutA
LoadImageW
LoadImageA
LoadIconW
LoadIconA
LoadCursorFromFileW
LoadCursorFromFileA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
LoadAcceleratorsW
LoadAcceleratorsA
IsWindowUnicode
IsWindow
DlgDirListW
IsDialogMessageW
IsClipboardFormatAvailable
gdi32
GetEnhMetaFileDescriptionW
GetGlyphOutlineA
GetGlyphOutlineW
GetICMProfileA
GetICMProfileW
GetKerningPairsA
GetKerningPairsW
GetLogColorSpaceA
GetLogColorSpaceW
GetMetaFileA
GetMetaFileW
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPointA
GetEnhMetaFileDescriptionA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetTextMetricsW
PolyTextOutA
PolyTextOutW
RemoveFontResourceA
RemoveFontResourceW
ResetDCA
ResetDCW
SetICMProfileA
SetICMProfileW
StartDocA
StartDocW
TextOutW
UpdateICMRegKeyA
UpdateICMRegKeyW
GetEnhMetaFileW
GetEnhMetaFileA
GetCharacterPlacementW
GetCharacterPlacementA
GetCharWidthFloatW
GetCharWidthFloatA
GetCharWidth32W
GetCharWidthW
GetCharWidthA
GetCharABCWidthsFloatW
GetCharABCWidthsFloatA
GetCharABCWidthsW
GetCharABCWidthsA
ExtTextOutW
ExtTextOutA
EnumICMProfilesW
EnumICMProfilesA
EnumFontsW
EnumFontsA
EnumFontFamiliesExW
EnumFontFamiliesExA
EnumFontFamiliesW
EnumFontFamiliesA
CreateScalableFontResourceW
CreateScalableFontResourceA
CreateMetaFileW
CreateMetaFileA
CreateICW
CreateICA
CreateFontIndirectW
CreateFontIndirectA
CreateFontW
CreateFontA
CreateEnhMetaFileW
CreateEnhMetaFileA
CreateDCW
CreateDCA
CreateColorSpaceW
CreateColorSpaceA
CopyMetaFileW
CopyMetaFileA
CopyEnhMetaFileW
CopyEnhMetaFileA
AddFontResourceW
AddFontResourceA
GetFontData
GetTextExtentPointW
TranslateCharsetInfo
GetTextCharset
mpr
WNetGetUniversalNameW
MultinetGetConnectionPerformanceW
WNetAddConnectionA
WNetAddConnectionW
WNetAddConnection2A
WNetAddConnection2W
WNetAddConnection3A
WNetAddConnection3W
WNetCancelConnectionA
WNetCancelConnectionW
WNetCancelConnection2A
WNetCancelConnection2W
WNetConnectionDialog1A
WNetConnectionDialog1W
WNetDisconnectDialog1A
WNetDisconnectDialog1W
WNetEnumResourceA
WNetEnumResourceW
WNetGetConnectionA
WNetGetConnectionW
WNetGetLastErrorA
WNetGetLastErrorW
WNetGetNetworkInformationA
WNetGetNetworkInformationW
WNetGetProviderNameA
WNetUseConnectionW
WNetUseConnectionA
WNetOpenEnumW
WNetOpenEnumA
WNetGetUserW
WNetGetUserA
MultinetGetConnectionPerformanceA
WNetGetUniversalNameA
WNetGetResourceParentW
WNetGetResourceParentA
WNetGetResourceInformationW
WNetGetResourceInformationA
WNetGetProviderNameW
advapi32
RegOpenKeyA
RegEnumValueA
RegUnLoadKeyW
RegUnLoadKeyA
RegSetValueExW
RegSetValueExA
RegSetValueW
RegSetValueA
RegSaveKeyW
RegSaveKeyA
RegReplaceKeyW
RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryMultipleValuesW
RegQueryMultipleValuesA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegLoadKeyW
RegLoadKeyA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
RegEnumKeyW
RegEnumKeyA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA
RegConnectRegistryW
RegConnectRegistryA
IsTextUnicode
GetUserNameW
GetUserNameA
RegOpenKeyExA
comdlg32
GetOpenFileNameW
GetFileTitleW
GetFileTitleA
FindTextW
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
ReplaceTextW
FindTextA
ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgW
GetSaveFileNameW
version
VerQueryValueW
VerQueryValueA
VerInstallFileW
VerInstallFileA
VerFindFileW
VerFindFileA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
shell32
SHGetPathFromIDListA
ord180
ord179
SHGetFileInfoA
SHFileOperationA
SHChangeNotify
SHBrowseForFolderA
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteW
ShellExecuteA
ShellAboutW
ShellAboutA
FindExecutableW
FindExecutableA
ExtractIconExA
DragQueryFileA
DragQueryFileW
ExtractIconW
ExtractIconA
winspool.drv
GetPrinterW
GetPrinterDataW
GetPrinterDriverW
GetPrinterDriverDirectoryA
GetPrinterDriverDirectoryW
GetPrintProcessorDirectoryA
GetPrintProcessorDirectoryW
GetJobW
OpenPrinterW
ResetPrinterA
ResetPrinterW
SetJobA
SetJobW
SetPrinterA
SetPrinterW
SetPrinterDataA
SetPrinterDataW
StartDocPrinterA
EnumPrintProcessorsW
EnumPrintProcessorDatatypesW
EnumPrintersW
EnumPrinterDriversW
EnumPortsW
EnumMonitorsW
DocumentPropertiesW
DocumentPropertiesA
DeviceCapabilitiesW
DeviceCapabilitiesA
DeletePrintProvidorW
DeletePrintProvidorA
DeletePrintProcessorW
DeletePrintProcessorA
DeletePrinterDriverW
DeletePrinterDriverA
DeletePortW
DeletePortA
DeleteMonitorW
DeleteMonitorA
ConfigurePortW
ConfigurePortA
AdvancedDocumentPropertiesW
AdvancedDocumentPropertiesA
AddPrintProvidorW
AddPrintProvidorA
AddPrintProcessorW
AddPrintProcessorA
AddPrinterDriverW
AddPrinterDriverA
AddPrinterW
AddPrinterA
AddPortW
AddPortA
AddMonitorW
AddMonitorA
AddJobW
AddJobA
OpenPrinterA
StartDocPrinterW
oledlg
OleUIUpdateLinksW
OleUIPromptUserW
OleUIPasteSpecialW
OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIEditLinksW
OleUIConvertW
OleUIChangeSourceW
OleUIChangeIconW
OleUIBusyW
ord8
OleUIAddVerbMenuW
ord1
ord6
winmm
waveOutGetErrorTextW
waveOutGetErrorTextA
waveOutGetDevCapsW
waveOutGetDevCapsA
waveInGetErrorTextW
mixerGetControlDetailsW
midiOutGetErrorTextW
midiOutGetErrorTextA
midiOutGetDevCapsW
midiOutGetDevCapsA
midiInGetErrorTextW
midiInGetDevCapsW
midiInGetDevCapsA
mciSendStringW
mciSendStringA
mciSendCommandW
mciGetErrorStringW
mciGetErrorStringA
midiInGetErrorTextA
mciGetDeviceIDW
mciGetDeviceIDA
joyGetDevCapsW
joyGetDevCapsA
auxGetDevCapsW
auxGetDevCapsA
PlaySoundW
PlaySoundA
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRenameA
mmioRenameW
mmioStringToFOURCCA
mmioStringToFOURCCW
sndPlaySoundA
sndPlaySoundW
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
mixerGetDevCapsA
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
msvfw32
MCIWndCreateW
MCIWndCreateA
GetSaveFileNamePreviewW
GetOpenFileNamePreviewW
imm32
ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
ImmGetCompositionStringW
AcquireCredentialsHandleW
AddAtomW
AddFontResourceW
AddJobW
AddMonitorW
AddPortW
AddPrintProcessorW
AddPrintProvidorW
AddPrinterDriverW
AddPrinterW
AdvancedDocumentPropertiesW
AppendMenuW
BeginUpdateResourceA
BeginUpdateResourceW
BroadcastSystemMessageW
BuildCommDCBAndTimeoutsW
BuildCommDCBW
CallMsgFilterW
CallNamedPipeW
CallWindowProcA
CallWindowProcW
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
ChangeMenuW
CharLowerBuffW
CharLowerW
CharNextW
CharPrevW
CharToOemBuffW
CharToOemW
CharUpperBuffW
CharUpperW
ChooseColorW
ChooseFontW
CommConfigDialogW
CompareStringW
ConfigurePortW
CopyAcceleratorTableW
CopyEnhMetaFileW
CopyFileExW
CopyFileW
CopyMetaFileW
CreateAcceleratorTableW
CreateColorSpaceW
CreateDCW
CreateDialogIndirectParamW
CreateDialogParamW
CreateDirectoryExW
CreateDirectoryW
CreateEnhMetaFileW
CreateEventW
CreateFileMappingW
CreateFileW
CreateFontIndirectW
CreateFontW
CreateICW
CreateMDIWindowW
CreateMailslotW
CreateMetaFileW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateScalableFontResourceW
CreateSemaphoreW
CreateStdAccessibleProxyW
CreateWaitableTimerW
CreateWindowExW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptEnumProvidersW
CryptGetDefaultProviderW
CryptSetProviderExW
CryptSetProviderW
CryptSignHashW
CryptVerifySignatureW
DdeConnect
DdeConnectList
DdeCreateStringHandleW
DdeInitializeW
DdeQueryConvInfo
DdeQueryStringW
DefDlgProcW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteFileW
DeleteMonitorW
DeletePortW
DeletePrintProcessorW
DeletePrintProvidorW
DeletePrinterDriverW
DeviceCapabilitiesW
DialogBoxIndirectParamW
DialogBoxParamW
DispatchMessageW
DlgDirListComboBoxW
DlgDirListW
DlgDirSelectComboBoxExW
DlgDirSelectExW
DocumentPropertiesW
DragQueryFileW
DrawStateW
DrawTextExW
DrawTextW
EnableWindow
EndUpdateResourceA
EndUpdateResourceW
EnumCalendarInfoExW
EnumCalendarInfoW
EnumClipboardFormats
EnumDateFormatsExW
EnumDateFormatsW
EnumDisplayDevicesW
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsW
EnumICMProfilesW
EnumMonitorsW
EnumPortsW
EnumPrintProcessorDatatypesW
EnumPrintProcessorsW
EnumPrinterDriversW
EnumPrintersW
EnumPropsA
EnumPropsExA
EnumPropsExW
EnumPropsW
EnumSystemCodePagesW
EnumSystemLocalesW
EnumTimeFormatsW
EnumerateSecurityPackagesW
ExpandEnvironmentStringsW
ExtTextOutW
ExtractIconExW
ExtractIconW
FatalAppExitW
FillConsoleOutputCharacterW
FindAtomW
FindExecutableW
FindFirstChangeNotificationW
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FindTextW
FindWindowExW
FindWindowW
FormatMessageW
FreeContextBuffer
FreeEnvironmentStringsW
GetAltTabInfoW
GetAtomNameW
GetCPInfo
GetCPInfoExW
GetCalendarInfoW
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidth32W
GetCharWidthFloatW
GetCharWidthW
GetCharacterPlacementW
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetComputerNameW
GetConsoleTitleW
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentHwProfileW
GetDateFormatW
GetDefaultCommConfigW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDlgItemTextW
GetDriveTypeW
GetEnhMetaFileDescriptionW
GetEnhMetaFileW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileTitleW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFullPathNameW
GetGlyphOutlineW
GetICMProfileW
GetJobW
GetKerningPairsW
GetKeyNameTextW
GetKeyboardLayoutNameW
GetLocaleInfoW
GetLogColorSpaceW
GetLogicalDriveStringsW
GetLongPathNameW
GetMenuItemInfoW
GetMenuStringW
GetMessageW
GetMetaFileW
GetModuleFileNameW
GetModuleHandleW
GetMonitorInfoW
GetNamedPipeHandleStateW
GetNumberFormatW
GetObjectW
GetOpenFileNamePreviewW
GetOpenFileNameW
GetOutlineTextMetricsW
GetPrintProcessorDirectoryW
GetPrinterDataW
GetPrinterDriverDirectoryW
GetPrinterDriverW
GetPrinterW
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProcAddress
GetProfileIntW
GetProfileSectionW
GetProfileStringW
GetPropA
GetPropW
GetRoleTextW
GetSaveFileNamePreviewW
GetSaveFileNameW
GetShortPathNameW
GetStartupInfoW
GetStateTextW
GetStringTypeExW
GetStringTypeW
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetTabbedTextExtentW
GetTempFileNameW
GetTempPathW
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextExtentPointW
GetTextFaceW
GetTextMetricsW
GetTimeFormatW
GetUserNameW
GetVersionExW
GetVolumeInformationW
GetWindowLongA
GetWindowLongW
GetWindowModuleFileNameW
GetWindowTextLengthW
GetWindowTextW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomW
GlobalGetAtomNameW
GrayStringW
InitSecurityInterfaceW
InitializeSecurityContextW
InsertMenuItemW
InsertMenuW
IsBadStringPtrW
IsCharAlphaNumericW
IsCharAlphaW
IsCharLowerW
IsCharUpperW
IsClipboardFormatAvailable
IsDestinationReachableW
IsDialogMessageW
IsTextUnicode
IsValidCodePage
IsWindowUnicode
LCMapStringW
LoadAcceleratorsW
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadKeyboardLayoutW
LoadLibraryExW
LoadLibraryW
LoadMenuIndirectW
LoadMenuW
LoadStringW
MCIWndCreateW
MapVirtualKeyExW
MapVirtualKeyW
MessageBoxExW
MessageBoxIndirectW
MessageBoxW
ModifyMenuW
MoveFileW
MultiByteToWideChar
MultinetGetConnectionPerformanceW
OemToCharBuffW
OemToCharW
OleUIAddVerbMenuW
OleUIBusyW
OleUIChangeIconW
OleUIChangeSourceW
OleUIConvertW
OleUIEditLinksW
OleUIInsertObjectW
OleUIObjectPropertiesW
OleUIPasteSpecialW
OleUIPromptUserW
OleUIUpdateLinksW
OpenEventW
OpenFileMappingW
OpenMutexW
OpenPrinterW
OpenSemaphoreW
OpenWaitableTimerW
OutputDebugStringW
PageSetupDlgW
PeekConsoleInputW
PeekMessageW
PlaySoundW
PolyTextOutW
PostMessageW
PostThreadMessageW
PrintDlgW
QueryContextAttributesW
QueryCredentialsAttributesW
QueryDosDeviceW
QuerySecurityPackageInfoW
RasConnectionNotificationW
RasCreatePhonebookEntryW
RasDeleteEntryW
RasDeleteSubEntryW
RasDialW
RasEditPhonebookEntryW
RasEnumConnectionsW
RasEnumDevicesW
RasEnumEntriesW
RasGetConnectStatusW
RasGetEntryDialParamsW
RasGetEntryPropertiesW
RasGetErrorStringW
RasGetProjectionInfoW
RasHangUpW
RasRenameEntryW
RasSetEntryDialParamsW
RasSetEntryPropertiesW
RasSetSubEntryPropertiesW
RasValidateEntryNameW
ReadConsoleInputW
ReadConsoleOutputCharacterW
ReadConsoleOutputW
ReadConsoleW
RegConnectRegistryW
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegLoadKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryMultipleValuesW
RegQueryValueExW
RegQueryValueW
RegReplaceKeyW
RegSaveKeyW
RegSetValueExW
RegSetValueW
RegUnLoadKeyW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterWindowMessageW
RemoveDirectoryW
RemoveFontResourceW
RemovePropA
RemovePropW
ReplaceTextW
ResetDCW
ResetPrinterW
SHBrowseForFolderW
SHChangeNotify
SHFileOperationW
SHGetFileInfoW
SHGetNewLinkInfoW
SHGetPathFromIDListW
ScrollConsoleScreenBufferW
SearchPathW
SendDlgItemMessageW
SendMessageCallbackW
SendMessageTimeoutW
SendMessageW
SendNotifyMessageW
SetCalendarInfoW
SetClassLongW
SetComputerNameW
SetConsoleTitleW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetDlgItemTextW
SetEnvironmentVariableW
SetFileAttributesW
SetICMProfileW
SetJobW
SetLocaleInfoW
SetMenuItemInfoW
SetPrinterDataW
SetPrinterW
SetPropA
SetPropW
SetVolumeLabelW
SetWindowLongA
SetWindowLongW
SetWindowTextW
SetWindowsHookExW
SetWindowsHookW
ShellAboutW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
StartDocPrinterW
StartDocW
SystemParametersInfoW
TabbedTextOutW
TextOutW
TranslateAcceleratorW
UnregisterClassW
UpdateICMRegKeyW
UpdateResourceA
UpdateResourceW
VerFindFileW
VerInstallFileW
VerLanguageNameW
VerQueryValueW
VkKeyScanExW
VkKeyScanW
WNetAddConnection2W
WNetAddConnection3W
WNetAddConnectionW
WNetCancelConnection2W
WNetCancelConnectionW
WNetConnectionDialog1W
WNetDisconnectDialog1W
WNetEnumResourceW
WNetGetConnectionW
WNetGetLastErrorW
WNetGetNetworkInformationW
WNetGetProviderNameW
WNetGetResourceInformationW
WNetGetResourceParentW
WNetGetUniversalNameW
WNetGetUserW
WNetOpenEnumW
WNetUseConnectionW
WaitNamedPipeW
WideCharToMultiByte
WinHelpW
WriteConsoleInputW
WriteConsoleOutputCharacterW
WriteConsoleOutputW
WriteConsoleW
WritePrivateProfileSectionW
WritePrivateProfileStringW
WritePrivateProfileStructW
WriteProfileSectionW
WriteProfileStringW
__FreeAllLibrariesInMsluDll
auxGetDevCapsW
capCreateCaptureWindowW
capGetDriverDescriptionW
joyGetDevCapsW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
mciGetDeviceIDW
mciGetErrorStringW
mciSendCommandW
mciSendStringW
midiInGetDevCapsW
midiInGetErrorTextW
midiOutGetDevCapsW
midiOutGetErrorTextW
mixerGetControlDetailsW
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenW
mmioRenameW
mmioStringToFOURCCW
sndPlaySoundW
waveInGetDevCapsW
waveInGetErrorTextW
waveOutGetDevCapsW
waveOutGetErrorTextW
wsprintfW
wvsprintfW
Name
.text
Size
228KB
Virtual Size
228KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=863, id=1, productName=Unmarked objects,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=19, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
uninstall.exe.nsis
- SHA256 be4d26d6fa9e6d310eabe469633d892444600e57ddf62925653435dffdbb6178
- MD5 431856c268881f8416d1b809cc947cb8
- SHA1 500109aa5e65b7968c159b53252c5b6a420124f5
- SHA512 d3f2f992fe077fd2b20eb2e7d7b241ff6d09ae138273a2f5408b05e5dc9cfc7b02ccf762cea4316fdc1236ada44325a541fd92a9db1dbba4ba89a3552ae4feca
- SSDEEP 384:KTDhauQTpnB3PEAWMaicAXQA32cTtSgXqLTWFlSOOtgWtgLmNTQlNkZjZFecrLTo:w4N1B/gAXQA3TTtGTh4MTMklZFHrPL4/
- TLSH T15CB2C0C95396D1F0B68A2B97A507575D17222720836BD6DE22720C3391D3C70D3A762F
- MD5 SHA1 SHA512 SSDEEP TLSH
Anyburn/anyburn_setup_x64-bit.exe
- IMPHASH 24f4223e271413c25abad52fd456a9bc
- SHA256 404d5e5fca57209db0f926e40501bd047ce06e657b69d576b22fdeb150df9f50
- MD5 aadc16a8d17c63b667fc16de1d23b38a
- SHA1 2cc05a6fbd4ca5afea0825fb8e93eb543bc5c40a
- SHA512 2a2680cdf02bd04b035939fa69bba42ebd595d249a7361149470a4e4b3fbf12f9f3870c907fe96df84ffcd49c338711b0c5c0fd385beb1172b40f043655d095f
- SSDEEP 49152:RifvnNe/T1pwaFlyijbnXGi0VYSvq8zxz2S4Y8AuKH3DJ2Uk9EQ:kfFC1HFgivnXGiD8zxz0Y8bKH3i/
- TLSH T194C53342992184C6D9550A733AA9CB73F832EC4454D4A39B7FE53FCEB8BE704D21E285
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9c:ac:82:ae:20:47:a6:d1:bb:98:b8:1e:50:51:60:8c:13:8c:34:a1:11:f8:13:f7:88:09:6c:cf:48:27:fc:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Digest
67:bf:42:fb:8f:03:0c:c3:9a:37:ea:bb:46:c7:b3:6c:77:8f:04:33
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
13581
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
MoveFileW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
lstrcmpW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
ReadFile
MulDiv
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringW
FreeLibrary
GetPrivateProfileStringW
GetModuleHandleW
LoadLibraryExW
user32
GetWindowRect
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
ScreenToClient
EnableMenuItem
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
SystemParametersInfoW
EndDialog
RegisterClassW
DialogBoxParamW
CreateWindowExW
GetClassInfoW
DestroyWindow
CharNextW
ExitWindowsEx
SetWindowTextW
LoadImageW
SetTimer
ShowWindow
PostQuitMessage
wsprintfW
SetWindowLongW
FindWindowExW
IsWindow
CreatePopupMenu
AppendMenuW
GetSystemMetrics
DrawTextW
EndPaint
CreateDialogParamW
SendMessageTimeoutW
SetForegroundWindow
gdi32
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetBkColor
shell32
ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHFileOperationW
SHBrowseForFolderW
advapi32
AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ord17
ImageList_Destroy
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=164, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$0
- IMPHASH 52fc1e0d2ba838205ffefc999ee164b0
- SHA256 7c218e48d28f186f0a0927d3b9d01bb9ca3e4a3db2f04606c675451ed87cb7e2
- MD5 355bd6f385d7391c076808a751d6de7e
- SHA1 cd60143548e37c690f4a22fb895b09e2dcb01e40
- SHA512 99dd43a29a9f6b8596f1e44151b5ecd2f5a906dd695702b9c176962deeabb88c2606423ae7865c0e784aee17185c17679ff1a5e21675d058b5c136cb1950b0d1
- SSDEEP 98304:5yN0UTajWXnEff/52KtaOJKa/xU68dPkd31f:5yN0pjcnEff/wKtlJKa/S68dP+3N
- TLSH T18246E651B3F88158F1F39ABEDAF55256D977BC625A21C0AF01E0650E1E32BA08E71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:5f:30:ff:a3:37:bb:6b:79:ca:f2:aa:24:6b:4b:08:38:42:00:fd:bd:25:a6:57:7d:52:0e:33:7e:41:a9:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Digest
4c:bd:6d:e6:7e:7b:97:a4:49:ce:6c:62:d5:30:7a:9a:bb:81:6a:9d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
1647456
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
CreateFileA
GetVersionExW
RemoveDirectoryW
GetVolumeInformationW
WritePrivateProfileStringW
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetFileType
LoadLibraryExW
VirtualProtect
GetTempPathW
SetCurrentDirectoryW
GetFullPathNameW
GetCurrentProcessId
OpenEventW
GetLongPathNameW
GetSystemWindowsDirectoryW
DefineDosDeviceW
GetExitCodeProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileTime
GlobalHandle
FormatMessageW
GetFileSize
GetVersion
SetFileTime
Sleep
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
ResetEvent
FindResourceW
LoadResource
LockResource
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
HeapCreate
HeapSetInformation
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
HeapSize
RtlPcToFileHeader
RaiseException
SetStdHandle
GetCurrentDirectoryA
HeapReAlloc
GetCPInfo
RtlUnwindEx
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
SetErrorMode
DuplicateHandle
UnlockFile
LockFile
CopyFileW
FindFirstFileW
FindNextFileW
FindClose
MulDiv
GetSystemDefaultLangID
GetPrivateProfileStringW
WriteFile
GetCurrentThread
SetThreadPriority
GlobalSize
FindResourceExW
GetThreadLocale
GetProcessVersion
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalReAlloc
GlobalFlags
GetCurrentDirectoryW
lstrcmpiW
lstrcpyW
GetProfileIntW
GlobalGetAtomNameW
FlushFileBuffers
QueryDosDeviceW
SetFileAttributesW
MoveFileW
SuspendThread
ResumeThread
GlobalFree
ExitProcess
CreateDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GetFileAttributesExW
GetLogicalDriveStringsW
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTempFileNameW
DeleteFileW
SetThreadExecutionState
GetLogicalDrives
GetDriveTypeW
CloseHandle
LocalAlloc
SetLastError
LocalFree
CreateEventA
GetOverlappedResult
CreateEventW
CreateThread
WaitForSingleObject
SizeofResource
lstrcpynW
GlobalAddAtomW
GlobalFindAtomW
GetModuleHandleA
lstrcatW
GetVersionExA
FreeResource
lstrlenA
lstrlenW
lstrcmpW
GlobalDeleteAtom
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
SetEndOfFile
LoadLibraryA
GetTickCount
GetLastError
FreeLibrary
DeviceIoControl
GetCurrentProcess
CreateFileW
DeleteCriticalSection
GetCurrentThreadId
InitializeCriticalSection
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetPrivateProfileIntW
SetEvent
user32
EnumChildWindows
SetWindowTextW
GetWindowTextW
SetMenu
GetDlgCtrlID
GetClassNameW
GetDlgItem
SetMenuItemInfoW
GetMenuItemInfoW
GetWindowRect
EnableWindow
LoadIconW
GetSystemMetrics
ScreenToClient
GetCursorPos
SetWindowLongW
GetWindowLongW
UpdateWindow
InvalidateRect
SetTimer
OffsetRect
CopyRect
GetSysColor
FillRect
KillTimer
LoadBitmapW
IsWindowVisible
LoadCursorW
SetCursor
LockWindowUpdate
InsertMenuW
GetSubMenu
GetMenuItemCount
CheckMenuItem
CharToOemA
OemToCharA
SendMessageW
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
SetClassLongPtrW
SendMessageA
DrawIconEx
WindowFromPoint
RegisterClipboardFormatW
SetFocus
DeferWindowPos
GetWindow
GetSystemMenu
AppendMenuW
GetKeyState
GetCapture
GetMessagePos
BeginDeferWindowPos
EndDeferWindowPos
EqualRect
IsClipboardFormatAvailable
GetClipboardData
ShowScrollBar
GetWindowDC
DrawEdge
DrawStateW
CreateIconIndirect
ClientToScreen
ShowWindow
GrayStringW
TabbedTextOutW
RedrawWindow
SystemParametersInfoW
GetScrollInfo
MessageBoxA
GetIconInfo
DestroyIcon
IsWindow
PtInRect
ReleaseCapture
GetFocus
SetCapture
PostMessageW
SetWindowsHookExW
CallNextHookEx
SetDlgItemTextW
GetWindowPlacement
MessageBoxW
UnhookWindowsHookEx
MoveWindow
GetClassInfoExW
RegisterClassExW
CreateWindowExW
SetPropW
SetWindowLongPtrW
RemovePropW
SetWindowPos
GetParent
InflateRect
DrawFrameControl
GetSysColorBrush
FrameRect
DrawTextW
PostQuitMessage
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
PeekMessageW
ValidateRect
DispatchMessageW
TranslateMessage
GetMessageW
GetActiveWindow
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
GetNextDlgTabItem
SetMenuItemBitmaps
MapDialogRect
SetWindowContextHelpId
UnregisterClassW
SystemParametersInfoA
IntersectRect
GetWindowTextLengthW
RegisterClassW
GetClassInfoW
wsprintfW
SetScrollInfo
AdjustWindowRectEx
GetMenu
MapWindowPoints
SetActiveWindow
SetForegroundWindow
GetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
DestroyWindow
TrackPopupMenu
GetTopWindow
ScrollWindow
GetMessageTime
IsChild
SendDlgItemMessageA
SendDlgItemMessageW
WinHelpW
RegisterWindowMessageW
CheckRadioButton
IsDlgButtonChecked
IsDialogMessageW
BeginPaint
EndPaint
EndDialog
CreateDialogIndirectParamW
wvsprintfW
GetAsyncKeyState
FindWindowW
IsRectEmpty
SetCursorPos
DestroyCursor
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
LoadStringW
SetRect
IsZoomed
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
GetNextDlgGroupItem
CharUpperW
GetDCEx
SetParent
DrawFocusRect
GetWindowLongPtrW
GetPropW
CallWindowProcW
InvalidateRgn
DefWindowProcW
SetMenuDefaultItem
LoadImageW
DestroyMenu
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
DrawIcon
IsIconic
GetClientRect
MessageBeep
CreatePopupMenu
EnableMenuItem
GetMenuItemID
LoadMenuW
CheckMenuRadioItem
advapi32
GetTokenInformation
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
DragAcceptFiles
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetMalloc
ShellExecuteExW
ole32
OleUninitialize
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
ReleaseStgMedium
CoCreateGuid
PropVariantClear
OleInitialize
CLSIDFromProgID
OleGetClipboard
CoTaskMemFree
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
CreateStreamOnHGlobal
OleDuplicateData
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CoRegisterMessageFilter
CoRevokeClassObject
CLSIDFromString
CoGetClassObject
CoCreateInstance
RevokeDragDrop
gdi32
PolyPolyline
SetBkMode
SetRectRgn
CreateRectRgnIndirect
MoveToEx
LineTo
RoundRect
PatBlt
SetDIBits
Escape
TextOutW
RectVisible
PtVisible
CreateRectRgn
GetDIBits
GetStockObject
GetTextMetricsW
GetBkColor
GetTextColor
SetBkColor
SetTextColor
ExtTextOutW
GetTextExtentPoint32W
GetObjectW
CreateCompatibleBitmap
SetStretchBltMode
BitBlt
StretchBlt
SetPixel
GetPixel
SelectObject
CreateCompatibleDC
CreateBitmap
DeleteObject
CreateICW
DeleteDC
CreateFontIndirectW
GetDeviceCaps
CreateSolidBrush
GetClipBox
SaveDC
RestoreDC
SetMapMode
ExcludeClipRect
IntersectClipRect
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CopyMetaFileW
EnumFontFamiliesExW
LPtoDP
DPtoLP
GetMapMode
CombineRgn
CreatePatternBrush
CreatePen
comdlg32
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
winmm
waveOutGetDevCapsW
waveOutWrite
waveOutOpen
waveOutReset
waveOutClose
waveOutUnprepareHeader
waveOutPrepareHeader
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
comctl32
DestroyPropertySheetPage
PropertySheetW
ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_SetBkColor
ImageList_Destroy
_TrackMouseEvent
CreatePropertySheetPageW
oledlg
OleUIBusyW
oleaut32
VariantChangeType
SysStringLen
SysFreeString
SysAllocStringLen
OleCreateFontIndirect
VariantClear
VariantTimeToSystemTime
SysAllocString
VariantCopy
wininet
InternetCloseHandle
HttpQueryInfoW
InternetReadFile
InternetAttemptConnect
InternetConnectW
InternetOpenW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
823KB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
340KB
Virtual Size
340KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=6, id=126, version=30120,
count=18, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=29, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=656, id=1, productName=Unmarked objects,
count=618, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=492, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=124, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
$PLUGINSDIR/InstOpt.dll
- IMPHASH 52963c73128befcc683116d6ab0cd3f1
- SHA256 313648b948243e992f08eec6e567aca26c2131ca6b9d307dd11071470521baf7
- MD5 a9b4e84b5c71be9aad7cbe44506a6b4e
- SHA1 d3a7b3bed2f4f3cc3edc85e202d202a1a535d62f
- SHA512 0c78a4d8c0c129c26fd3d99e8b04e4598e5d844d0d9f213dd318ae873ffd23db1cb06c0fec636ad7ac8a6f9306dbcae58cf4d8e7d33dca2b7a3a31e6ad36bab8
- SSDEEP 96:S1+HVx8GJYcudkED74Kx2otnc12lDIvyYUJjlMYXJIuT+f9yFGTp:SsPulD74uh2XUtlMwIuqEFGT
- TLSH T16FF155E4A3D17DB7F7BB0B323AE2A3F5DB19BD055E1040446F73025D6435591CA68362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6553
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
LocalAlloc
user32
CreateDialogParamW
MapWindowPoints
CallWindowProcW
SetWindowLongW
ShowWindow
IsDialogMessageW
GetWindowRect
MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
GetDlgItem
SetWindowTextW
SendMessageW
PostMessageW
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyExW
shell32
ShellExecuteExW
msvcrt
_itow
swprintf
wcsncpy
memset
wcscpy
wcscmp
Dialog
InitDialog
Show
Uninstall
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
590B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=1, productName=Unmarked objects,
count=9, id=19, version=8034,
count=5, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
$PLUGINSDIR/System.dll
- IMPHASH fc0224e99e736751432961db63a41b76
- SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
- MD5 8cf2ac271d7679b1d68eefc1ae0c5618
- SHA1 7cc1caaa747ee16dc894a600a4256f64fa65a9b8
- SHA512 ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
- SSDEEP 192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL
- TLSH T121427D1193B089F2F590593805A67F2A6FBEAC6C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10719
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
AnyBurn.exe
- IMPHASH 52fc1e0d2ba838205ffefc999ee164b0
- SHA256 7c218e48d28f186f0a0927d3b9d01bb9ca3e4a3db2f04606c675451ed87cb7e2
- MD5 355bd6f385d7391c076808a751d6de7e
- SHA1 cd60143548e37c690f4a22fb895b09e2dcb01e40
- SHA512 99dd43a29a9f6b8596f1e44151b5ecd2f5a906dd695702b9c176962deeabb88c2606423ae7865c0e784aee17185c17679ff1a5e21675d058b5c136cb1950b0d1
- SSDEEP 98304:5yN0UTajWXnEff/52KtaOJKa/xU68dPkd31f:5yN0pjcnEff/wKtlJKa/S68dP+3N
- TLSH T18246E651B3F88158F1F39ABEDAF55256D977BC625A21C0AF01E0650E1E32BA08E71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:5f:30:ff:a3:37:bb:6b:79:ca:f2:aa:24:6b:4b:08:38:42:00:fd:bd:25:a6:57:7d:52:0e:33:7e:41:a9:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Digest
4c:bd:6d:e6:7e:7b:97:a4:49:ce:6c:62:d5:30:7a:9a:bb:81:6a:9d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Nov 29, 2024
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2024 - Feb 16, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
1647456
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
CreateFileA
GetVersionExW
RemoveDirectoryW
GetVolumeInformationW
WritePrivateProfileStringW
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetFileType
LoadLibraryExW
VirtualProtect
GetTempPathW
SetCurrentDirectoryW
GetFullPathNameW
GetCurrentProcessId
OpenEventW
GetLongPathNameW
GetSystemWindowsDirectoryW
DefineDosDeviceW
GetExitCodeProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileTime
GlobalHandle
FormatMessageW
GetFileSize
GetVersion
SetFileTime
Sleep
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
ResetEvent
FindResourceW
LoadResource
LockResource
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
HeapCreate
HeapSetInformation
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
HeapSize
RtlPcToFileHeader
RaiseException
SetStdHandle
GetCurrentDirectoryA
HeapReAlloc
GetCPInfo
RtlUnwindEx
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
SetErrorMode
DuplicateHandle
UnlockFile
LockFile
CopyFileW
FindFirstFileW
FindNextFileW
FindClose
MulDiv
GetSystemDefaultLangID
GetPrivateProfileStringW
WriteFile
GetCurrentThread
SetThreadPriority
GlobalSize
FindResourceExW
GetThreadLocale
GetProcessVersion
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalReAlloc
GlobalFlags
GetCurrentDirectoryW
lstrcmpiW
lstrcpyW
GetProfileIntW
GlobalGetAtomNameW
FlushFileBuffers
QueryDosDeviceW
SetFileAttributesW
MoveFileW
SuspendThread
ResumeThread
GlobalFree
ExitProcess
CreateDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GetFileAttributesExW
GetLogicalDriveStringsW
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTempFileNameW
DeleteFileW
SetThreadExecutionState
GetLogicalDrives
GetDriveTypeW
CloseHandle
LocalAlloc
SetLastError
LocalFree
CreateEventA
GetOverlappedResult
CreateEventW
CreateThread
WaitForSingleObject
SizeofResource
lstrcpynW
GlobalAddAtomW
GlobalFindAtomW
GetModuleHandleA
lstrcatW
GetVersionExA
FreeResource
lstrlenA
lstrlenW
lstrcmpW
GlobalDeleteAtom
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
SetEndOfFile
LoadLibraryA
GetTickCount
GetLastError
FreeLibrary
DeviceIoControl
GetCurrentProcess
CreateFileW
DeleteCriticalSection
GetCurrentThreadId
InitializeCriticalSection
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetPrivateProfileIntW
SetEvent
user32
EnumChildWindows
SetWindowTextW
GetWindowTextW
SetMenu
GetDlgCtrlID
GetClassNameW
GetDlgItem
SetMenuItemInfoW
GetMenuItemInfoW
GetWindowRect
EnableWindow
LoadIconW
GetSystemMetrics
ScreenToClient
GetCursorPos
SetWindowLongW
GetWindowLongW
UpdateWindow
InvalidateRect
SetTimer
OffsetRect
CopyRect
GetSysColor
FillRect
KillTimer
LoadBitmapW
IsWindowVisible
LoadCursorW
SetCursor
LockWindowUpdate
InsertMenuW
GetSubMenu
GetMenuItemCount
CheckMenuItem
CharToOemA
OemToCharA
SendMessageW
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
SetClassLongPtrW
SendMessageA
DrawIconEx
WindowFromPoint
RegisterClipboardFormatW
SetFocus
DeferWindowPos
GetWindow
GetSystemMenu
AppendMenuW
GetKeyState
GetCapture
GetMessagePos
BeginDeferWindowPos
EndDeferWindowPos
EqualRect
IsClipboardFormatAvailable
GetClipboardData
ShowScrollBar
GetWindowDC
DrawEdge
DrawStateW
CreateIconIndirect
ClientToScreen
ShowWindow
GrayStringW
TabbedTextOutW
RedrawWindow
SystemParametersInfoW
GetScrollInfo
MessageBoxA
GetIconInfo
DestroyIcon
IsWindow
PtInRect
ReleaseCapture
GetFocus
SetCapture
PostMessageW
SetWindowsHookExW
CallNextHookEx
SetDlgItemTextW
GetWindowPlacement
MessageBoxW
UnhookWindowsHookEx
MoveWindow
GetClassInfoExW
RegisterClassExW
CreateWindowExW
SetPropW
SetWindowLongPtrW
RemovePropW
SetWindowPos
GetParent
InflateRect
DrawFrameControl
GetSysColorBrush
FrameRect
DrawTextW
PostQuitMessage
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
PeekMessageW
ValidateRect
DispatchMessageW
TranslateMessage
GetMessageW
GetActiveWindow
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
GetNextDlgTabItem
SetMenuItemBitmaps
MapDialogRect
SetWindowContextHelpId
UnregisterClassW
SystemParametersInfoA
IntersectRect
GetWindowTextLengthW
RegisterClassW
GetClassInfoW
wsprintfW
SetScrollInfo
AdjustWindowRectEx
GetMenu
MapWindowPoints
SetActiveWindow
SetForegroundWindow
GetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
DestroyWindow
TrackPopupMenu
GetTopWindow
ScrollWindow
GetMessageTime
IsChild
SendDlgItemMessageA
SendDlgItemMessageW
WinHelpW
RegisterWindowMessageW
CheckRadioButton
IsDlgButtonChecked
IsDialogMessageW
BeginPaint
EndPaint
EndDialog
CreateDialogIndirectParamW
wvsprintfW
GetAsyncKeyState
FindWindowW
IsRectEmpty
SetCursorPos
DestroyCursor
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
LoadStringW
SetRect
IsZoomed
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
GetNextDlgGroupItem
CharUpperW
GetDCEx
SetParent
DrawFocusRect
GetWindowLongPtrW
GetPropW
CallWindowProcW
InvalidateRgn
DefWindowProcW
SetMenuDefaultItem
LoadImageW
DestroyMenu
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
DrawIcon
IsIconic
GetClientRect
MessageBeep
CreatePopupMenu
EnableMenuItem
GetMenuItemID
LoadMenuW
CheckMenuRadioItem
advapi32
GetTokenInformation
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
DragAcceptFiles
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetMalloc
ShellExecuteExW
ole32
OleUninitialize
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
ReleaseStgMedium
CoCreateGuid
PropVariantClear
OleInitialize
CLSIDFromProgID
OleGetClipboard
CoTaskMemFree
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
CreateStreamOnHGlobal
OleDuplicateData
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CoRegisterMessageFilter
CoRevokeClassObject
CLSIDFromString
CoGetClassObject
CoCreateInstance
RevokeDragDrop
gdi32
PolyPolyline
SetBkMode
SetRectRgn
CreateRectRgnIndirect
MoveToEx
LineTo
RoundRect
PatBlt
SetDIBits
Escape
TextOutW
RectVisible
PtVisible
CreateRectRgn
GetDIBits
GetStockObject
GetTextMetricsW
GetBkColor
GetTextColor
SetBkColor
SetTextColor
ExtTextOutW
GetTextExtentPoint32W
GetObjectW
CreateCompatibleBitmap
SetStretchBltMode
BitBlt
StretchBlt
SetPixel
GetPixel
SelectObject
CreateCompatibleDC
CreateBitmap
DeleteObject
CreateICW
DeleteDC
CreateFontIndirectW
GetDeviceCaps
CreateSolidBrush
GetClipBox
SaveDC
RestoreDC
SetMapMode
ExcludeClipRect
IntersectClipRect
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CopyMetaFileW
EnumFontFamiliesExW
LPtoDP
DPtoLP
GetMapMode
CombineRgn
CreatePatternBrush
CreatePen
comdlg32
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
winmm
waveOutGetDevCapsW
waveOutWrite
waveOutOpen
waveOutReset
waveOutClose
waveOutUnprepareHeader
waveOutPrepareHeader
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
comctl32
DestroyPropertySheetPage
PropertySheetW
ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_SetBkColor
ImageList_Destroy
_TrackMouseEvent
CreatePropertySheetPageW
oledlg
OleUIBusyW
oleaut32
VariantChangeType
SysStringLen
SysFreeString
SysAllocStringLen
OleCreateFontIndirect
VariantClear
VariantTimeToSystemTime
SysAllocString
VariantCopy
wininet
InternetCloseHandle
HttpQueryInfoW
InternetReadFile
InternetAttemptConnect
InternetConnectW
InternetOpenW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
823KB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
340KB
Virtual Size
340KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=6, id=126, version=30120,
count=18, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=29, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=656, id=1, productName=Unmarked objects,
count=618, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=492, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=124, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
Lang/Arabic.ini
- SHA256 9ae5205995a346a4a787585fe901f156ce2cc7e5233f25ebd33a8a7a4dc29321
- MD5 6de1b30a0388288e8558a4deb9e8e804
- SHA1 6cdf6ef456e8934204874db8808812ffa4e55fa1
- SHA512 02666a7c90bc7e8e088ac2c249d9137c168abe0535b2a151e2f40ec1139f149463dfaf8a3af4a3925ef5f66ae11325d9046318fbc5505e62d670128f84cbee69
- SSDEEP 768:5IJU6O1OVg55xFEFFVFucuCDEUUBwjLoiUrbhvpc+32Ajh0Lks5sxGUzcza+E/Ik:eLyGQXq/0yD9/as+Rh7xGi6atg6sU1j
- TLSH T1666367259E8CC23C73A6A724C296CA236354695BECEC763906F64D050AE0530569FFFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Bulgarian.ini
- SHA256 d57db73af8e8988ac367bfb0e388147032f9eefbb0ed04d707bfcf37ce37a98b
- MD5 8aa2a671c87da0fb91ab24ccf7599257
- SHA1 76add94c75218a22d6fb7e69d77434cd3e239628
- SHA512 ad7cc62ce822aaf262c0d53e86f5518c311adfd9a3e5241956855c6b61c3f9c91fe981d7f9d87f8be661a05f678ca5add003bd883c02300c05f14a5bb20549cb
- SSDEEP 1536:WKW8WpQ7cJrE5cbL5kfpOuFT0rmkHVTMst0yLn5p0D9VzCb5s:WKW8WpQ7cJrE5cbL5kfpOuFT0rmkHVTU
- TLSH T1E283DE1FB87D921576A8D2409F9647E322FA7711232D5AC582CF3E98A0DD63233526CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Croatian.ini
- SHA256 af29d56943b55ba02e663eee7c1ade49b635e942d477acc0f4f391fc498ba51e
- MD5 8ab8987ebe805232a490a8e2e4297b86
- SHA1 b32296527e9fb7bced3e9c247a68c077532a89d8
- SHA512 59c919813c5e9bd311a5228520ca5be2159a95cd7ad5fee7f86589f89b2c54070adddeba2e329a8f6860f6d1ce9f576e0e7223f11d03cf87daf6e3db9818442b
- SSDEEP 768:RuaXSjPQMQY8KPGVkrIpTH5qa5GMzzHibtH/bncYV54IlcTwRUXLXYL0wGu5Ivmb:3XOPdykrIprjOBbNvPtG8mbZ0
- TLSH T18273A12766FC1219F6F7BF10EAB512715B7A7CA2BD3CC51D10C1024D09F2A8199A27BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Danish.ini
- SHA256 91d7f6f9273027e092ad3f34b10e09b13e5d351615818f9c6b739c6f79628690
- MD5 86b120e9f2db73a5781dc52ecb2844a3
- SHA1 ee2186bcffbd77a5b56c7e25ba88bf00643b6819
- SHA512 2cd866e239755212ac30ab13bbd8e54e8a08804f248a81727c9b7715a40c697baa1724a56c4bdbefaaa13aad86042c685166d06af5074ac3f4a039e1c7311348
- SSDEEP 1536:7BD7AisLVHZ4B68T3iM96At6tHPw0cQ/uPdrkU21Na2vpHwLuKJ1:7BD7AisLVHZ4B68T3iM96At6tHPw0cQK
- TLSH T17773CB2613E8422EF2F66B20FDB5027167A5BC96B97CD61C11C1064C0DF2B9195F2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Dutch.ini
- SHA256 af09939ca72941a6090ca8448d6f4dba47e931e76ecd778a0c8e7d664b6aca4a
- MD5 d49f91c980fe93cb9ab577d847335820
- SHA1 22de1b19dbf7844ca94d962957120484abcfa652
- SHA512 b3306a601638a744ce6cd35bfc42baa39efdca027ff07961afb32ccb58209a9c4556cd53bc93138f62f3e63c28375e7be4249c99ce2a8daf605300266e86ef96
- SSDEEP 768:RZHmH4kp0pTF0jR7VBWb7VExkOf7GHfUhQzPxuru1nMdLbwWHEMe:PkNRxBWXWV7YuOUrlPwWH9e
- TLSH T1A9838E1627E98218F5F36F10E9B506715BB6BCD6BC78D51C02C0169D0DF1B80E8A6BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/English.ini
- SHA256 5304abfb5b65f21b58d95447498ef6a47efee61b06c5a5d233f0ef9cc0019a57
- MD5 c04269a6f4c8af6f2a81b0e4855de792
- SHA1 3d9a5bf680cb68e033fb50568770cc1a06120508
- SHA512 d64592e74a748fe0345f057b1b2fdb13cd78bbc252862604bef9e1fcbced000b99dee91085ab5eb3120e6905ceebfc81314e76a504d932e79ccac40e704c076d
- SSDEEP 768:RgomoTqToijERvEXdx8h4xU289N8c9ECI2NeYUXzwHTEwGu5Ivm3o6eAA4alZFlI:427c8NXLI2lKwveS
- TLSH T17D73752667ED4229F2F77F50EEB402315B76BC96ED7CD65C01C1414E09F2A4098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/EnglishUK.ini
- SHA256 b0633189b72cc02ce97648200542ee59a2c8d7829ef2ce8eaafb7b86e9ec9936
- MD5 ead85763965d0a7968c92bdd1065fd16
- SHA1 6b50fa24ff2fc5d1681b119337782d7c52aabc11
- SHA512 ebd7a8c03d782a8ea720270dc65011496b7110ba37e704f403594cb0a9c01fe5fde2824c2e6a0091c2884befcbf829e1ab519c5b51109047dc8cc984a623750c
- SSDEEP 768:TNgokYTa7wERCEXGx8h4xyw8YkcjfCp/lJuUcQHVL0wGu5Ivm3o6eAA4alZFj+X0:oAg4ZRap/p64HeH
- TLSH T11973772667EC4229F2F77F50EEB406315B76BC96ED7CD65C01C1414E09F2A4098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Finnish.ini
- SHA256 5ff5b4a9750dbcad4aef6008cdb16eb8662f57fd2c3eb6a5810b8e5916fa35fa
- MD5 08109a3563da759f555bbab19daf864a
- SHA1 e41c650eb087df086151e76d7d7cceefb6b167a3
- SHA512 1158f731e1b3b21ee474d20081db8de52d1d590b6efeb3c13008bc150c79ad80a7ed7d75752c2a21af30a2790b7317b07af1c6922a3908268cf638bb1e95742c
- SSDEEP 1536:8jnnX3mXWiJrOV6oCWj1krg9Hm+qsp+ihew3efXUoTyOMwUXmqL9HJDTd7bDH:8jnnX3m1JrOV6oCWj1krg9Hm+qsp+ih7
- TLSH T12273B16756FC5229F2F3AF00EEB402211BB27D97ADBCD55C06D1054D09E1681E8B2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/French.ini
- SHA256 6a55a99d2034f4d5820999eced542c4274f04eb83b0f9e650bee2929a9a79978
- MD5 2e3107fd03984e7f099801160cd954f4
- SHA1 2545b3c1c61f5c8a866ba01cee16f4baa47b2c98
- SHA512 ffe8f60df1a39dbd0aa09be90f8b067160810ba62b714c6cb029f60ea3940157a85261bd14a84b5c35a99ae2b886fae812e484b1838346e0c4cb97efccf185b0
- SSDEEP 768:R7RBQ2eC/BEqY8vca17Z+Aw/aN1VtgHN3MDHTgmkLUZVqU7YNE99gX6bMMoHAfHL:ZadMZlqtaL
- TLSH T16F93762663E9421AF6F27F01E9B802265F777C97EC3CD51C058151891DF2F40D8AABAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/German.ini
- SHA256 fcc4179be5c5cb80a476125e773bc2b541f0e4f7400d4e3558e946c8adf21219
- MD5 3874ec8777c2cf9b4e6ed7abdeff4f77
- SHA1 56170d1caaab98c26356f33a10ba3319b2b464d5
- SHA512 5f7724fedb824b5b8a3ab03959bfd7c47e5bf7e7e2c9ae1693be7ea20860725ff642401e0c09272ada1e39922971bd00adbb36ffe5ef22841ba6011cefdfe67a
- SSDEEP 1536:cwIdlaFVVtxDTvmekUnLg2uuX3/nNxV4fSxcVYofuPTeFzSrMiVeZaUEgCQrhd2F:sdlMtxDTvmekUnLg2uuX3/nNxV4fSxcm
- TLSH T1E693F42617EA4618F2F26F54FEB412746B62BDD2BD7DD81D12C0418D0CF1A40A867BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Greek.ini
- SHA256 f40e1d42573dfcb6647f28418a51279303320689bb736fb408d12ef00789b212
- MD5 c0ef520567b1aa8272b43f6717a6f15f
- SHA1 94d1ea7b0aaae459c354a7d3518e97fe44f1677c
- SHA512 1f5cdab1d9041bc0c744f25a13472344ebd2ff9da7807b8a304b589428f76d0c6a3f665fdf8a32a2640eb3a4ce80a9e8a4f3700298dba2a83de505bb2d1538fe
- SSDEEP 768:R2/eYFq96By/gdXZEHZQzfn6tnsNnDnitEdZKv5pRh2lzoebVL0wGu5Ivm3o6eAn:c/lm6By/ar2nsNnmEdZKv5gB7F3PEW
- TLSH T16A83765E0DEB4225AEF5A9F1D47241325B6EF592482CED2EB1E13148CAED8015CC3F9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Hungarian.ini
- SHA256 6eddfb60599139092b701d04f9f9ebc56978b5ca7ee2430b5eac7268f225460e
- MD5 52462e5b860f26a312dc4e08d2d3d5ee
- SHA1 45f3d33d0c48f0719ba530082f46fcdc27fdb525
- SHA512 5991575c99582523a95ba65f736c714f8027d92b60a82f8e4d490b833069e9bb1a3bc901ea86232dbfa6745269f983d25587e5b0d7dcf85b3599604f4e7db4c9
- SSDEEP 1536:GL2g/C3QEaY3a+F4L++ird5/XlBpj6v1de9LuUf0U6FuPMAflPBsN7WiO+Ryk483:GL2OC3QEaY3a+F4L++ird5/Xnpj6v1df
- TLSH T1E783F21B12EC0256F5F78F52FDF012A54B65BCA1BE3DD51C81C1228C1AF6680D5B2BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Indonesian.ini
- SHA256 adfddf01d20d7716a24d5b64df4ce1e5b22b14d15f2262fc384c71b0f4858fb8
- MD5 f8b14f775a09e701ed43e2d2470045f4
- SHA1 5a6e9b6118cf48f5fcee244aafdb3b44fabc6e4f
- SHA512 c9aa8a502e267b851ba9dfda145f1f0a3b44b2dfbfa88971a60039fc070813b3b51a56ff9579a778ec53563252d542d81c2b377553078defae550b81bfa8b0b0
- SSDEEP 768:CcbcMcqc/HaUlmTO69HoyERvEXdp8Z4xU589N8caEKIGMegUXLXYL0wGu5Ivm3ou:CcbcMcqca3wLH8NArIGUBv
- TLSH T1B373762667EC4219F6F77F50EAB402715B76BC96FD7CD65C01C1014E09F2A8098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Italian.ini
- SHA256 bc1d103a387dc1cb1b97230e04729ad578f5f90c4f0e0dd084ca16ded491e76f
- MD5 b72cd362de7fb90f5ceddea19433f7c3
- SHA1 0e56bbcc3619a9722ea55fb45525a8286033803e
- SHA512 b59bd75d5a6120d13d288a714acc00ace348316b95e8df23310331a9481ecc32a02081eea40179c5cff90e85802da63f431c127982debceaeb9dcf77986f75ef
- SSDEEP 1536:A80vj3FctHg0qOtTOxqPsyNtQzsSv3moN3y01bXiXxzhBrz:A8KTFctg0qOtTOxqPsyNtQzsY3moN3y7
- TLSH T1EE83872667FC0219F2F3BB00EE7816355A7ABD56EC3CD52D01C2015D09F1E6598A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Japanese.ini
- SHA256 c02ac88a984866ce973d713abee01c38f4612e97c2ee726855c6346190de00c6
- MD5 c33b45de7a3ebc178eaecef5a5f31cc9
- SHA1 341f0bda585b666d91a11e0f0f94e5e8e3f17860
- SHA512 a0fe83a24e69eb68f04224ca5f1cb3f260c92ea70cc7190954b1b4da1a84de1109d7d319e0aace472b00df2f7bf19d6c23483004329e882d2ffaec3f64c0d1f0
- SSDEEP 768:rOPZTUyTERrEXdx2h+xlhz8li8caEhISJ6brjeYL0wGu5Ivm3o6eAA4alFwyJraV:mOxOzkiA4IS0n6rfDlSN
- TLSH T1D2630D2A67EC0229F2F77F50E9B412315B76BC56FD7CDA5C01C5054E09F2A4098A2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Korean.ini
- SHA256 9c2f965fb034635bc409c12b692df1f97fa97cc95cfde95dbe6f4bd1200030de
- MD5 5fc79d75d13236d68ec25c38cd62a66e
- SHA1 c4d628c00bcd67e8111b38f7d13837a6db7c0e98
- SHA512 574aef230844839a4a6dd42551160a45f43fc5c4116c0a6f12422632ba7f3c48c7e4875dc9661c37871be37cf6ef63f81ad75e8cbde5187ca50458b423fe6010
- SSDEEP 768:1PcIQuxTWJbE3kPTPxcX/fLSRYHJuriIS0hDh86TVFyros:1xZsJbE2xcXEqivs
- TLSH T155332D3F1599942662B0E744D3C20737B346A062B65E2C4981D72F8917F2B627AD33EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Polish.ini
- SHA256 7b9f8f641168e2c0bacbe84bbf852f55b415bc56c1adc250ed2d8d6f6ee28147
- MD5 a38a6ff7d2756fe96ff24e943787ce96
- SHA1 20db1e8f19b54e7988f8f25795f8e05c25526854
- SHA512 83701820d559f690c994130d3a23807bba9be32c0541dc741890c76a139d3a7c36aa5559bae6e57c3692de654576d50398f27937dda0e3f5e67ec081d53023c5
- SSDEEP 768:RsmvPbiJKCawg6g8AO4HzyvBI6dqSAi/ntsHQP2FT2VUg3q3RqPYi/zDu77gfbNo:v4FvtsHQisa1yzS+Q
- TLSH T15A833A1623F81255F6F76F51E9F521B59F7B7C22BE3C819F20C002090AF1A9195A27BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/PortugueseBrazil.ini
- SHA256 ec3bdcc6e1f59d152a254ecbf1df43b40a22b22f98691cc60dae062122af2802
- MD5 33efa85968aea0f193dde788fda1fb47
- SHA1 cca8afc928085b154f4b9a09e23c0397080f70be
- SHA512 ceb0ca68529d011c7fced1a8ef556282d623d32e4a0b0d7b62d3dc0ab3039818f2f1c059bc64e8709974ad79b48fbd0e9c8796e845a27a61a45f39f08590d1fb
- SSDEEP 768:Rmn/LXzFd1WlCyWd17lUSZtJGfTBP3UXLXYL0wGu5Ivm3o6eAA4alPRN9GfRn5rQ:0dg6ygGraGfRO
- TLSH T14483792667FC4219F6F3BF55EAB812315A7A7C92AD7CD51C00C1124E0EF1B4098A67BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/PortuguesePortugal.ini
- SHA256 9d7a87184a1e30bb29b788529d5d26ca982f488c337b287106da3d9c9d3cdd07
- MD5 c1e86221503fca4ff199ed561e7b4c38
- SHA1 bff571048c0ef846f1c8c9b0173c65a148e75bac
- SHA512 211328ae1531d6f4bd762bc62358ae2ede45792a3347db084a5cb306f7f604d18570eb41efdb4c42e85bcc5700d202ec83b37a5b7b82455f8b524cc1b39671b8
- SSDEEP 768:RzzVzyd1WlDy6d87lUSZtqGFTxP/RZmR2ersL0wGu5Ivm3o6eAA4almTNF43VlUt:6dg3DzG04P4nUt
- TLSH T17A839A2667FC4219F6F3BF45EAB812325A777C92AD7CD51C00C1125A0DF1B4098AA7BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Romanian.ini
- SHA256 ecb586f700446e2381f4b24ddd47cb01d0761592b8289c5152f37754f0e6cf9b
- MD5 e56ee3b29eb3f7dd2325c6dc00dcd21f
- SHA1 fc2e5e5b46b6eb4306189d3f62566830d900394c
- SHA512 e411d7c112884fcae955abf4b070dfa55c32e2873707f74f2fd957bd7f52b00239bcedf00ad1ff624c6f4e3cb3c1017bb9d88dd43f80cf22b4843e7f0a993412
- SSDEEP 768:nDs4cGREs64Ks6nQhqCeYm3BKHM//sG8kJV94WZ8LNIE0N+e+RvZR25udZUTcHCr:8Tsjq3YmxKMhr4vNXOowv
- TLSH T17B83CE6667EC0129F3F3BF00E97412295E777A63ED7CD50E0581058D1EF2E8098A2BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Russian.ini
- SHA256 c492cb45fb294d4af9a821988232b94a29a38ad30ff8a84c0c114969548c9ab7
- MD5 223d1a2048c35d775d508e2a8220adb5
- SHA1 a1a2d136f79299dcdde02f24a1e85d821c63dad9
- SHA512 6fa46e92c47f22aa3623b014c0a70cce42ca86fc09234ec8941d41706d898641a367b0794b7f32c6d71570520eb49ab1d5fd5b8ff38d8d0ee10e8fd97fb56db0
- SSDEEP 1536:3byG9YQzMNyE2i4A8tL1GfY/4SsKWba3C9FoPB3NOTaIjsfr:3byG9YQzMNyE2i4A8tL1GfY/4SsKWbaB
- TLSH T19373345FF9BC922165A4D2509B854AF322F9B710332D69C686CF3E6860EC27533126DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/SimpChinese.ini
- SHA256 c903e6834e0854f1994573f153e96d6f570c4730badc1620bb35340946522b8f
- MD5 1619228149b6f1b369361e523527f911
- SHA1 ecde8a4b69d7155e4d354be01f3ded0b95140d64
- SHA512 d0646c77cc7a5dbb712676cdaa6ec287c78a523c6b659b5e128123ad97c9de7a8fd08575f49b7dc510ac1d38d62a81dccb3553de7a63d091f4a0e324956c3cba
- SSDEEP 768:RfbkhDovl5jAxUsLF20OeJW1okjij9Sfos:SavDjMUsZFZWdih+T
- TLSH T19C03ED3E0F8911BA43F4CA60D1C00B27B7E4A55B679C6D1588DF4F8506E668235CBAFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Slovenian.ini
- SHA256 811ab8f079ee56bde6d1375ad87e8d13ca1ea8072a40c6b2bb9d1c51173ee58c
- MD5 ddee309ec6cb8d9932c244a573506721
- SHA1 9c7b31831738c82e12e0517b77efc96669a26703
- SHA512 bd7b44c010e2efab691ee341f2f1050c38f197f4bc3d376194e6fa1c62c10f2ce26a01be7492536a485437e7ed7aa870f753282b6c8aca7ee0fd58c5080bce95
- SSDEEP 1536:DZRfPdKoVotrkFowbQpOr203uWJoW7l2t6g:DZRPdKoVotYFowbQpOr203uWJoW7l2t7
- TLSH T17583C21B62FC124AF9F7BB01EAF506744B7A7DB1B93CC12D11D102890AE26C195E27B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Spanish.ini
- SHA256 dcb8b5f02fb12386700ef955b926cd8b9d973591d48dd2a5016b7881f84f7d9f
- MD5 413d6c22280d0a08e6e59753887cbe3f
- SHA1 e50e5a106930eee267a1819a3d94724776abc736
- SHA512 7f1c5266275509abd511474b46b85e6e7a5949a4c49304119977fab88212ce1980d9060b256e23cfa975c5a1053cef5d4560e38d2ef45bbb7e8deeb6ef08a1e0
- SSDEEP 768:RBzoH3atWQlrszHDVviwkKgdFjnajIVLoDjsO/l5o6eAA4almoUMau8+4:kbJviHFjn/GzMauW
- TLSH T179839D2217FD521AF2F3BF05EAB906255E76BC92EC3C941C0191125A0DF1F409DAABB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Swedish.ini
- SHA256 187c3f55491af0e511b5d2f08e9c052d92df28b67ea399e441c2cf81b8237b7f
- MD5 247de23d7130df2cab91c321daf2c0d3
- SHA1 c413535f4257007997cc9cda15ad7b6f5e1e1e1f
- SHA512 5a56aa669b6c5e4fdc10787e61d5dcde7efb6c951873a712b8984c1915c3559ef331e05071e814721cf05f8c31a6c25542487ce221ede23497f62688d9d86a44
- SSDEEP 1536:zZSpPKlTytVAkve6qmvSAB0i5wLBPFP40uDTMR8yoIJ53H783azvKd6ksLCiWBtZ:tSpPKlTytVAEe6qmvSAB0i5wLBdP40uB
- TLSH T164730B2657EC0629F1F3AB10FDB4067156A5BCE6BCBCD61C06C1058C09F1A95A4F2BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/TradChinese.ini
- SHA256 6573168fde9efa71e1fa6a0b1750c25867ef779494ec29dad919d154155028c5
- MD5 6f041711b9dd18e0d64b8f8aced559e3
- SHA1 f3ae314c871ecaba9ee64b6279e6fb309db22588
- SHA512 c246813d751498b4027e811ddb5a5c1b9f80bb0009e0418a0352b5bee82af018d11bc51ce1e7de654133bbde44ce9fc516e989243e5ed51f8c4bd236b88fbc95
- SSDEEP 768:RN5soH9CQPdY1nsmEPQ/onbZOTcqOcQSk/I:QQlYWmEDwTZ
- TLSH T104030E3E0AC9013B9BB4CA44D2D5063277642497778C2E5A78D34B8417DBBC235DBAEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Turkish.ini
- SHA256 62060d072507ed2965b263cf577898e41589bb6d2e7e34bded3a248624e18dc8
- MD5 dbb148e2fc65be9a1c4a522f0729de3c
- SHA1 2cc83a67b7d7f58519639d0d4993bb83cc1e352e
- SHA512 f21a37e78920cfa1871ca49307413538b227a1066969ad7f68cbd0576a19cf757ce2ac55ef7552dd071554e54f7f0b378016d907a200ed7621b2463005446c71
- SSDEEP 1536:DqasQZaJMzjtjfVVr/PMl1VPkv8D3lzb4VLLOJimAKdt2OapvjywWZI+8sMwNc3q:DqfQZaJMzjtjfVVr/P0K8D3lzb4VLLON
- TLSH T1C383E12647EC4116FAF35F02E9F521721BE63DB2BD3C966E22D1024909F1680D466BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Ukrainian.ini
- SHA256 39897b9a9152ab49fe323f409c64629f9af3908df4d70c92d881c95b272207dc
- MD5 50aa7ab3d6281c30392d040570128a97
- SHA1 8a50f224fb748085ff870c56431c24b0fade68b2
- SHA512 116e77d7e4498839df097c752273fa2c23e4f7f06684c0187b7d39985e156d7e7ffea4058b774f4395253628670e98d6f91e762aefbfa4fb26c6260cc7dc7b61
- SSDEEP 1536:1c4l2ntorFde8XkbkH/2x8xDbfYZCvuJumTbShx8yTrY3ASqqrlVUyyEg2GbshpA:1c4lktorFde8XkbkH/2x8xDbfYZCvuJy
- TLSH T19D736B5FFDBC422566A4D251CB8146E322E8B71027AC99C8A2CF7E6450E933533527DF
- MD5 SHA1 SHA512 SSDEEP TLSH
License.txt
- SHA256 edeaef6a635102ad134b4efecf1d7d68e586591b2207c2d5a9be93b29a787132
- MD5 ea40ec498fca487e2d2044cc7880a734
- SHA1 62583010ca45e1ed90e194df32762856133ddb67
- SHA512 94d998a858dd64e3bd22f767a4532cfa4cd79b554e17b1b48008acc304111e46178e7b59f0dd9d85005e35c5e14358ab2a6032ac1fe0b5c50bcc95f8b73c2efc
- SSDEEP 96:ukxTEYydJDSNS52jzafhcu/zGw8CH2HmxMnFdvZj:JiJDSgcjehT/z8bHmxMFdvZj
- TLSH T1C181A76B770193B54B9703122646E8C5F72F917832BB69507269804F2792E38C3FB5D6
- MD5 SHA1 SHA512 SSDEEP TLSH
MACDll.dll
- IMPHASH 5173b83356153baed25f36114d9e31a2
- SHA256 d8434c7cf6eb19ae8efd63615f46a858dc4db681beb25e30ce4c5653d1405862
- MD5 ebc96e6a55cb41994f8c6cfc6b012ab5
- SHA1 c4ac1f5bbb523d9d9a69d9f66b66ea8e73eda413
- SHA512 d0c7298f0d51400db45b626d2a089ae7f7c6636ff28399b7ace2e6033ef6165993e41de1c93963ac3bbf4120f614c2fd99856b97c6f15022773dca8932a75a2e
- SSDEEP 3072:nbI6YoDnmvrwuGhxAMOAKz/VsXowHswtLLxu:nZYoDnAG7CpDS4wMU
- TLSH T1AFF34A56B2B082B1D07BC1BDC9D24746EBB27045573196CB07088B3E2F67BE59A3D362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
71520
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
Sleep
CloseHandle
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
GetFileSize
CreateFileW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
RaiseException
RtlPcToFileHeader
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
LoadLibraryA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
user32
DispatchMessageW
PeekMessageW
TranslateMessage
CompressFile
CompressFileW
ConvertFile
ConvertFileW
DecompressFile
DecompressFileW
FillWaveFormatEx
FillWaveHeader
GetChecksum
GetFieldTagW
GetID3Tag
GetInterfaceCompatibility
GetVersionNumber
RemoveTag
SetFieldTagW
ShowFileInfoDialog
TagFileSimple
VerifyFile
VerifyFileW
c_APECompress_AddData
c_APECompress_Create
c_APECompress_Destroy
c_APECompress_Finish
c_APECompress_GetBufferBytesAvailable
c_APECompress_Kill
c_APECompress_LockBuffer
c_APECompress_Start
c_APECompress_StartW
c_APECompress_UnlockBuffer
c_APEDecompress_Create
c_APEDecompress_CreateW
c_APEDecompress_Destroy
c_APEDecompress_GetData
c_APEDecompress_GetInfo
c_APEDecompress_Seek
Name
.text
Size
111KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=126, version=30120,
count=114, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=13, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=5, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=93, id=1, productName=Unmarked objects,
count=38, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
Readme.txt
- SHA256 03db568b392cd07818e35f1bad081f27142f08a33e6505f827661759ca3f7cfe
- MD5 fe9d6ae784189e50451e50bd00370b1f
- SHA1 19575c9520131391487763bb5e5cdeb013e76cc6
- SHA512 62262f4d02779bb09359f8ed946228737eebe848452f96ac1f2f2126626c1a7e1d0d17721f5d76004bef566f49a0e35535e50a0d355fcfb5c4e2b85c60dea4e1
- TLSH T14E11D982BD0A70172A7167A8B2572802FE8D87DF09E793F1794D0512B71AACCC3FA025
- MD5 SHA1 SHA512 TLSH
abcmd.exe
- IMPHASH 08c6c6afda2527b8a47741d922302b10
- SHA256 a0e32021954d69fedbf785523a6d5425e5dc47a04ffa02309f07ca3f9e4d0c19
- MD5 72eb1fa737fb54829d73aa9dd8f5de7b
- SHA1 036bda25343867c808d47a708d2b7bfabf407712
- SHA512 f12a4e4e57afef5ae171f31672fd6a835fd8df8f559aa0df67e6deaf1b6f8ef2dfb4d2912e88baf22b9c1df2d0d96a55037f7e2e3ee511454edc8ababb4f8e2e
- SSDEEP 768:YP6vMNHQ1TYmjtuPiTZKnyTYmjtu7KiTZKl:YyWQemBu8Kn/mBuFKl
- TLSH T16CC22AE2AE1C94E2EF424F30E5D41423FD37B6D52E88249BA116C4A549CB7F17E6603D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:e9:7c:65:0b:f0:1c:e5:38:b6:83:a5:0a:ba:a4:ae:89:fb:a8:21:d6:4a:19:4d:48:c4:02:7e:7c:79:d8:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Mar 15, 2023
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Digest
24:e9:55:be:62:bb:2b:ed:de:90:3f:95:e9:f8:00:29:fa:42:2e:5c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Chains
Mar 15, 2023
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Serial Number
e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 11, 2018 - Sep 11, 2023
Subject
CN=Power Software Limited,O=Power Software Limited,L=Sheung Wan,C=HK
Serial Number
20:45:6e:ff:67:25:04:b0:d5:ff:21:fa:45:55:82:65
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 9, 2023 - Mar 8, 2026
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 9, 2022 - Dec 6, 2032
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
5840
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvcirt
?cout@@3Vostream_withassign@@A
??6ostream@@QAEAAV0@PBD@Z
?flush@@YAAAVostream@@AAV1@@Z
?cerr@@3Vostream_withassign@@A
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_splitpath
strchr
printf
sprintf
kernel32
GetConsoleMode
GetStdHandle
CreateMutexA
CreateNamedPipeA
GetCurrentDirectoryA
CreateProcessA
ResumeThread
WaitForSingleObject
Sleep
GetExitCodeProcess
WriteFile
ConnectNamedPipe
ReadFile
TerminateThread
CreateThread
CloseHandle
SetConsoleMode
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=19, version=8034,
count=11, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=14, version=7299,
count=40, id=1, productName=Unmarked objects,
count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
lame_enc.dll
- IMPHASH f7bb0cc37ee70cbc4854a501494922c5
- SHA256 89d12c8147b36344647d4ffd109ff8d237d9c0c88194048f842ca97a3b079c97
- MD5 3ddbe1ba218722dff684f83d86299807
- SHA1 267b1f9829e9c2a508a9dd564a9dde6d373123f0
- SHA512 e415d7ebc5a00e8ee4d4a7b8294924aab8eaa3cda3d0ad46d8546494a5965e28d1dfe5710c1cb0d5c3a9f5b9c1b60243227217d71ea49187077492746632cbf3
- SSDEEP 6144:8cUdD9kke1LoEpkqNdnDRjX0cBPkd3zujZx7Y3eg8gAoeR1DOWtoUqoTE6LEU4Gi:8cUdD9kkKJpdnDRjX0cBPkd3zujZlY3/
- TLSH T1E2847B83F290CDE8D1AE643492A27653B672F4580B1496D71BE48E3D2B973C42EBF711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
221744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetPrivateProfileIntA
GetModuleFileNameA
OutputDebugStringA
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapSetInformation
HeapCreate
HeapDestroy
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetFilePointer
RtlUnwindEx
CloseHandle
WriteFile
GetStdHandle
FlushFileBuffers
DeleteCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
Sleep
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetLocaleInfoA
UnhandledExceptionFilter
GetACP
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
LoadLibraryA
InitializeCriticalSection
CreateFileW
CreateFileA
SetEndOfFile
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteInfoTagW
beWriteVBRHeader
beWriteVBRHeaderW
id3tag_add_v2
id3tag_init
id3tag_set_album
id3tag_set_artist
id3tag_set_comment
id3tag_set_genre
id3tag_set_title
id3tag_set_track
id3tag_set_year
id3tag_v1_only
id3tag_v2_only
lame_init_bitstream
lame_set_bWriteVbrTag
Name
.text
Size
270KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TEXT
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=86, id=1, productName=Unmarked objects,
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=143, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=12, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=29, id=113, version=40310,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
libFLAC.dll
- IMPHASH 1252f49ffdf6fd762d6afd028aeac45a
- SHA256 fe71ca9e8ccfb7d63e2741ae090bfd9539830022912d1121b5e83caefc2042d9
- MD5 50d9d7cce1ed3422b9a2d972127ac890
- SHA1 226f83bfd0ee358840edcf0402ddbae540bb1652
- SHA512 a8fdb1efba72d16a343299a72ac5764f5240b1753f0480afbc1d1a0b235965c29d99e34ad8c43249a416efa52ce09d8126ef1d21065ee3e30b39feaf914a7b4d
- SSDEEP 6144:4SEfFLc0EMt9Rs9zTw3Apib2b+u97iFsOGB2gJXFwy:4SYzM9QArb+u9eta3F
- TLSH T1E5346C95F7A14CF6E9B7913A8AE1C303EA7272051329C7DB46518E261F077E9A93F310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
116688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
HeapFree
HeapReAlloc
GetLastError
MoveFileA
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapSetInformation
HeapCreate
HeapDestroy
RtlUnwindEx
RaiseException
SetFilePointer
ReadFile
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
WriteFile
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
SetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
FlushFileBuffers
GetACP
GetOEMCP
GetCPInfo
CreateFileA
InitializeCriticalSection
CreateFileW
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileAttributesA
GetFileAttributesA
GetFileInformationByHandle
PeekNamedPipe
GetFullPathNameA
GetCurrentDirectoryA
FLAC_API_SUPPORTS_OGG_FLAC
FLAC__ChannelAssignmentString
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ORDER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_RAW_LEN
FLAC__ENTROPY_CODING_METHOD_TYPE_LEN
FLAC__EntropyCodingMethodTypeString
FLAC__FRAME_FOOTER_CRC_LEN
FLAC__FRAME_HEADER_BITS_PER_SAMPLE_LEN
FLAC__FRAME_HEADER_BLOCKING_STRATEGY_LEN
FLAC__FRAME_HEADER_BLOCK_SIZE_LEN
FLAC__FRAME_HEADER_CHANNEL_ASSIGNMENT_LEN
FLAC__FRAME_HEADER_CRC_LEN
FLAC__FRAME_HEADER_RESERVED_LEN
FLAC__FRAME_HEADER_SAMPLE_RATE_LEN
FLAC__FRAME_HEADER_SYNC
FLAC__FRAME_HEADER_SYNC_LEN
FLAC__FRAME_HEADER_ZERO_PAD_LEN
FLAC__FrameNumberTypeString
FLAC__MetadataTypeString
FLAC__Metadata_ChainStatusString
FLAC__Metadata_SimpleIteratorStatusString
FLAC__STREAM_METADATA_APPLICATION_ID_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_IS_CD_LEN
FLAC__STREAM_METADATA_CUESHEET_LEAD_IN_LEN
FLAC__STREAM_METADATA_CUESHEET_MEDIA_CATALOG_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_NUM_TRACKS_LEN
FLAC__STREAM_METADATA_CUESHEET_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_ISRC_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUM_INDICES_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_PRE_EMPHASIS_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_TYPE_LEN
FLAC__STREAM_METADATA_IS_LAST_LEN
FLAC__STREAM_METADATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_COLORS_LEN
FLAC__STREAM_METADATA_PICTURE_DATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_DEPTH_LEN
FLAC__STREAM_METADATA_PICTURE_DESCRIPTION_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_HEIGHT_LEN
FLAC__STREAM_METADATA_PICTURE_MIME_TYPE_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_TYPE_LEN
FLAC__STREAM_METADATA_PICTURE_WIDTH_LEN
FLAC__STREAM_METADATA_SEEKPOINT_FRAME_SAMPLES_LEN
FLAC__STREAM_METADATA_SEEKPOINT_PLACEHOLDER
FLAC__STREAM_METADATA_SEEKPOINT_SAMPLE_NUMBER_LEN
FLAC__STREAM_METADATA_SEEKPOINT_STREAM_OFFSET_LEN
FLAC__STREAM_METADATA_STREAMINFO_BITS_PER_SAMPLE_LEN
FLAC__STREAM_METADATA_STREAMINFO_CHANNELS_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MD5SUM_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_SAMPLE_RATE_LEN
FLAC__STREAM_METADATA_STREAMINFO_TOTAL_SAMPLES_LEN
FLAC__STREAM_METADATA_TYPE_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_ENTRY_LENGTH_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_NUM_COMMENTS_LEN
FLAC__STREAM_SYNC
FLAC__STREAM_SYNC_LEN
FLAC__STREAM_SYNC_STRING
FLAC__SUBFRAME_LPC_QLP_COEFF_PRECISION_LEN
FLAC__SUBFRAME_LPC_QLP_SHIFT_LEN
FLAC__SUBFRAME_TYPE_CONSTANT_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_FIXED_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_LEN
FLAC__SUBFRAME_TYPE_LPC_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_VERBATIM_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_WASTED_BITS_FLAG_LEN
FLAC__SUBFRAME_ZERO_PAD_LEN
FLAC__StreamDecoderErrorStatusString
FLAC__StreamDecoderInitStatusString
FLAC__StreamDecoderLengthStatusString
FLAC__StreamDecoderReadStatusString
FLAC__StreamDecoderSeekStatusString
FLAC__StreamDecoderStateString
FLAC__StreamDecoderTellStatusString
FLAC__StreamDecoderWriteStatusString
FLAC__StreamEncoderInitStatusString
FLAC__StreamEncoderSeekStatusString
FLAC__StreamEncoderStateString
FLAC__StreamEncoderTellStatusString
FLAC__StreamEncoderWriteStatusString
FLAC__StreamMetadata_Picture_TypeString
FLAC__SubframeTypeString
FLAC__VENDOR_STRING
FLAC__VERSION_STRING
FLAC__format_cuesheet_is_legal
FLAC__format_picture_is_legal
FLAC__format_sample_rate_is_subset
FLAC__format_sample_rate_is_valid
FLAC__format_seektable_is_legal
FLAC__format_seektable_sort
FLAC__format_vorbiscomment_entry_is_legal
FLAC__format_vorbiscomment_entry_name_is_legal
FLAC__format_vorbiscomment_entry_value_is_legal
FLAC__metadata_chain_check_if_tempfile_needed
FLAC__metadata_chain_delete
FLAC__metadata_chain_merge_padding
FLAC__metadata_chain_new
FLAC__metadata_chain_read
FLAC__metadata_chain_read_ogg
FLAC__metadata_chain_read_ogg_with_callbacks
FLAC__metadata_chain_read_with_callbacks
FLAC__metadata_chain_sort_padding
FLAC__metadata_chain_status
FLAC__metadata_chain_write
FLAC__metadata_chain_write_with_callbacks
FLAC__metadata_chain_write_with_callbacks_and_tempfile
FLAC__metadata_get_cuesheet
FLAC__metadata_get_picture
FLAC__metadata_get_streaminfo
FLAC__metadata_get_tags
FLAC__metadata_get_tagsW
FLAC__metadata_iterator_delete
FLAC__metadata_iterator_delete_block
FLAC__metadata_iterator_get_block
FLAC__metadata_iterator_get_block_type
FLAC__metadata_iterator_init
FLAC__metadata_iterator_insert_block_after
FLAC__metadata_iterator_insert_block_before
FLAC__metadata_iterator_new
FLAC__metadata_iterator_next
FLAC__metadata_iterator_prev
FLAC__metadata_iterator_set_block
FLAC__metadata_object_application_set_data
FLAC__metadata_object_clone
FLAC__metadata_object_cuesheet_calculate_cddb_id
FLAC__metadata_object_cuesheet_delete_track
FLAC__metadata_object_cuesheet_insert_blank_track
FLAC__metadata_object_cuesheet_insert_track
FLAC__metadata_object_cuesheet_is_legal
FLAC__metadata_object_cuesheet_resize_tracks
FLAC__metadata_object_cuesheet_set_track
FLAC__metadata_object_cuesheet_track_clone
FLAC__metadata_object_cuesheet_track_delete
FLAC__metadata_object_cuesheet_track_delete_index
FLAC__metadata_object_cuesheet_track_insert_blank_index
FLAC__metadata_object_cuesheet_track_insert_index
FLAC__metadata_object_cuesheet_track_new
FLAC__metadata_object_cuesheet_track_resize_indices
FLAC__metadata_object_delete
FLAC__metadata_object_is_equal
FLAC__metadata_object_new
FLAC__metadata_object_picture_is_legal
FLAC__metadata_object_picture_set_data
FLAC__metadata_object_picture_set_description
FLAC__metadata_object_picture_set_mime_type
FLAC__metadata_object_seektable_delete_point
FLAC__metadata_object_seektable_insert_point
FLAC__metadata_object_seektable_is_legal
FLAC__metadata_object_seektable_resize_points
FLAC__metadata_object_seektable_set_point
FLAC__metadata_object_seektable_template_append_placeholders
FLAC__metadata_object_seektable_template_append_point
FLAC__metadata_object_seektable_template_append_points
FLAC__metadata_object_seektable_template_append_spaced_points
FLAC__metadata_object_seektable_template_append_spaced_points_by_samples
FLAC__metadata_object_seektable_template_sort
FLAC__metadata_object_vorbiscomment_append_comment
FLAC__metadata_object_vorbiscomment_delete_comment
FLAC__metadata_object_vorbiscomment_entry_from_name_value_pair
FLAC__metadata_object_vorbiscomment_entry_matches
FLAC__metadata_object_vorbiscomment_entry_to_name_value_pair
FLAC__metadata_object_vorbiscomment_find_entry_from
FLAC__metadata_object_vorbiscomment_insert_comment
FLAC__metadata_object_vorbiscomment_remove_entries_matching
FLAC__metadata_object_vorbiscomment_remove_entry_matching
FLAC__metadata_object_vorbiscomment_replace_comment
FLAC__metadata_object_vorbiscomment_resize_comments
FLAC__metadata_object_vorbiscomment_set_comment
FLAC__metadata_object_vorbiscomment_set_vendor_string
FLAC__metadata_simple_iterator_delete
FLAC__metadata_simple_iterator_delete_block
FLAC__metadata_simple_iterator_get_application_id
FLAC__metadata_simple_iterator_get_block
FLAC__metadata_simple_iterator_get_block_length
FLAC__metadata_simple_iterator_get_block_offset
FLAC__metadata_simple_iterator_get_block_type
FLAC__metadata_simple_iterator_init
FLAC__metadata_simple_iterator_insert_block_after
FLAC__metadata_simple_iterator_is_last
FLAC__metadata_simple_iterator_is_writable
FLAC__metadata_simple_iterator_new
FLAC__metadata_simple_iterator_next
FLAC__metadata_simple_iterator_prev
FLAC__metadata_simple_iterator_set_block
FLAC__metadata_simple_iterator_status
FLAC__stream_decoder_delete
FLAC__stream_decoder_finish
FLAC__stream_decoder_flush
FLAC__stream_decoder_get_bits_per_sample
FLAC__stream_decoder_get_blocksize
FLAC__stream_decoder_get_channel_assignment
FLAC__stream_decoder_get_channels
FLAC__stream_decoder_get_decode_position
FLAC__stream_decoder_get_md5_checking
FLAC__stream_decoder_get_resolved_state_string
FLAC__stream_decoder_get_sample_rate
FLAC__stream_decoder_get_state
FLAC__stream_decoder_get_total_samples
FLAC__stream_decoder_init_FILE
FLAC__stream_decoder_init_file
FLAC__stream_decoder_init_fileW
FLAC__stream_decoder_init_ogg_FILE
FLAC__stream_decoder_init_ogg_file
FLAC__stream_decoder_init_ogg_stream
FLAC__stream_decoder_init_stream
FLAC__stream_decoder_new
FLAC__stream_decoder_process_single
FLAC__stream_decoder_process_until_end_of_metadata
FLAC__stream_decoder_process_until_end_of_stream
FLAC__stream_decoder_reset
FLAC__stream_decoder_seek_absolute
FLAC__stream_decoder_set_md5_checking
FLAC__stream_decoder_set_metadata_ignore
FLAC__stream_decoder_set_metadata_ignore_all
FLAC__stream_decoder_set_metadata_ignore_application
FLAC__stream_decoder_set_metadata_respond
FLAC__stream_decoder_set_metadata_respond_all
FLAC__stream_decoder_set_metadata_respond_application
FLAC__stream_decoder_set_ogg_serial_number
FLAC__stream_decoder_skip_single_frame
FLAC__stream_encoder_delete
FLAC__stream_encoder_disable_constant_subframes
FLAC__stream_encoder_disable_fixed_subframes
FLAC__stream_encoder_disable_verbatim_subframes
FLAC__stream_encoder_finish
FLAC__stream_encoder_get_bits_per_sample
FLAC__stream_encoder_get_blocksize
FLAC__stream_encoder_get_channels
FLAC__stream_encoder_get_do_escape_coding
FLAC__stream_encoder_get_do_exhaustive_model_search
FLAC__stream_encoder_get_do_md5
FLAC__stream_encoder_get_do_mid_side_stereo
FLAC__stream_encoder_get_do_qlp_coeff_prec_search
FLAC__stream_encoder_get_loose_mid_side_stereo
FLAC__stream_encoder_get_max_lpc_order
FLAC__stream_encoder_get_max_residual_partition_order
FLAC__stream_encoder_get_min_residual_partition_order
FLAC__stream_encoder_get_qlp_coeff_precision
FLAC__stream_encoder_get_resolved_state_string
FLAC__stream_encoder_get_rice_parameter_search_dist
FLAC__stream_encoder_get_sample_rate
FLAC__stream_encoder_get_state
FLAC__stream_encoder_get_streamable_subset
FLAC__stream_encoder_get_total_samples_estimate
FLAC__stream_encoder_get_verify
FLAC__stream_encoder_get_verify_decoder_error_stats
FLAC__stream_encoder_get_verify_decoder_state
FLAC__stream_encoder_init_FILE
FLAC__stream_encoder_init_file
FLAC__stream_encoder_init_fileW
FLAC__stream_encoder_init_ogg_FILE
FLAC__stream_encoder_init_ogg_file
FLAC__stream_encoder_init_ogg_stream
FLAC__stream_encoder_init_stream
FLAC__stream_encoder_new
FLAC__stream_encoder_process
FLAC__stream_encoder_process_interleaved
FLAC__stream_encoder_set_apodization
FLAC__stream_encoder_set_bits_per_sample
FLAC__stream_encoder_set_blocksize
FLAC__stream_encoder_set_channels
FLAC__stream_encoder_set_compression_level
FLAC__stream_encoder_set_do_escape_coding
FLAC__stream_encoder_set_do_exhaustive_model_search
FLAC__stream_encoder_set_do_md5
FLAC__stream_encoder_set_do_mid_side_stereo
FLAC__stream_encoder_set_do_qlp_coeff_prec_search
FLAC__stream_encoder_set_loose_mid_side_stereo
FLAC__stream_encoder_set_max_lpc_order
FLAC__stream_encoder_set_max_residual_partition_order
FLAC__stream_encoder_set_metadata
FLAC__stream_encoder_set_min_residual_partition_order
FLAC__stream_encoder_set_ogg_serial_number
FLAC__stream_encoder_set_qlp_coeff_precision
FLAC__stream_encoder_set_rice_parameter_search_dist
FLAC__stream_encoder_set_sample_rate
FLAC__stream_encoder_set_streamable_subset
FLAC__stream_encoder_set_total_samples_estimate
FLAC__stream_encoder_set_verify
FLAC__treamEncoderReadStatusString
Name
.text
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=126, version=30120,
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=15, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=100, id=1, productName=Unmarked objects,
count=167, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
libvorbis.dll
- IMPHASH fcc5e6e50eca35124d15b1ab0b3d5015
- SHA256 841a000c104c5acbc8c5f10c2a3f72e9f8983b138e46543247d371fc821985f0
- MD5 96a8188be8ea41b623d10fda3e2f2cdb
- SHA1 776b5ccf84e323e7f77182b08104780479f42cd4
- SHA512 95fe1c8b8b02bb91410a9d1f9168431e0fce66dee4c3ae65b8df6cdf778db3cb8e3a47762c0f17498d89e6ecff27d876cade9540f025ec352d30a6c2968954b8
- SSDEEP 6144:lv0FhLxjyfx+yNFbp4RJdnrzVPdGZR032sQO:lcFhdax+yNFbSJdrRkY9T
- TLSH T14D851D0759928B34C4BC51B588EB557853322C4DAE800F9E7BDCE67434D3578BEA2BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
115536
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapSetInformation
HeapCreate
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwindEx
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
RaiseException
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CloseHandle
ReadFile
Sleep
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
InitializeCriticalSection
GetLocaleInfoA
GetCPInfo
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CreateFileA
CreateFileW
LoadLibraryA
SetEndOfFile
_floor_P
_mapping_P
_residue_P
ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpackB_adv
oggpackB_adv1
oggpackB_bits
oggpackB_bytes
oggpackB_get_buffer
oggpackB_look
oggpackB_look1
oggpackB_read
oggpackB_read1
oggpackB_readinit
oggpackB_reset
oggpackB_write
oggpackB_writealign
oggpackB_writeclear
oggpackB_writecopy
oggpackB_writeinit
oggpackB_writetrunc
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writeclear
oggpack_writecopy
oggpack_writeinit
oggpack_writetrunc
ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_crosslap
ov_fopen
ov_fopenW
ov_halfrate
ov_halfrate_p
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_lap
ov_pcm_seek_page
ov_pcm_seek_page_lap
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_seek_lap
ov_raw_tell
ov_raw_total
ov_read
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_lap
ov_time_seek_page
ov_time_seek_page_lap
ov_time_tell
ov_time_total
vorbis_analysis
vorbis_analysis_blockout
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_analysis_init
vorbis_analysis_wrote
vorbis_bitrate_addblock
vorbis_bitrate_flushpacket
vorbis_block_clear
vorbis_block_init
vorbis_comment_add
vorbis_comment_add_tag
vorbis_comment_clear
vorbis_comment_init
vorbis_comment_query
vorbis_comment_query_count
vorbis_commentheader_out
vorbis_dsp_clear
vorbis_encode_ctl
vorbis_encode_init
vorbis_encode_init_vbr
vorbis_encode_setup_init
vorbis_encode_setup_managed
vorbis_encode_setup_vbr
vorbis_granule_time
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_idheader
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_version_string
vorbis_window
Name
.text
Size
151KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TEXT
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=14, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=83, id=1, productName=Unmarked objects,
count=154, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
uninstall.exe.nsis
- SHA256 09d25a2288874709e624ea256d0172f49653830886aa112965edc9f3f487ff9c
- MD5 cc68fa0b946f152bff3477497764a763
- SHA1 3e11f2c0be1eb075bdc19a496673c055c14ba377
- SHA512 2aa709a31beecf137260b1775b2cd28b9858a44f78b5966837a4cea8c2c5f7ba5b37e548941eaf410604e083cbc3f5b019e27955bd5bd6ab00cea03a88b9aace
- SSDEEP 384:tTot7L29LcuU4Gr1KNTK/+77/fGHkTT9I5NauA7P2xDmjj03LGvDNeREMbyWvceg:2uIQ7NmqTbT65NauA7P2Bmj0CLIbyoYl
- TLSH T1A1B2E1CCDB5429D19FD61AD6FD063C5F0C1882025B27F2BD1AC508D821A780AB6FD7A9
- MD5 SHA1 SHA512 SSDEEP TLSH