Win2K__XP__Vista.zip
- SHA256 69429e671497e4b7e6813ff383b9dd255e0fc949a46b8981e19cb8f7247eb869
Overview
overview
3Static
static
3CDM 2.04.1...fo.doc
windows10-2004-x64
1CDM 2.04.1...fo.doc
windows11-ltsc_2024-x64
1CDM 2.04.1...ui.dll
windows10-2004-x64
1CDM 2.04.1...ui.dll
windows11-ltsc_2024-x64
1CDM 2.04.1...co.dll
windows10-2004-x64
1CDM 2.04.1...co.dll
windows11-ltsc_2024-x64
1CDM 2.04.1...64.dll
windows10-2004-x64
1CDM 2.04.1...64.dll
windows11-ltsc_2024-x64
1CDM 2.04.1...us.sys
windows10-2004-x64
3CDM 2.04.1...us.sys
windows11-ltsc_2024-x64
3CDM 2.04.1...ng.dll
windows10-2004-x64
1CDM 2.04.1...ng.dll
windows11-ltsc_2024-x64
1CDM 2.04.1...2k.sys
windows10-2004-x64
3CDM 2.04.1...2k.sys
windows11-ltsc_2024-x64
3CDM 2.04.1...i2.dll
windows10-2004-x64
1CDM 2.04.1...i2.dll
windows11-ltsc_2024-x64
1CDM 2.04.1...ui.dll
windows10-2004-x64
3CDM 2.04.1...ui.dll
windows11-ltsc_2024-x64
3CDM 2.04.1...co.dll
windows10-2004-x64
3CDM 2.04.1...co.dll
windows11-ltsc_2024-x64
3CDM 2.04.1...xx.dll
windows10-2004-x64
3CDM 2.04.1...xx.dll
windows11-ltsc_2024-x64
3CDM 2.04.1...us.sys
windows10-2004-x64
3CDM 2.04.1...us.sys
windows11-ltsc_2024-x64
3CDM 2.04.1...ng.dll
windows10-2004-x64
3CDM 2.04.1...ng.dll
windows11-ltsc_2024-x64
3CDM 2.04.1...2k.sys
windows10-2004-x64
3CDM 2.04.1...2k.sys
windows11-ltsc_2024-x64
3CDM 2.04.1...i2.dll
windows10-2004-x64
3CDM 2.04.1...i2.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CDM 2.04.16 WHQL Certified/CDM 2 04 16 Release Info.doc
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
CDM 2.04.16 WHQL Certified/CDM 2 04 16 Release Info.doc
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
CDM 2.04.16 WHQL Certified/amd64/ftbusui.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
CDM 2.04.16 WHQL Certified/amd64/ftbusui.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
CDM 2.04.16 WHQL Certified/amd64/ftcserco.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
CDM 2.04.16 WHQL Certified/amd64/ftcserco.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
CDM 2.04.16 WHQL Certified/amd64/ftd2xx64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
CDM 2.04.16 WHQL Certified/amd64/ftd2xx64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
CDM 2.04.16 WHQL Certified/amd64/ftdibus.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
CDM 2.04.16 WHQL Certified/amd64/ftdibus.sys
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
CDM 2.04.16 WHQL Certified/amd64/ftlang.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
CDM 2.04.16 WHQL Certified/amd64/ftlang.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
CDM 2.04.16 WHQL Certified/amd64/ftser2k.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
CDM 2.04.16 WHQL Certified/amd64/ftser2k.sys
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
CDM 2.04.16 WHQL Certified/amd64/ftserui2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
CDM 2.04.16 WHQL Certified/amd64/ftserui2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
CDM 2.04.16 WHQL Certified/i386/ftbusui.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
CDM 2.04.16 WHQL Certified/i386/ftbusui.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
CDM 2.04.16 WHQL Certified/i386/ftcserco.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
CDM 2.04.16 WHQL Certified/i386/ftcserco.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
CDM 2.04.16 WHQL Certified/i386/ftd2xx.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
CDM 2.04.16 WHQL Certified/i386/ftd2xx.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
CDM 2.04.16 WHQL Certified/i386/ftdibus.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
CDM 2.04.16 WHQL Certified/i386/ftdibus.sys
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
CDM 2.04.16 WHQL Certified/i386/ftlang.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
CDM 2.04.16 WHQL Certified/i386/ftlang.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
CDM 2.04.16 WHQL Certified/i386/ftser2k.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
CDM 2.04.16 WHQL Certified/i386/ftser2k.sys
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
CDM 2.04.16 WHQL Certified/i386/ftserui2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
CDM 2.04.16 WHQL Certified/i386/ftserui2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Win2K__XP__Vista.zip
- Size 836KB
- Sample261027-ec1mga1vbw
- SHA256 69429e671497e4b7e6813ff383b9dd255e0fc949a46b8981e19cb8f7247eb869
- MD5 679d480a9fbeca22cf2514869f510fce
- SHA1 24ebc0786977e6abd8561cdca5c55c69967bd22c
- SHA512 3a486bd163ddff7a8bbef377f53dc6f6f39f8a9b9eea07e831c295d7e914848a5d1619d57761990a112bc6a5c170dfbd96cf64e81052b47ebe3f1f279aeea830
- SSDEEP 24576:FORxj5ZTOcYZF5kAuMlC1rx050SaC7HJBj5D3o7T:Fkx1ZUFS1y59zJBV7o7T
- TLSH T1D005236ED536473FE70FF06262A1CE05DB6C172BD636C01108CAB44EB92A5EF1DA9E11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 14 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/CDM 2.04.16 WHQL Certified/amd64/ftbusui.dll unpack001/CDM 2.04.16 WHQL Certified/amd64/ftcserco.dll unpack001/CDM 2.04.16 WHQL Certified/amd64/ftd2xx64.dll unpack001/CDM 2.04.16 WHQL Certified/amd64/ftdibus.sys unpack001/CDM 2.04.16 WHQL Certified/amd64/ftlang.dll unpack001/CDM 2.04.16 WHQL Certified/amd64/ftser2k.sys unpack001/CDM 2.04.16 WHQL Certified/amd64/ftserui2.dll unpack001/CDM 2.04.16 WHQL Certified/i386/ftbusui.dll unpack001/CDM 2.04.16 WHQL Certified/i386/ftcserco.dll unpack001/CDM 2.04.16 WHQL Certified/i386/ftd2xx.dll unpack001/CDM 2.04.16 WHQL Certified/i386/ftdibus.sys unpack001/CDM 2.04.16 WHQL Certified/i386/ftlang.dll unpack001/CDM 2.04.16 WHQL Certified/i386/ftser2k.sys unpack001/CDM 2.04.16 WHQL Certified/i386/ftserui2.dll
File Explorer
-
Win2K__XP__Vista.zip.zip 836KB
-
CDM 2.04.16 WHQL Certified/CDM 2 04 16 Release Info.doc.doc 61KB
-
CDM 2.04.16 WHQL Certified/amd64/ftbusui.dll.dll 140KB
-
CDM 2.04.16 WHQL Certified/amd64/ftcserco.dll.dll 50KB
-
CDM 2.04.16 WHQL Certified/amd64/ftd2xx.lib17KB
-
CDM 2.04.16 WHQL Certified/amd64/ftd2xx64.dll.dll 322KB
-
CDM 2.04.16 WHQL Certified/amd64/ftdibus.sys.sys 67KB
-
CDM 2.04.16 WHQL Certified/amd64/ftlang.dll.dll 268KB
-
CDM 2.04.16 WHQL Certified/amd64/ftser2k.sys.sys 82KB
-
CDM 2.04.16 WHQL Certified/amd64/ftserui2.dll.dll 53KB
-
CDM 2.04.16 WHQL Certified/ftd2xx.h22KB
-
CDM 2.04.16 WHQL Certified/ftdibus.cat11KB
-
CDM 2.04.16 WHQL Certified/ftdibus.inf3KB
-
CDM 2.04.16 WHQL Certified/ftdiport.cat10KB
-
CDM 2.04.16 WHQL Certified/ftdiport.inf4KB
-
CDM 2.04.16 WHQL Certified/i386/ftbusui.dll.dll 117KB
-
CDM 2.04.16 WHQL Certified/i386/ftcserco.dll.dll 52KB
-
CDM 2.04.16 WHQL Certified/i386/ftd2xx.dll.dll 201KB
-
CDM 2.04.16 WHQL Certified/i386/ftd2xx.lib18KB
-
CDM 2.04.16 WHQL Certified/i386/ftdibus.sys.sys 56KB
-
CDM 2.04.16 WHQL Certified/i386/ftlang.dll.dll 185KB
-
CDM 2.04.16 WHQL Certified/i386/ftser2k.sys.sys 70KB
-
CDM 2.04.16 WHQL Certified/i386/ftserui2.dll.dll 50KB
CDM 2.04.16 WHQL Certified/CDM 2 04 16 Release Info.doc
- SHA256 b54c10bd1dbd06819c47f703d46c9c483fb46a8279afd744a597075785599c52
- MD5 85694542480a9a8a4aca97b2a2bfc8c6
- SHA1 d850a2cadf8377297709ba827fea5b9f84b73f28
- SHA512 943c7c1248553ec7a9a35e98c815b3d703083025a4adf15477fea08ca60fc77f25401c28c49884e0908b0fbf03afa78698a773b1bcb4f76adfed64c7b9144153
- SSDEEP 384:0Y1QMwMQRsajvOQ81dlmVynM8tsWkrhCZJZjf3Dchhbggft:0Y1QMw9Cmqftjkqf3D
- TLSH T14D532F8662A3BE25F0694C3899D38B2FAF7DEE1A0D23924A17F13B1C3DB1B547D12115
- MD5 SHA1 SHA512 SSDEEP TLSH
CDM 2.04.16 WHQL Certified/amd64/ftbusui.dll
- IMPHASH ec8e1e626d14d6554d529dda8de7683e
- SHA256 085a23d070814f8b2c441eac4255663d8bc5571925b1952d1cadd1e89e9262ad
- MD5 14bad8e06578c1712ff51a5d10f89243
- SHA1 33bfd8b6c09c3048d107acb207d6a2047961d5a2
- SHA512 7c7a4755253b7a15721959576179c78a7a184201c0798351af7506618406e1799c3f2000bbc7b43e5bda894f83b0427c37e971294ba8b8f78a1a4996a6fa5ff0
- SSDEEP 3072:WeFtDhC1JbeZVXbcYeyg94wvXzsAI9ZpsdlJV/dlAkJLcF3:xF1wpYeVtwlRsdlP
- TLSH T1A4E3289672A210F6D4BBD27889D30A95EB72B019073513CF066482921F737E97E3E379
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a3:54:7e:1e:ba:65:10:e6:31:59:5d:93:d9:fb:b7:90:30:d1:8b:c8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
4
Entry point
15792
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\Development\CDM\FTBUSUI\x64\Release\FTBUSUI.pdb
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
kernel32
RtlCaptureContext
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
OutputDebugStringA
LocalFree
LoadLibraryA
LoadLibraryW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
__C_specific_handler
GetSystemDirectoryA
LocalAlloc
CloseHandle
DeviceIoControl
CreateFileA
FreeLibrary
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
GetLocaleInfoW
GetLocaleInfoA
MultiByteToWideChar
HeapSize
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
SetEnvironmentVariableA
ExitProcess
FlsGetValue
TlsAlloc
TlsFree
FlsFree
TlsSetValue
GetCurrentThread
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
InitializeCriticalSection
user32
SetCursor
SetWindowLongPtrA
LoadCursorA
CheckDlgButton
GetDlgItem
EnableWindow
CreateWindowExA
SendMessageA
IsDlgButtonChecked
GetWindowLongPtrA
wsprintfA
SetDlgItemTextW
shell32
ExtractIconA
DllMain
FTBUSUIPropPageProvider
Name
.text
Size
94KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
810B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=125, productName=VS2005 build 50727, version=50727,
count=66, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=108, id=1, productName=Unmarked objects,
count=29, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/amd64/ftcserco.dll
- IMPHASH 1d2578787b10160dd98bab9535ad4439
- SHA256 7d9a19a324a8b95d98ef405856a56d0c6942107e5dab9d7d03a27db08d7a5d62
- MD5 095eeb537074cebbc939755c45cc0b4d
- SHA1 6ea69f52fd83bb8e4ed28a3a0629c1f74c60ce0e
- SHA512 30ca182d70f211eb9b47846a8683381100b39afa1028773adef2a2f5553a154385c1e54d650ce194512141085b6b83c6e775fd964989780adaa2312d5dd9dede
- SSDEEP 768:UMxTU1kP9ck2XhSyzZMJAHj+zUaarw44/b/yiA3DDHjPvy1gO7XaZnzkLwb46r:jdak2XPNkA7Vrw/Lv4DjjHuaZzkgt
- TLSH T123335A5AA790107AD863C27C85D69A16FB73B00517B712CF023486BB9F33BE4963E325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f9:5f:5e:ff:67:cf:a5:e7:2d:d2:34:cf:a7:e8:09:da:ed:40:94:d4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
13280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\develo~1\cdm\coinst\ftcserco\objfre_wnet_amd64\amd64\ftcserco.pdb
setupapi
CM_Get_Parent
CM_Get_Sibling
CM_Get_Child
SetupCloseInfFile
SetupDiCreateDevRegKeyW
SetupOpenInfFileW
SetupDiGetSelectedDriverW
CM_Get_Device_IDW
SetupDiGetDriverInfoDetailW
SetupInstallFromInfSectionW
SetupDiGetActualSectionToInstallW
kernel32
GetSystemInfo
VirtualQuery
UnhandledExceptionFilter
SetThreadStackGuarantee
LocalAlloc
LocalFree
lstrlenW
GetLastError
WideCharToMultiByte
MultiByteToWideChar
FlsSetValue
GetCommandLineA
GetVersionExW
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwindEx
TerminateProcess
GetCurrentProcess
VirtualAlloc
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
LCMapStringW
WriteFile
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
Sleep
GetStringTypeW
LoadLibraryW
VirtualProtect
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
user32
wsprintfW
msports
ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClose
FTCSERCoInstaller
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
582B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=104, id=1, productName=Unmarked objects,
count=7, id=125, productName=VS2005 build 50727, version=50727,
count=72, id=109, productName=VS2005 build 50727, version=50727,
count=30, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=3, id=113, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/amd64/ftd2xx.lib
- SHA256 0cdadbc533243e82f75fd799f6a388c1e42a2a9b5097bee8a0f63146047739fd
- MD5 887417040483343eead96a40c349094e
- SHA1 dca5f6e452c579731e7a430fb1ddf7b8b70412b3
- SHA512 d5f2fd112a44eae444ead405eb9256490249624a8e5e8310adf03d454b59c250636adf4084353a4650f0035032d29f185b319b1ad3dfdd67da08a6667b2f6ca1
- SSDEEP 384:+VKL2SzQdYpFvkS2xYKNVim0gjCtLvpjxsxh90F/e2VxE6B3:+oL4dYpFvkS26Qim0gyLvpj2D+F/e2VN
- TLSH T1A0724B77C460CC0AC2FE613C4AF550E4996ED880258B60E7326D5AD2EBE9357FDC6328
- MD5 SHA1 SHA512 SSDEEP TLSH
CDM 2.04.16 WHQL Certified/amd64/ftd2xx64.dll
- IMPHASH e6040c7f896cf11cf0650445440fa580
- SHA256 58443c89ab3ee6d65353dcebc7b8527f428c40b9a93d0a4703c530cc95d57c41
- MD5 a3adc8788f4fa4b52907c86b202afffe
- SHA1 ac0e1300ca2f40941ba7e8134918551fd76a2408
- SHA512 e79f2ac87571053a67b00a21ce7b617e8b3d2ea4a2978f41ddc78cead1883efae9d17ee5166f8ad928236d71cfbf7aaf46ed18fd7a2dbaebb121fee7c072023e
- SSDEEP 6144:7gqCcXeXLHNwgU00bcG0CpAhGZXlHYV2WvrHILwgsH+gMRDydY4IlvAfV:a/o0A9XlHYV9vrHILwgsH+gX
- TLSH T117645C97B3A618F9D0BBD13CCDC3465AE6713814476167CB16A086913E33BF46A3E326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
dc:5c:c7:aa:10:d5:ae:58:5f:7a:98:30:ed:f4:ee:c9:aa:7b:a8:4a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
4
Entry point
53776
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\Development\CDM\d2xxdll\x64\Release\FTD2XX64.pdb
setupapi
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
CM_Get_Device_ID_ExA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiClassNameFromGuidExA
SetupDiGetClassDescriptionExA
CM_Locate_DevNode_ExA
CM_Reenumerate_DevNode_Ex
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsA
SetupDiClassGuidsFromNameExA
SetupDiCreateDeviceInfoListExA
SetupDiGetClassDevsExA
SetupDiOpenDeviceInfoA
SetupDiGetDeviceInfoListDetailA
SetupDiEnumDeviceInfo
kernel32
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
SetStdHandle
HeapSize
FlushFileBuffers
LoadLibraryA
FreeLibrary
SetConsoleCtrlHandler
HeapReAlloc
InitializeCriticalSection
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
LocalFree
FormatMessageA
WriteConsoleW
GetCurrentProcess
GetLastError
lstrlenA
lstrcpyA
DeviceIoControl
ReadFile
WriteFile
GetOverlappedResult
CancelIo
lstrcmpiA
lstrcpynA
CreateFileA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
GetLocaleInfoW
SetEndOfFile
CompareStringA
CompareStringW
CloseHandle
SetLastError
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
FlsGetValue
TlsAlloc
TlsFree
FlsFree
SetEnvironmentVariableA
TlsSetValue
GetCurrentThread
FlsAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
RtlUnwindEx
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
FatalAppExitA
RaiseException
RtlPcToFileHeader
GetStringTypeA
GetStringTypeW
RtlVirtualUnwind
RtlLookupFunctionEntry
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
user32
CharNextA
CharPrevA
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownExA
RegQueryValueExA
FT_Close
FT_ClrDtr
FT_ClrRts
FT_CreateDeviceInfoList
FT_CyclePort
FT_EE_Program
FT_EE_ProgramEx
FT_EE_Read
FT_EE_ReadEx
FT_EE_UARead
FT_EE_UASize
FT_EE_UAWrite
FT_EraseEE
FT_GetBitMode
FT_GetComPortNumber
FT_GetDeviceInfo
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetEventStatus
FT_GetLatencyTimer
FT_GetLibraryVersion
FT_GetModemStatus
FT_GetQueueStatus
FT_GetStatus
FT_IoCtl
FT_ListDevices
FT_Open
FT_OpenEx
FT_Purge
FT_Read
FT_ReadEE
FT_Reload
FT_Rescan
FT_ResetDevice
FT_ResetPort
FT_RestartInTask
FT_SetBaudRate
FT_SetBitMode
FT_SetBreakOff
FT_SetBreakOn
FT_SetChars
FT_SetDataCharacteristics
FT_SetDeadmanTimeout
FT_SetDivisor
FT_SetDtr
FT_SetEventNotification
FT_SetFlowControl
FT_SetLatencyTimer
FT_SetResetPipeRetryCount
FT_SetRts
FT_SetTimeouts
FT_SetUSBParameters
FT_SetWaitMask
FT_StopInTask
FT_W32_CancelIo
FT_W32_ClearCommBreak
FT_W32_ClearCommError
FT_W32_CloseHandle
FT_W32_CreateFile
FT_W32_EscapeCommFunction
FT_W32_GetCommMask
FT_W32_GetCommModemStatus
FT_W32_GetCommState
FT_W32_GetCommTimeouts
FT_W32_GetLastError
FT_W32_GetOverlappedResult
FT_W32_PurgeComm
FT_W32_ReadFile
FT_W32_SetCommBreak
FT_W32_SetCommMask
FT_W32_SetCommState
FT_W32_SetCommTimeouts
FT_W32_SetupComm
FT_W32_WaitCommEvent
FT_W32_WriteFile
FT_WaitOnMask
FT_Write
FT_WriteEE
Name
.text
Size
251KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=126, version=50327,
count=7, id=125, productName=VS2005 build 50727, version=50727,
count=106, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=126, id=1, productName=Unmarked objects,
count=55, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/amd64/ftdibus.sys
- IMPHASH d95dc4e1a6754635ec21c80d6db506e7
- SHA256 744014a791c07cf3b9387adecb94552d8b6ac523433f7063411198509155f3e9
- MD5 82d4bd620f7e27ea268ea0e2f701a7ae
- SHA1 65c4b5ef396660231db0fd315e7a1113306aeba0
- SHA512 ae837b558a5f908fa199100a6563f74b9018a5f3729274bd0a806ec819264e0a80548befc7d4b0533753f43ced626660b7792ece574c8b666d76ac87641b937e
- SSDEEP 1536:jfgVv+jLA1jnXZTOkgAqxfnKPcpjUyA4sJDcNSZ0JC3g:8Vv+jMVXtOOqlhCJDcSZ0JC
- TLSH T101636D5686F70589D8B6C97AC2D74537EFB1F8401B650FDF02A18A994F13BF06A39322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
45:f3:b5:bf:7a:66:f0:6e:92:2f:2c:d6:a8:4e:08:9b:6b:18:13:3f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
60040
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\develo~1\cdm\d2xx\d2xx\objfre_wnet_amd64\amd64\FTDIBUS.pdb
ntoskrnl.exe
IoAttachDeviceToDeviceStack
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoDeleteDevice
IoCreateDevice
KeSetEvent
KeInitializeEvent
RtlQueryRegistryValues
IofCallDriver
KeInitializeDpc
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeInitializeTimer
PoSetPowerState
RtlFreeUnicodeString
ExFreePool
ExAllocatePoolWithTag
IofCompleteRequest
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
RtlWriteRegistryValue
ExReleaseFastMutex
ExAcquireFastMutex
RtlInitUnicodeString
IoDetachDevice
ObfReferenceObject
ObfDereferenceObject
IoGetDeviceProperty
IoFreeWorkItem
PoRequestPowerIrp
IoCancelIrp
IoAllocateWorkItem
PoStartNextPowerIrp
PoCallDriver
IoQueueWorkItem
IoReleaseCancelSpinLock
ExEventObjectType
ObReferenceObjectByHandle
KeCancelTimer
KeSetTimer
IoAllocateMdl
MmUnmapLockedPages
IoBuildPartialMdl
IoFreeMdl
MmMapLockedPagesSpecifyCache
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
KeWaitForMultipleObjects
KeClearEvent
KeSetPriorityThread
RtlCompareUnicodeString
RtlUnicodeStringToInteger
ObReferenceObjectByPointer
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
IoGetDeviceObjectPointer
RtlAppendUnicodeStringToString
IoGetDeviceInterfaces
RtlCompareMemory
IoOpenDeviceRegistryKey
RtlUnicodeStringToAnsiString
ZwQueryValueKey
RtlFreeAnsiString
ZwEnumerateKey
ZwQueryKey
ZwOpenKey
ZwSetValueKey
IoInvalidateDeviceRelations
ZwEnumerateValueKey
swprintf
KeBugCheckEx
MmGetSystemRoutineAddress
PsGetVersion
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
USBD_GetUSBDIVersion
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
896B
Virtual Size
772B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
896B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
128B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=128, version=50727,
count=77, id=1, productName=Unmarked objects,
count=5, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=2, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=29, id=113, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/amd64/ftlang.dll
- IMPHASH 9f8a2ca96fd1e917d7daacd9bc386d49
- SHA256 0c21209f357de18ccdb12941e44eaed96e9e5f7a379d5d07ddd01e87f0af5048
- MD5 ef977a5a4ef8a59efbc2c621ba556941
- SHA1 f21a5938f20ed666777ffbd091439e9bd217c84a
- SHA512 a8c7216d24adc7f038820d6b362243e3d67cf7a23d783671c1986bc3951a57be877409096220b34a981698ef07810d7d7fb11188bda0e9039e82309e59915bdc
- SSDEEP 6144:3pN9srdRFAQEEJt71UJBJnYLGus/A6WcQbmgKEXywkFYG:YFEEJthUJBJnYLGus/A6iywQv
- TLSH T194440782B2F90468F8FBE7388DB346959A727C459B35D6CF066045A91D33BE0993C732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
4a:f4:cf:8c:8f:64:5e:a7:60:ed:e2:23:04:c4:17:56:45:6f:ba:fc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
4
Entry point
6176
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\Development\CDM\FTLang\x64\Release\FTLang.pdb
kernel32
LoadResource
FindResourceExW
GetUserDefaultLangID
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
RaiseException
RtlPcToFileHeader
GetProcAddress
GetModuleHandleA
ExitProcess
FlsGetValue
TlsAlloc
TlsFree
FlsFree
SetLastError
TlsSetValue
GetCurrentThread
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
GetDateFormatA
GetTimeFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlVirtualUnwind
RtlLookupFunctionEntry
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
??0CFTLang@@QEAA@XZ
??4CFTLang@@QEAAAEAV0@AEBV0@@Z
FTGetText
nFTLang
Name
.text
Size
164KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=125, productName=VS2005 build 50727, version=50727,
count=68, id=109, productName=VS2005 build 50727, version=50727,
count=3, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=82, id=1, productName=Unmarked objects,
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/amd64/ftser2k.sys
- IMPHASH 8a223f537f10770ae000679b8a5a623c
- SHA256 77b670ca00ac56c59307f154608462197ddf9a367701a5c687b4a93afb759554
- MD5 1fa21ff2d7b50b528d8b73db34ad06bc
- SHA1 add35f6f5fd9218ea9e1a46108a141dbf54801f2
- SHA512 b6b8214f6a0e5e1154fdccc02038baed19c2119c0f52f36c9b55d4a033a53a36c41040882bcc50cd984d38491c98a21dcfc9c6d4fd0780fc0deec05076d1ebd6
- SSDEEP 1536:e694hiX18tiEQtRcbR/OigCHBQVlZUpR8vFMQqM1ZuPWJg:j94I63FR/OJCaVlZUIdR
- TLSH T17683F58293E901A5F8B79A34C9F59627EB72B445673993CF0290866E1E33BD49D34333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
68:6d:31:d8:39:43:5e:1c:b5:56:ab:c1:47:0a:19:01:1e:a0:af:63
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
83340
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\develo~1\cdm\devices\ftser2k\objfre_wnet_amd64\amd64\ftser2k.pdb
ntoskrnl.exe
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
KeSetEvent
DbgBreakPoint
ExFreePoolWithTag
KeRemoveQueueDpc
MmUnmapIoSpace
KeWaitForSingleObject
PoSetPowerState
IoWMIRegistrationControl
KeDelayExecutionThread
IoDetachDevice
IoDeleteDevice
IoCancelIrp
KeInitializeTimer
KeInitializeDpc
MmLockPagableDataSection
ExAllocatePoolWithTag
MmUnlockPagableImageSection
ExAllocatePoolWithQuotaTag
IofCallDriver
IoOpenDeviceRegistryKey
ZwClose
ExAcquireFastMutex
ExReleaseFastMutex
MmQuerySystemSize
MmLockPagableSectionByHandle
KeWaitForMultipleObjects
KeInsertQueueDpc
KeSetTimer
KeCancelTimer
PoCallDriver
KeReleaseSpinLock
IoWriteErrorLogEntry
KeAcquireSpinLockAtDpcLevel
KeReleaseSpinLockFromDpcLevel
IoAttachDeviceToDeviceStack
IoGetConfigurationInformation
IoCreateSymbolicLink
RtlWriteRegistryValue
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoDeleteSymbolicLink
RtlDeleteRegistryValue
ObfDereferenceObject
RtlAppendUnicodeToString
RtlInitUnicodeString
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
IoCreateDevice
KeInitializeEvent
RtlQueryRegistryValues
ZwQueryValueKey
PoStartNextPowerIrp
PoRequestPowerIrp
KeClearEvent
IoAllocateIrp
IoFreeIrp
PsTerminateSystemThread
PsCreateSystemThread
ObReferenceObjectByHandle
KeSetPriorityThread
KeBugCheckEx
KeAcquireSpinLockRaiseToDpc
IoAllocateErrorLogEntry
IofCompleteRequest
__C_specific_handler
wmilib.sys
WmiSystemControl
WmiCompleteRequest
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
652B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGESRP0
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
PAGESER
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=71, id=1, productName=Unmarked objects,
count=5, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=2, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=32, id=113, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/amd64/ftserui2.dll
- IMPHASH 82f4e25bd5fb3fe90869c2a47af6bee4
- SHA256 7519b86d35a40266b5878634e2a24e79ec5f8ba9c30d1e19f5bcda70de92a4cc
- MD5 34a7d002607651d273cab6b4a16966bd
- SHA1 985e112f6b83917750b677c100c63a17e0c04478
- SHA512 4eaf4abbeb8a529645d1fff1009eb1e4b05fd83024049e05e2d867252d999d5bf5fd5fcf60be0d91fad8cf609824148b4fe2f5bc77b614cf44929d6679453640
- SSDEEP 768:iEPophAm/lAUTIKjSoj9PHrTILZU80qkyUaZZfuqzy1ZYbr6FsKTLwb466:Ti6SRJ9mHkyUNqdbOuUgk
- TLSH T11E332A4197E44159E0BAEA3986FA8622DE717C106F3597CF1120C69E1F32FD2DA3931B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
5e:e0:c6:30:2c:06:67:c9:6f:63:99:b8:bb:46:ea:ac:46:97:d1:39
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
23268
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\develo~1\cdm\pp\ftserui2\objfre_wnet_amd64\amd64\ftserui2.pdb
msvcrt
__C_specific_handler
memset
memcpy
wcscspn
wcsspn
_itoa
_wcsupr
wcsstr
wcschr
setupapi
CM_Get_Next_Res_Des
SetupDiGetDeviceInstanceIdW
CM_Get_Res_Des_Data
SetupInstallFromInfSectionW
SetupDiGetDriverInfoDetailW
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiGetDeviceInfoListDetailW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetActualSectionToInstallW
SetupDiRemoveDevice
CM_Free_Res_Des_Handle
SetupOpenInfFileW
SetupDiCreateDevRegKeyW
CM_Free_Log_Conf_Handle
CM_Get_DevNode_Status
CM_Get_First_Log_Conf
SetupCloseInfFile
SetupDiGetSelectedDriverW
SetupDiInstallDevice
user32
CharNextW
MessageBoxW
CheckRadioButton
wvsprintfW
GetParent
GetWindowRect
EndDialog
GetFocus
GetDC
GetDlgItem
WinHelpW
SetWindowTextW
wsprintfW
EnableWindow
SendMessageW
GetWindowLongPtrW
SetDlgItemTextW
SetWindowLongPtrW
LoadStringW
MoveWindow
SendDlgItemMessageW
IsDlgButtonChecked
ShowWindow
CheckDlgButton
GetWindowTextLengthW
GetDlgCtrlID
DialogBoxParamW
GetWindowTextW
CharPrevW
SendMessageTimeoutW
advapi32
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
kernel32
CreateActCtxW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
MultiByteToWideChar
FreeLibrary
DisableThreadLibraryCalls
lstrcmpiW
QueryDosDeviceW
DefineDosDeviceW
CloseHandle
CreateFileW
QueryActCtxW
LocalAlloc
GetModuleFileNameW
WriteProfileStringW
lstrcatW
GetProcAddress
GetLocaleInfoW
SetLastError
LoadLibraryW
GetLastError
lstrcpyW
LocalFree
GetUserDefaultLCID
FindActCtxSectionStringW
lstrcmpW
ActivateActCtx
GetProfileStringW
GetModuleHandleExW
lstrlenW
OutputDebugStringA
DeactivateActCtx
gdi32
GetTextExtentPoint32W
msports
ComDBOpen
ComDBClose
ComDBReleasePort
ComDBClaimPort
ComDBClaimNextFreePort
ComDBGetCurrentPortUsage
LibMain
ParallelPortPropPageProvider
PortsClassInstaller
SerialPortPropPageProvider
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
226B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=2, id=125, productName=VS2005 build 50727, version=50727,
count=51, id=109, productName=VS2005 build 50727, version=50727,
count=15, id=110, productName=VS2005 build 50727, version=50727,
count=167, id=1, productName=Unmarked objects,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=5, id=113, version=50727,
count=1, id=126, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/ftd2xx.h
- SHA256 c1e81b4b9be73bb1aaf7bbf2d086377c45ea590024417ba0ee60d0f6bb8d46c0
- MD5 3b584f7365b32f928c1a8924d0e1b402
- SHA1 486f246b9477619ef773efa3cf03326b22f37f4a
- SHA512 82824da9867c9aeebc0cea60c3a0170801ab9c35281aee2f0c9d45b78c0a27493e127f445608ce46cd27fe11580a4470d18940854cb9941dba10b359e1c40b40
- SSDEEP 384:OqRATWVrPGM3h3qo8pUB+AYXAYGywm7iHcflDGo+FYeZEJ8t2YzMzYVoEMt/ws2E:EUMAYXAYGPkKcfl4Y/o2PJEhI7YE
- TLSH T11AB25466C20A069CACB31B453A7E44F1ABDEA6131649D3A5376DCE7E3B341417027BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
CDM 2.04.16 WHQL Certified/ftdibus.cat
- SHA256 9db85ad31c44f4e07651205348262f69f8db07d6b4be3c0b505411c211d807db
- MD5 469224422e9d93a81195a5285f96332b
- SHA1 f9d1f4910991abe4918ad2abf2dab8068efdfb3c
- SHA512 b91b0c279188ddb6966eeb5ca1b01b9d44202a117d2672a982ee5f7d6cc0fe131fb373736dcc13df749fb1f632878110403c8373e5de025a96a726f7b4d40735
- SSDEEP 192:EU6d8xdyjrOtCPcnyZEB2I2y2FN5GE9+uqhjXHUz1TrJj3huipIk0iol9GWM9:fTA8jXHUXluqF0iolYv9
- TLSH T18A32B5AA55ED8297F95BCCB257E5E49FBC35A7C7AC10483C219BB36408823C1B31D81E
- MD5 SHA1 SHA512 SSDEEP TLSH
CDM 2.04.16 WHQL Certified/ftdibus.inf
- SHA256 147a593046e11ce839599c881d47b55b5d66d52a7a8788de2fb9c062caf01e3f
- MD5 9cb69d51d7ca54c49ed02c20464fe832
- SHA1 2dc0aa065fa83047d7ecd51c7000c1620d79a4c5
- SHA512 c343616bdbf25ce6f34980e2cf485d03ac5de149ebfe6772260b6098cc802b7b5dadce8fdad64dd26bf3b4d9eac3f5aa906b5192a2c703fdc7ed02feac04aa59
- TLSH T16E81AD4E7E4D9970F56B9F04F68E9078F1CA72A117A415DA3AC86B85CF8AD343215433
- MD5 SHA1 SHA512 TLSH
CDM 2.04.16 WHQL Certified/ftdiport.cat
- SHA256 b04a0e08791e61e005e9a55e13e6f0be5b417ce3b9e4da6c667f4d3cc0787bbd
- MD5 248d025b987ba9f8dd8f6088d55ba34f
- SHA1 745d520df638303276f55060bd180f0c477d1727
- SHA512 015da3a5ea99a4a0d0d9ee374ebc4915dc3911712af429bd0ef7def8ca1a03fa1d0758ce790c2c0ed612fee12195ac9a6bdfd25c34ebb273b9cc8ab9b8ac7d59
- SSDEEP 192:MDK710Z8wud8AQ0DDyZEB2I2y2FN5GE9+uqhjXHUz1TrJj3huipIk0iLfV6Z:LQOjXHUXluqF0iLkZ
- TLSH T19822E6AA45AD8183F85BCCB157F4E5ABBC35A7C79C10483D209BF36408923C0B36C92E
- MD5 SHA1 SHA512 SSDEEP TLSH
CDM 2.04.16 WHQL Certified/ftdiport.inf
- SHA256 93f291bcb48855bcf32d4e7b40bff7584067b5aa522350e38a644b7cf3a045c3
- MD5 273405d922f10b578b6f882795524b15
- SHA1 51a4d522dd31538335ef5736f0e7f588c70bcb12
- SHA512 ae0fff489cc95da14d930f7fab6f9de415bb159aa3ca2e72163c6a61c122dd71348cfe825fd5c56e789e7802bba1215d5826b2f49fae1ee07c78ea2d81ba9cb1
- SSDEEP 96:JCRUlfIr5FMGkzgBz4Bt/PJeZgTdZ+PbIT:CUlfI9FrkGz4B1PJeZgTdUPbIT
- TLSH T142A1A90A4E4125F092EFEB4496A769B4F389E14910D4147F31EEAB89CBC8D1DE32CF65
- MD5 SHA1 SHA512 SSDEEP TLSH
CDM 2.04.16 WHQL Certified/i386/ftbusui.dll
- IMPHASH 754f55d17ed3a44c5b8e0b48a54be42b
- SHA256 530b8a556b9cb94f9834084581fff0720b8b89dfa027d3b5191f2c4a203b963d
- MD5 9427dfe0d3662724ef9857814d9d3d31
- SHA1 1f08e0487b6a091272ea9c9fe39a74a0af889ad2
- SHA512 ffe1b2f661c781ab60617c45f38719925313bb4f627a0a3a75cf6cadb0bcd12874b09f0b21bb010fd7ca02cb6850b75db5af50cd4e4b1293a084976b0c0e1a8d
- SSDEEP 1536:NnzizqweVcB3TBDwJvp7Cv2aEk8LiNG4cqnXLWkcda+Xt5VcN0Ig9:d+9eGyh7pLiXXe9t5KO
- TLSH T117C37D0072C9C0F2E596027F8046CB264B7B38A55E6A6DCF6FC255D94F393E39A3A345
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
fd:87:4c:4d:a5:a7:b7:b6:56:02:7f:7a:d0:1e:89:97:14:d2:4d:8c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
4
Entry point
12299
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Development\CDM\FTBUSUI\release\FTBUSUI.pdb
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
kernel32
TlsAlloc
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
OutputDebugStringA
LocalFree
LoadLibraryA
LoadLibraryW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
GetSystemDirectoryA
LocalAlloc
CloseHandle
DeviceIoControl
CreateFileA
FreeLibrary
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
GetLocaleInfoA
MultiByteToWideChar
HeapSize
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
ExitProcess
TlsGetValue
SetEnvironmentVariableA
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSection
GetCPInfo
user32
SetCursor
SetWindowLongA
LoadCursorA
CheckDlgButton
GetDlgItem
EnableWindow
CreateWindowExA
SendMessageA
IsDlgButtonChecked
GetWindowLongA
wsprintfA
SetDlgItemTextW
shell32
ExtractIconA
DllMain
FTBUSUIPropPageProvider
Name
.text
Size
76KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=71, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=106, id=1, productName=Unmarked objects,
count=29, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/i386/ftcserco.dll
- IMPHASH 10554305e6d12b26d4f446172e464fd7
- SHA256 29a575c415e90090d9e921d42d5294faa8cda447d4eed59ae63bd74fe3b6df44
- MD5 d5539f183f59bf8a81889b5b65111ade
- SHA1 77c3ccde4aac022516ee47d1ebb57e7666b48cf8
- SHA512 0d112763ba1fa51631d2e9e4dd28021657eaf73b207fc330c132c21b936ae2fe4d146c7d89a93584209db9bc735b9a7458b4838b24ec77a4591b5d0870906b50
- SSDEEP 768:WS705lwfTDgW3ofADKWG2xLly5ClaEvvOnCoT0tU1gTjuLwb46ZK:zwXwffIoDwaly7E1rtU1eug/K
- TLSH T1FE336C617A81943FDC8A1BBC41DDE221667EA5900F7640C737AC46EAEA713D06B3931F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
05:33:bd:60:54:83:1e:cb:de:e5:e9:a4:48:f0:71:6f:0c:a7:df:f6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
12201
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\develo~1\cdm\coinst\ftcserco\objfre_wnet_x86\i386\ftcserco.pdb
setupapi
CM_Get_Device_IDW
CM_Get_Parent
CM_Get_Child
CM_Get_Sibling
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
SetupDiGetActualSectionToInstallW
SetupInstallFromInfSectionW
SetupCloseInfFile
SetupDiCreateDevRegKeyW
SetupOpenInfFileW
kernel32
VirtualQuery
UnhandledExceptionFilter
GetSystemInfo
GetLastError
lstrlenW
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
VirtualProtect
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
LCMapStringA
LCMapStringW
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
Sleep
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
advapi32
RegQueryValueExW
RegSetValueExW
RegOpenKeyW
RegCloseKey
user32
wsprintfW
msports
ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClose
FTCSERCoInstaller
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=106, id=1, productName=Unmarked objects,
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=30, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=78, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/i386/ftd2xx.dll
- IMPHASH 5b994cb91830cc1d27c5b0f5338574f8
- SHA256 e68dad2bab57aac8a11d4b0dc73d8a6ee478652a98d7e4bc194a67343db50d78
- MD5 00a8f4e6891008ae34a16ebb560ba08d
- SHA1 82fcd454ca3850054daa03fd2ae9d3420b4e8340
- SHA512 d0fe677480b715cc1989dad5249496d6aa4e45472f4c297597a4a0aae1967ffc9a3196bda7051c7f198bf1a9109f4c8b28f36ee6ed92662e05c6d009f6e1fd4c
- SSDEEP 3072:AWfCnbLVajgMm5eRYzkRPJLM/bqLi14xJdxXV30W4t2Z/fJ2:JfCnbWgMm4RFJLM/bGxJf6iK
- TLSH T16114AD013AD2C0B6D467017A8053C7351BBEBD57AF66A9CBAFE01D954F302C6AB36391
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
65:2f:c0:ba:ba:e5:f4:bd:b2:45:20:78:3a:fa:2d:87:59:ee:68:31
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
4
Entry point
43783
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Development\CDM\d2xxdll\release\FTD2XX.pdb
setupapi
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
CM_Get_Device_ID_ExA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiClassNameFromGuidExA
SetupDiGetClassDescriptionExA
CM_Locate_DevNode_ExA
CM_Reenumerate_DevNode_Ex
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsA
SetupDiClassGuidsFromNameExA
SetupDiCreateDeviceInfoListExA
SetupDiGetClassDevsExA
SetupDiOpenDeviceInfoA
SetupDiGetDeviceInfoListDetailA
SetupDiEnumDeviceInfo
kernel32
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
SetStdHandle
HeapSize
FlushFileBuffers
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
InitializeCriticalSection
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
LocalFree
FormatMessageA
WriteConsoleW
GetCurrentProcess
GetLastError
lstrlenA
lstrcpyA
DeviceIoControl
ReadFile
WriteFile
GetOverlappedResult
CancelIo
lstrcmpiA
lstrcpynA
CreateFileA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
SetEndOfFile
CompareStringA
CompareStringW
CloseHandle
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
SetEnvironmentVariableA
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
FatalAppExitA
RaiseException
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
RtlUnwind
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleFileNameA
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
user32
CharNextA
CharPrevA
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownExA
RegQueryValueExA
FT_Close
FT_ClrDtr
FT_ClrRts
FT_CreateDeviceInfoList
FT_CyclePort
FT_EE_Program
FT_EE_ProgramEx
FT_EE_Read
FT_EE_ReadEx
FT_EE_UARead
FT_EE_UASize
FT_EE_UAWrite
FT_EraseEE
FT_GetBitMode
FT_GetComPortNumber
FT_GetDeviceInfo
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetEventStatus
FT_GetLatencyTimer
FT_GetLibraryVersion
FT_GetModemStatus
FT_GetQueueStatus
FT_GetStatus
FT_IoCtl
FT_ListDevices
FT_Open
FT_OpenEx
FT_Purge
FT_Read
FT_ReadEE
FT_Reload
FT_Rescan
FT_ResetDevice
FT_ResetPort
FT_RestartInTask
FT_SetBaudRate
FT_SetBitMode
FT_SetBreakOff
FT_SetBreakOn
FT_SetChars
FT_SetDataCharacteristics
FT_SetDeadmanTimeout
FT_SetDivisor
FT_SetDtr
FT_SetEventNotification
FT_SetFlowControl
FT_SetLatencyTimer
FT_SetResetPipeRetryCount
FT_SetRts
FT_SetTimeouts
FT_SetUSBParameters
FT_SetWaitMask
FT_StopInTask
FT_W32_CancelIo
FT_W32_ClearCommBreak
FT_W32_ClearCommError
FT_W32_CloseHandle
FT_W32_CreateFile
FT_W32_EscapeCommFunction
FT_W32_GetCommMask
FT_W32_GetCommModemStatus
FT_W32_GetCommState
FT_W32_GetCommTimeouts
FT_W32_GetLastError
FT_W32_GetOverlappedResult
FT_W32_PurgeComm
FT_W32_ReadFile
FT_W32_SetCommBreak
FT_W32_SetCommMask
FT_W32_SetCommState
FT_W32_SetCommTimeouts
FT_W32_SetupComm
FT_W32_WaitCommEvent
FT_W32_WriteFile
FT_WaitOnMask
FT_Write
FT_WriteEE
Name
.text
Size
152KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=126, version=50327,
count=19, id=125, productName=VS2005 build 50727, version=50727,
count=112, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=123, id=1, productName=Unmarked objects,
count=55, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/i386/ftd2xx.lib
- SHA256 d46d12b7ca7799202575e89fac31d07d735a0a7f1750daffbb42011d42337af4
- MD5 0477573b89bad0dd5d207b4229f2eaeb
- SHA1 ae59f2d1c83f00d954f48a83193105711c791861
- SHA512 10bea398777dc468ae28144b66e33393665dca115ed7a7970ea678c90c3981a9fcc5a29be30f352aff825a11f1a34578b7c70cf135051c72e42e3d64bcbd04ed
- SSDEEP 384:V+I6eDqEP41C1plVjZ/C/nkeJeYKNo98jnlVFpJj+pl4fFFaripxOy6PpxsyzCUu:V+FEP4qTG/bTN98jnh+T4I7y6PptFBg
- TLSH T15B822667956CDC0AD6FC503AAEE800E91DACF8C5088E146771BD05E2BBE83577DC6389
- MD5 SHA1 SHA512 SSDEEP TLSH
CDM 2.04.16 WHQL Certified/i386/ftdibus.sys
- IMPHASH 574a328b8103a89834beb314099eb163
- SHA256 ed490a72561507e7c6cac8c218b62ef4cec1eba9d4728fc12ef22fd6695a380e
- MD5 7c17235845d5ae3fb33ead47b5881521
- SHA1 a6dd404d40a6d98c73a01c45a5085134041094b2
- SHA512 aa39f9e29c1d0ba25c38788446cf943d4ae1f172bdbf5d1306da7e9d5e7f017930994727fc9f49202be5a70f1be1f89f34eaa5f3d0187b48829ab2f73960351e
- SSDEEP 768:B9+u4YoSZ1WlHUwtRLok8Ik3Q2bvMDn4L11qfIEpUGPT4CJZYfD35zjwLwb46:Ld4tSZ6UwoTA2rCn4LBmH77HU5zjwg
- TLSH T1D5436C5199449533DCDA55B0615FF272A83FDAF0432296E793040AF6A8ACBD23E7039B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d1:8c:bb:6c:63:84:dd:f3:d4:0f:fe:1f:1b:bf:0b:f3:25:ac:c0:52
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
46725
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\develo~1\cdm\d2xx\d2xx\objfre_wnet_x86\i386\FTDIBUS.pdb
ntoskrnl.exe
memcpy
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
ExFreePool
ExAllocatePoolWithTag
IoCreateDevice
KeSetEvent
InterlockedDecrement
KeInitializeSpinLock
InterlockedIncrement
RtlWriteRegistryValue
RtlQueryRegistryValues
memset
KeInitializeDpc
KeInitializeTimer
IoAttachDeviceToDeviceStack
PoSetPowerState
IoDeleteDevice
IofCompleteRequest
RtlInitUnicodeString
IoGetDeviceProperty
ObfReferenceObject
RtlFreeUnicodeString
IoRegisterDeviceInterface
IoDetachDevice
ObfDereferenceObject
PoStartNextPowerIrp
IoFreeWorkItem
PoCallDriver
IoReleaseCancelSpinLock
PoRequestPowerIrp
InterlockedExchange
IoSetDeviceInterfaceState
IoQueueWorkItem
IoAllocateWorkItem
ObReferenceObjectByHandle
ExEventObjectType
KeCancelTimer
IoFreeMdl
IoBuildPartialMdl
MmUnmapLockedPages
KeSetTimer
IoAllocateMdl
MmMapLockedPagesSpecifyCache
PsTerminateSystemThread
KeClearEvent
KeWaitForMultipleObjects
KeSetPriorityThread
KeGetCurrentThread
ZwClose
PsCreateSystemThread
RtlCompareUnicodeString
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
IoOpenDeviceRegistryKey
ObReferenceObjectByPointer
IoGetDeviceObjectPointer
RtlCompareMemory
IoGetDeviceInterfaces
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
ZwOpenKey
ZwEnumerateKey
ZwQueryKey
ZwSetValueKey
IoInvalidateDeviceRelations
ZwEnumerateValueKey
swprintf
IoCancelIrp
KeTickCount
KeBugCheckEx
KeInitializeEvent
MmGetSystemRoutineAddress
PsGetVersion
hal
KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
usbd.sys
USBD_ParseConfigurationDescriptorEx
USBD_GetUSBDIVersion
USBD_CreateConfigurationRequestEx
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
511B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
896B
Virtual Size
799B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
768B
Virtual Size
678B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
896B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=86, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=33, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/i386/ftlang.dll
- IMPHASH 0bb2ba52fa6be4b939ef9c688cbbbb45
- SHA256 a227f19705ca331c727c787746cb2a85527dc05c74e2b84bd1209fbb45e593a0
- MD5 7baecfeaed505c6dfcd9ae2731fec83f
- SHA1 c9b6bcdf19999f59f957e2ddbd9b4b8ce118e393
- SHA512 8b5b4b01f17db6a6c8cf70ac786b74d13ad33cab27c9f5ef42829052059ed6088ea504dd0e360f9c984b4f4ad78a44dcb1d4f84f86066f49804a30761e31f3e2
- SSDEEP 3072:/jQaUqEKLiJfOCzStIptxJJ6sXOkpql81f:rNEBOiZ9
- TLSH T15904054173F98135F5F76F79997A82644E7BBC92AE7AD80E5B84049D0930A68CE34333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
af:59:a8:66:16:21:4d:54:3d:99:ad:7a:32:1a:3e:f0:32:1a:56:23
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
4
Entry point
5681
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Development\CDM\FTLang\release\FTLang.pdb
kernel32
LoadResource
FindResourceExW
GetUserDefaultLangID
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
??0CFTLang@@QAE@XZ
??4CFTLang@@QAEAAV0@ABV0@@Z
FTGetText
nFTLang
Name
.text
Size
92KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
56KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=73, id=109, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=79, id=1, productName=Unmarked objects,
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/i386/ftser2k.sys
- IMPHASH 00a257f184adaab354298cfd8c3c2ce6
- SHA256 8e9e314efdddb511aae612b5494c09e6a5ea2559b4682c7413aee02dfbde3161
- MD5 23220a4709cc5785f9633ba71416145c
- SHA1 cf86f7bf5ab5edd2ab147975e4b3c0c79a86e0dc
- SHA512 68849d9ec6705347e2627fa6a5b64707f6bf030f1b57111970fb961a63e0a79f1434c59a33554d12943e70b91325a6be1eee02bad711d3c5e4466ee69521bbf0
- SSDEEP 1536:1+NRSBEZsYxZomK+5fQjQA/vvWlNad47PnaRg:E5xZomK+YXYaSP
- TLSH T1326308512AE04272E4F37AB0643D7A318A2FB5D15B3AD2DF124046F96DA17D0FE2136B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d1:b9:1b:9e:7e:3d:a9:bb:cb:fa:6e:df:fd:cd:3f:46:a2:c3:10:74
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
70610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\develo~1\cdm\devices\ftser2k\objfre_wnet_x86\i386\ftser2k.pdb
ntoskrnl.exe
KeWaitForSingleObject
IoWMIRegistrationControl
IoDeleteDevice
IoDetachDevice
KeDelayExecutionThread
KeInitializeDpc
KeInitializeTimer
ExAllocatePoolWithTag
DbgBreakPoint
memmove
memset
IofCallDriver
ExAllocatePoolWithQuotaTag
ZwClose
IoOpenDeviceRegistryKey
KeWaitForMultipleObjects
MmLockPagableSectionByHandle
MmQuerySystemSize
KeQuerySystemTime
KeInsertQueueDpc
KeSetTimer
PoCallDriver
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
memcpy
KeCancelTimer
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
PoSetPowerState
RtlDeleteRegistryValue
IoDeleteSymbolicLink
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
RtlWriteRegistryValue
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
ObfDereferenceObject
IoCreateDevice
RtlIntegerToUnicodeString
RtlInitUnicodeString
IoAttachDeviceToDeviceStack
IoGetConfigurationInformation
RtlQueryRegistryValues
ZwQueryValueKey
PoRequestPowerIrp
PoStartNextPowerIrp
KeClearEvent
IoFreeIrp
IoAllocateIrp
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
ObReferenceObjectByHandle
PsCreateSystemThread
KeTickCount
KeBugCheckEx
KeRemoveQueueDpc
MmUnmapIoSpace
MmLockPagableDataSection
ExFreePoolWithTag
MmUnlockPagableImageSection
IoCancelIrp
_allmul
KeSetEvent
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
KeInitializeEvent
IofCompleteRequest
RtlUnwind
hal
KeGetCurrentIrql
KfAcquireSpinLock
KeRaiseIrqlToDpcLevel
KfLowerIrql
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex
READ_PORT_UCHAR
wmilib.sys
WmiSystemControl
WmiCompleteRequest
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
628B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGESRP0
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
PAGESER
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=125, productName=VS2005 build 50727, version=50727,
count=82, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=36, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
CDM 2.04.16 WHQL Certified/i386/ftserui2.dll
- IMPHASH cb063f355e983a6cb0e40aa086b59c2a
- SHA256 2ae839886e5f3333db2d64296f524c6597b17ad682e9afbf032c0a64966efcfc
- MD5 1b1d0ff44a80315ba86b090b8316a89a
- SHA1 f13cbe25c8d0238e15c224c72bf7e3d7767afe79
- SHA512 503f9b1d6132e9efcbea5c22c53284a502172d07220d0081ead6771221a87c74dcc19b395b47b255a9544a1340cb76f6ce70c39bc25f5ef8f20c4b62996eec77
- SSDEEP 768:RaNnU/h3mWyKK6nVMpolKMUS0yASApWHC6Jr6FsK10Lwb46S:unUpXNMobF0bLOJOuM0g8
- TLSH T1F933170263919131E8B11A3028BE62206E7ABD757F34C48FF52053DEAD70BC2AD7436B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d0:ae:b2:db:1c:06:99:50:91:28:4e:f7:f7:05:d8:04:bb:23:d9:0a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Chains
Feb 17, 2009
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB
Serial Number
52:5d:e6:d3:76:a7:e4:34:a2:93:a1:86:49:6f:e7:be
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2007 - Sep 29, 2010
Minor OS version
0
Major OS version
6
Entry point
23014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\develo~1\cdm\pp\ftserui2\objfre_wnet_x86\i386\ftserui2.pdb
msvcrt
wcscspn
wcsspn
_itoa
_wcsupr
memcpy
wcsstr
wcschr
memset
setupapi
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiGetDeviceInfoListDetailW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupInstallFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupCloseInfFile
SetupDiCreateDevRegKeyW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
CM_Free_Log_Conf_Handle
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data
CM_Get_Next_Res_Des
CM_Get_First_Log_Conf
SetupDiInstallDevice
CM_Get_DevNode_Status
SetupDiRemoveDevice
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
user32
SendMessageW
LoadStringW
GetWindowRect
WinHelpW
MoveWindow
GetDlgItem
SetDlgItemTextW
SendDlgItemMessageW
GetParent
EndDialog
GetWindowLongW
EnableWindow
SetWindowTextW
wsprintfW
SetWindowLongW
GetFocus
GetDlgCtrlID
CheckDlgButton
GetWindowTextW
GetWindowTextLengthW
IsDlgButtonChecked
DialogBoxParamW
ShowWindow
CharPrevW
MessageBoxW
wvsprintfW
SendMessageTimeoutW
CharNextW
CheckRadioButton
GetDC
advapi32
RegCloseKey
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
kernel32
GetProfileStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
FreeLibrary
MultiByteToWideChar
DisableThreadLibraryCalls
lstrcmpiW
QueryDosDeviceW
CreateFileW
CloseHandle
DefineDosDeviceW
OutputDebugStringA
LoadLibraryA
GetLastError
lstrcatW
GetModuleFileNameW
WriteProfileStringW
lstrcmpW
lstrlenW
GetUserDefaultLCID
GetLocaleInfoW
lstrcpyW
LocalFree
LocalAlloc
SetLastError
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetModuleHandleA
gdi32
GetTextExtentPoint32W
msports
ComDBReleasePort
ComDBClose
ComDBOpen
ComDBClaimNextFreePort
ComDBGetCurrentPortUsage
ComDBClaimPort
LibMain
ParallelPortPropPageProvider
PortsClassInstaller
SerialPortPropPageProvider
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=8, id=125, productName=VS2005 build 50727, version=50727,
count=13, id=110, productName=VS2005 build 50727, version=50727,
count=149, id=1, productName=Unmarked objects,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=60, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=126, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,