00a7c7b88877bf59dbaa70de734fcd3f287f1eb92caff4571a4c8e67a5dc0aca

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2015-Jan-12 12:06:47
Detected languages English - United States
CompanyName Thesycon GmbH
FileDescription DPC Latency Checker
FileVersion 1.4.0.0
InternalName dpclat.exe
LegalCopyright © 2006-2015 Thesycon GmbH
OriginalFilename dpclat.exe
ProductName DPC Latency Checker
ProductVersion 1.4.0.0
BuildType release
Platform Windows x86

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8.0
MSVC++ v.8 (procedure 1 recognized - h)
Suspicious Strings found in the binary may indicate undesirable behavior: Contains another PE executable:
  • This program cannot be run in DOS mode.
 Contains domain names:
  • 2010-aia.verisign.com
  • 2010-crl.verisign.com
  • aia.verisign.com
  • aia.ws.symantec.com
  • crl.microsoft.com
  • crl.thawte.com
  • crl.verisign.com
  • crl.ws.symantec.com
  • csc3-2010-aia.verisign.com
  • csc3-2010-crl.verisign.com
  • http://crl.microsoft.com
  • http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
  • http://crl.thawte.com
  • http://crl.thawte.com/ThawteTimestampingCA.crl0
  • http://crl.verisign.com
  • http://crl.verisign.com/pca3-g5.crl04
  • http://csc3-2010-aia.verisign.com
  • http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
  • http://csc3-2010-crl.verisign.com
  • http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
  • http://logo.verisign.com
  • http://logo.verisign.com/vslogo.gif04
  • http://ocsp.thawte.com0
  • http://ocsp.verisign.com0
  • http://ts-aia.ws.symantec.com
  • http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
  • http://ts-crl.ws.symantec.com
  • http://ts-crl.ws.symantec.com/tss-ca-g2.crl0
  • http://ts-ocsp.ws.symantec.com07
  • http://www.thesycon.de
  • http://www.thesycon.de/
  • https://www.verisign.com
  • https://www.verisign.com/cps0
  • https://www.verisign.com/rpa
  • https://www.verisign.com/rpa0
  • logo.verisign.com
  • microsoft.com
  • symantec.com
  • thawte.com
  • thesycon.de
  • ts-aia.ws.symantec.com
  • ts-crl.ws.symantec.com
  • verisign.com
  • ws.symantec.com
  • www.thesycon.de
  • www.verisign.com
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA1
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • LoadLibraryExA
  • GetProcAddress
 Functions which can be used for anti-debugging purposes:
  • FindWindowA
 Code injection capabilities (PowerLoader):
  • FindWindowA
  • GetWindowLongA
 Can access the registry:
  • RegOpenKeyExA
  • RegEnumKeyExA
  • RegQueryInfoKeyA
  • RegCloseKey
  • RegQueryValueExA
  • RegDeleteKeyA
  • RegDeleteValueA
  • RegSetValueExA
  • RegCreateKeyExA
 Possibly launches other programs:
  • ShellExecuteA
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
 Functions related to the privilege level:
  • CheckTokenMembership
 Interacts with services:
  • OpenServiceA
  • DeleteService
  • ControlService
  • CreateServiceA
  • OpenSCManagerA
 Can take screenshots:
  • FindWindowA
  • GetDC
  • CreateCompatibleDC
  • BitBlt
Malicious The PE is possibly a dropper. Resource 101 detected as a PE Executable.
Resource 102 detected as a PE Executable.
Info The PE is digitally signed. Signer: Thesycon Systemsoftware Consulting GmbH
Issuer: VeriSign Class 3 Code Signing 2010 CA
Safe VirusTotal score: 0/70 (Scanned on 2026-10-26 15:51:59) All the AVs think this file is safe.

Hashes

MD5 b3849adedca497a29e4b1a13f6851d45 🔍
SHA1 38438d73c378fd410d8d51ee954231f73ce9aa1d 🔍
SHA256 00a7c7b88877bf59dbaa70de734fcd3f287f1eb92caff4571a4c8e67a5dc0aca 🔍
SHA3 96671bfa5c55834098461d0758aa1e16297853ca549d57a7a4a11a03d5da0cfd 🔍
SSDeep 3072:/3epwRoNb3H6oy98nu6zp+4uhv9UKBLk4TZKVLIh0MRtcwuKohGjBf8i3Jn:/8eso8FnqSKB1K07Y2eun 🔍
Imports Hash 6109c06809e7a16475b9b07ee9115652 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 4
TimeDateStamp 2015-Jan-12 12:06:47
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 8.0
SizeOfCode 0x2a000
SizeOfInitializedData 0x1e000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00018160 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x2b000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x1000
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x4b000
SizeOfHeaders 0x1000
Checksum 0x58355
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 45346504f9fc242fbec493bba089c788 🔍
SHA1 e2dd2b0bc66bf6f473108a1a9f91cb0bfd72be68 🔍
SHA256 59a8b33917741843500deac140c0d81d91d4e555de4377fde7a2ed0e0425d7fb 🔍
SHA3 3f43cc71edbfd75fba03376d917f4148067fc7d5ea0a2c72c86e0957b86527eb 🔍
VirtualSize 0x291e1
VirtualAddress 0x1000
SizeOfRawData 0x2a000
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.56849

.rdata

MD5 2359f141d65be28b182e161dab8c37f6 🔍
SHA1 da91f37516fa61c3c856873dd33693543bfa09c6 🔍
SHA256 19702a507aecadfed139eae5f1dce1f894079ebad2fafe49a1145adeee7c86dd 🔍
SHA3 aff8311184b8bc99fd715641fa41edc627c47e96a6ffb4b4d81186a2cd6d9779 🔍
VirtualSize 0x8872
VirtualAddress 0x2b000
SizeOfRawData 0x9000
PointerToRawData 0x2b000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.1675

.data

MD5 51439d37af82d64fe32baad71a29bfda 🔍
SHA1 2a5f9e96afb5ff455da068d8ee0b9b9ab1cdd2b7 🔍
SHA256 d9d5bbeb09275cdad6f8256fdf09b2a05b894d5ed274ea878fdc9fc67f851e34 🔍
SHA3 a16143ab6d210f5480b3b38bc92e3f9b5d51dc8c2a7efc2a8780d7c77eff87f9 🔍
VirtualSize 0x4184
VirtualAddress 0x34000
SizeOfRawData 0x3000
PointerToRawData 0x34000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.49097

.rsrc

MD5 8c7f4516548511891cf5ed1f74d3a0ed 🔍
SHA1 14b626725d3e6bc31175a9aade2f4a0e8a792f02 🔍
SHA256 8dc846e2da676e7cd45af5a751e4fa1ff56565be0ce1fa8d0bb1962fe5be89bd 🔍
SHA3 92eb47da24adcc023387ff729ee4cd7ac163d7538da03eca7cff005a9aa18b6e 🔍
VirtualSize 0x11730
VirtualAddress 0x39000
SizeOfRawData 0x12000
PointerToRawData 0x37000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.55856

Imports

KERNEL32.dll LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
GetConsoleMode
GetConsoleCP
WriteFile
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetCommandLineA
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LoadLibraryExA
FlushFileBuffers
SetEndOfFile
lstrcpyA
MulDiv
DeleteCriticalSection
lstrcpynA
CompareStringA
InitializeCriticalSection
lstrcpynW
GetCurrentThreadId
FlushInstructionCache
GetModuleFileNameA
IsDBCSLeadByte
EnterCriticalSection
SetLastError
CreateMutexA
MultiByteToWideChar
InterlockedIncrement
GetVersionExA
lstrlenW
RaiseException
lstrcmpiA
SetStdHandle
WideCharToMultiByte
LeaveCriticalSection
GetCurrentProcessId
lstrcmpA
FreeLibrary
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
Sleep
DeleteFileA
SizeofResource
LockResource
LoadResource
FindResourceA
DeviceIoControl
GetOverlappedResult
ReadFile
GetLastError
CreateFileA
CloseHandle
CreateEventA
InterlockedDecrement
lstrlenA
OutputDebugStringA
RtlUnwind
DebugBreak
USER32.dll SetMenuDefaultItem
RegisterWindowMessageA
CharLowerA
LoadAcceleratorsA
SetFocus
EndDialog
LoadMenuA
GetWindowDC
LoadBitmapA
CreateDialogParamA
PostQuitMessage
IsDialogMessageA
DestroyWindow
IsMenu
GetWindowTextA
UnhookWindowsHookEx
CreateWindowExA
WindowFromPoint
FillRect
ReleaseCapture
GetSubMenu
SetForegroundWindow
SendMessageA
ShowWindow
LoadStringW
GetWindowThreadProcessId
GetMenuItemCount
SetMenu
DrawTextA
GetCapture
SetWindowTextA
IsIconic
GetDlgCtrlID
InflateRect
OffsetRect
IsWindowEnabled
CreatePopupMenu
SetRectEmpty
SetDlgItemTextA
IsWindow
IsWindowVisible
GetSysColor
GetLastActivePopup
GetMenuItemInfoA
MoveWindow
SetMenuItemInfoA
GetClassNameA
GetFocus
AppendMenuA
FindWindowA
GetCursorPos
DrawFocusRect
MessageBeep
KillTimer
GetKeyState
ScreenToClient
TranslateAcceleratorA
UpdateWindow
PeekMessageA
LoadCursorA
GetMessageA
GetMenu
DrawEdge
wsprintfA
TranslateMessage
GetDC
DispatchMessageA
SetWindowsHookExA
FrameRect
GetClassInfoExA
DestroyMenu
ReleaseDC
LoadImageA
ModifyMenuA
MonitorFromPoint
RegisterClassExA
GetWindow
PtInRect
CallNextHookEx
GetDlgItem
GetMonitorInfoA
SetTimer
GetSysColorBrush
SystemParametersInfoA
SetCursor
DialogBoxParamA
TrackPopupMenuEx
GetWindowRect
GetActiveWindow
MapWindowPoints
GetWindowTextLengthA
RemoveMenu
GetSystemMetrics
DrawFrameControl
GetMessagePos
PostMessageA
MessageBoxA
EndPaint
InvalidateRect
LoadStringA
BeginPaint
GetClientRect
RedrawWindow
DefWindowProcA
GetWindowLongA
SetWindowLongA
CharNextA
wvsprintfA
CallWindowProcA
SetWindowPos
GetParent
SetCapture
UnregisterClassA
GDI32.dll CreateDIBSection
CreateBitmap
GetStockObject
CreatePatternBrush
GetObjectA
CreateFontIndirectA
SetBrushOrgEx
PatBlt
SelectObject
SetTextColor
SetBkMode
IntersectClipRect
MoveToEx
CreatePen
LineTo
TextOutA
CreateCompatibleDC
SetBkColor
ExtTextOutA
CreateCompatibleBitmap
BitBlt
DeleteDC
GetTextExtentPoint32A
DeleteObject
ADVAPI32.dll OpenServiceA
DeleteService
ControlService
StartServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
FreeSid
CheckTokenMembership
RegQueryValueExA
RegDeleteKeyA
AllocateAndInitializeSid
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
SHELL32.dll ShellExecuteA
ole32.dll CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
OLEAUT32.dll VarUI4FromStr
COMCTL32.dll ImageList_Destroy
ImageList_Draw
#6
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
_TrackMouseEvent

Delayed Imports

101

Type BINRES
Language English - United States
Codepage Latin 1 / Western European
Size 0x46f0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.37615
Detected Filetype PE Executable
MD5 7cade7ce2d2ac0003bbdbd284b9393fa 🔍
SHA1 e35c3b690bc2e3bed59f7849a5d2348aa85394e0 🔍
SHA256 6871ebb5a285f7e9d34c89eae89414732dc29cd739622243a1770d09227b094c 🔍
SHA3 e9bd3b6f08833cabf82a668cc81645ca047f9bd6f3c5c5d59d25a775e29d8877 🔍

102

Type BINRES
Language English - United States
Codepage Latin 1 / Western European
Size 0x52f0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.13928
Detected Filetype PE Executable
MD5 2283eecdf839caa92d50a9f11c6b917d 🔍
SHA1 a30c6261aee2709bd8aa74452eaded4d0e5a3016 🔍
SHA256 636519d3293feb6779f089865c8c59a0763e720afefbad46fdb164fc06b9127e 🔍
SHA3 1f958845a4628e72d3b5cb67b223021b63fcdabfe15acb051ff5eb2286e26574 🔍

128

Type RT_BITMAP
Language English - United States
Codepage Latin 1 / Western European
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.57091
MD5 76e360ebd6c911327bae5c6c5f9311e1 🔍
SHA1 b3d55ae6b4199bea6c129dc67e48c08b1f521ce5 🔍
SHA256 04834aa2c57e32148726809e93c20fc1c90cd7356e75f485ff22d649c4ada337 🔍
SHA3 72404a0fe7f5d49a0e2b6e31cfc5555c83addc6ab282db2a8cd837cff3ba8b6b 🔍
Preview

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.52144
MD5 360c72bbab5a6454cfd390fa901dc47d 🔍
SHA1 ac924e3bad44d7996c6d676dd79c26773cdabe2e 🔍
SHA256 cc84ecdf3e3718e01aa23119b2d9abe09482f43d08c41057ced62d6dd7bbb2f1 🔍
SHA3 8f7493eeccdd41c715f83d5563ed49f3a79f6530044a926dbb1769c563ec2c20 🔍

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30236
MD5 1e58c1d9aefdd43c9a737a7b709e400a 🔍
SHA1 657454e6f4f3431a8b14997eba831b535b4b0e3b 🔍
SHA256 3703659e7f6e552fbc8743e6bf832482a902935f59d2263996d643021fb3efbb 🔍
SHA3 5d3ae266b48c98763a8e87880b0c3c24dfb8ddae852bea2e0bd9d136c2d875be 🔍

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.8615
MD5 7337595cb4ee6cc35d338d69e0be6ced 🔍
SHA1 6b8be2d51ca8662695abd6e049476895cf424684 🔍
SHA256 4ef3407c23da9002a6f6d7a877e89c38c004e1f296d04731ae5b92cb794c2386 🔍
SHA3 3b55974240475067442f58cbc3044b735b9b830bb459e1b8c20dbf8446e67bb6 🔍

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.48432
MD5 44650ddd4b2b348c2d2ae5b3b0dde0be 🔍
SHA1 964b9d51cf6f4620b45dd32995f9cf4a2cef122f 🔍
SHA256 67710dfb79c749893d1abee66876fcb27a30f8b15b2fef0aa4926acb23cd7c75 🔍
SHA3 32e5a652b4664298055e40ebf7333a49100e0f5c254df9ec643ed575a9e7cecf 🔍

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.5133
MD5 beb6b5a72cdc7ff7369aa73a399e1864 🔍
SHA1 2b494bf7c683ff82ad790c53c1239bb684700030 🔍
SHA256 75e5244be09b43aa49bf05ed4f2e0604a9f7c325797ec55689095c8f4c8808a8 🔍
SHA3 59c66beb42dd7aeaa1c25f705af3f3225943bdb746ebee18c5c1f108bc2211dd 🔍

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.88202
MD5 b87ae7ad3b569d41214496b83477172b 🔍
SHA1 d817801dea0fe5a20a122f346d6915a9f5f34b3e 🔍
SHA256 4be8174c097de4a9ec3c044ac701660669f2fe2996bd97db4bcf76dfe033f03c 🔍
SHA3 d1748a2d19c47f0d7e38be898f5edce377f5b1aa6aeebf4ad493462e46b604c0 🔍

128 (#2)

Type RT_MENU
Language English - United States
Codepage Latin 1 / Western European
Size 0x42
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82091
MD5 b4b58ce5eb4dd5092daef5d483dcfc31 🔍
SHA1 71dbde55069ce4caedee8914f6e36d94d704b0e1 🔍
SHA256 39b48877ed5c44145ee0090f276da79aa9dfbc9a15884aff9ec41d475ff6b949 🔍
SHA3 46f532c47f9e1f411a08f89b020a43c1001e5b0206cfa174e4515d8c2a08a08a 🔍

100

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x18a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.39619
MD5 8c578fe5a65149a9d17f32096a5f5655 🔍
SHA1 b883d02f72bd81911b72f132c90dfef9561d6be4 🔍
SHA256 2a9ec5726e3b5ef5eba1e323d44016f20bb7af5751c6ea8092ca08559a2ea0cc 🔍
SHA3 9a8d7043e73281ff60f71d8323866a5f5e6f1a513ee4e0224f496e4bf091a321 🔍

101 (#2)

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x7e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.86473
MD5 d9470a7f65b16e787aa49721b462921f 🔍
SHA1 c6ad484a43edd2169f34250f17a4a301d7d433b3 🔍
SHA256 0bee373529cad40ea2aa4f6e40e7cd492eca1f194b9094f98d493c92230e6b6b 🔍
SHA3 a76d68141f4e48d9c901234ddce1af13676cee7594f2657656c4f7765c45d623 🔍

129

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x254
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.21881
MD5 c1d451011d23aaa94cd872f03835696e 🔍
SHA1 a289270c98cf16959aa3847a8b4814440c9e1e79 🔍
SHA256 a7f1a3c3f4f2165b29169cd4b2832e0c717657eff5f859861d8ab9af25e351da 🔍
SHA3 3a4fd95d24ceca0bebad846b173b1ac4bf9f093f8694d00452f205f670c5f27e 🔍

9

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x3a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.64738
MD5 faa4b610102d79890d03ff25baa9df93 🔍
SHA1 f52df24c671a30716728bbe7ed1cdd398c1290bd 🔍
SHA256 13584164e4ec8296ede84554629471e9cae6825100c904242254020cc14f608d 🔍
SHA3 7214bec257d775700f1765ab4502f3beca272b6c4ae63fb52b6f77baf86c97b0 🔍

3585

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x2a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.960953
MD5 aafa5ef370ac2381a1fd0e31018b4cd8 🔍
SHA1 330cc36d16e3f57176bdbfb4d70f28790d34c2f2 🔍
SHA256 16152d0e4b46613de57df670b3396bfd8f45877fecfa949f6f33082eaabdace2 🔍
SHA3 90bdfd5e7733f55ca1436a4d696fd9951167a524b979d6434b91cc90e23d3da7 🔍

3601

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x296
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.17387
MD5 7f7666f05ff94ebd4b8d5bc38460e8de 🔍
SHA1 612cbf670e7a7625aeb9bf7a118edf0ac5343dd2 🔍
SHA256 372e7c9fc066644545dc37ce1dc5195e3e613c20fb0090a3f59138a571b6f98e 🔍
SHA3 c3e50732432ab1b9ad8cee5c03200e84d94b0e4f6673b77517caceb3c5c561d2 🔍

3603

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x328
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.19961
MD5 7d399439e7b818bb49bfd91f785c3f11 🔍
SHA1 95b21eddefe681749a89915bbeca3f20fd12a64d 🔍
SHA256 fc3f6f769e88ce894bba9f4078aaea4a47db8284f3fafb6ff844f8a5406feaba 🔍
SHA3 5ee8b07ab8ecb2df03557d64bc9f8ab6691f473f340ab7b81c13fc2e489318b2 🔍

3604

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x27c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.14802
MD5 6db7537e63cb311e34ad0a04e6cd1389 🔍
SHA1 451b45265229cbeabd40ea0742094c061d25df41 🔍
SHA256 037d278a2fd218fdc53acb609b840b64c1512caef97e6dba2c809ac931539826 🔍
SHA3 b685ab446c3d0ae398fa3ec00af267482281865bc2e744891f5075c566ed62bf 🔍

3605

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xd2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.94892
MD5 a4af4493a87ecaa2cde6c239fb5019d5 🔍
SHA1 62d03ce6f4cad619413956d2b100873a25e155f6 🔍
SHA256 1bf844853d8b0d4912b567ee4d908485e2c749ad7dfe0131890dcf249bd4887f 🔍
SHA3 3f8b22f6f9d428c452b2289cdf9b5dbe4b2433d4d9fe0ccf8e14f7acdb5c2425 🔍

3606

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xda
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.83557
MD5 2a450fc19a27fc2e3c519b56c448763f 🔍
SHA1 c5fff493b3264c9058855d1642e146f4a6cf66e0 🔍
SHA256 f4d2054bad5a30d07ffde08fafdf7a0deed4e343526816a67ecbbd068b84ad81 🔍
SHA3 612c621a553741864d1b823de4ac6aa953fceb8ad68f7ec419ca4dd035f5db1b 🔍

3713

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xc6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74093
MD5 d10669c2ba4f74b9f7ebfa20188dc951 🔍
SHA1 1da865167e0cb5448928171745c9679f7f7d3c9c 🔍
SHA256 8b64c7b314ec82b8d9a5584bca52110faf36ffa86317f2e98957a8665fe97a68 🔍
SHA3 ddf0ef44b4b5e7b6e941ef96897c42f23f5a952e66931c0c879c78b50bf46a1a 🔍

3825

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x1f8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04777
MD5 e0d2d9d8a0bf3bbd508e8282f458cdec 🔍
SHA1 9ac6aeaed327d8cbfec6a735f700676a8bc01607 🔍
SHA256 0cce65df387f67147c75ac921bc6512fb5fc8dc86d3a60a2e0c2ba2d4845539b 🔍
SHA3 2beb42630a13e63841d88462346139c8690eab66df2f0da4fd53a96e753a9d6c 🔍

3826

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0xae
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77295
MD5 1395536b8eeb3e9a41172fc129faa8e9 🔍
SHA1 fa92508a54f1eb856881a9311c167310102e8805 🔍
SHA256 1981ad13f198af2761bff700f4efe7ec35f717041f9290b5005a22a07c6b45d9 🔍
SHA3 d66127cdc3524b2cace7fcba1ee625b207f08af062c28d504a52c48d034647fb 🔍

3838

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x44
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.92392
MD5 af6d78d601d2232fb1459c98ad905312 🔍
SHA1 45669d5630d6f4f44bda1da7b78c31c91e5c2749 🔍
SHA256 9e6c52a92a02ae957fecfc81726b6a5a93b5c687f57d2985fc2b66ef3be215b8 🔍
SHA3 2fdd97d5d26dc1590a151fa178dc5481e5f45bba9fdf5df93ad23676d90e159f 🔍

128 (#3)

Type RT_ACCELERATOR
Language English - United States
Codepage Latin 1 / Western European
Size 0x30
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.5515
MD5 430fd8d61a17e653cac4c67b245f4003 🔍
SHA1 67dee70992c4d0bc60a8a84691c98fa5815b2912 🔍
SHA256 e2712ae906747e439d41db12027a6c928de29ec2f05d50dc18c7661f7ef3ca0a 🔍
SHA3 a510423fda67d428257cee823d07d5babf6733afd4dbd3ed5dab3f1dc2905771 🔍

128 (#4)

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x5a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.69913
Detected Filetype Icon file
MD5 8a422e42c4c38e5694196e63237b95a0 🔍
SHA1 612ee433b05d518f04413bfad3e24f4149e19d1a 🔍
SHA256 1b1f5d8c4936f5c28fdfbed6aa8adc9f2fdb776eeb88d623f65069a9085e3e23 🔍
SHA3 cb3c60a9ba669fa32a439e769ffcb9edd57ed39a4a63919be6cab50483551941 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x340
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44689
MD5 0f9594698bf4572e631de27b87eb8ef0 🔍
SHA1 8a849d7abf0731dd8f0d1e099abb8ed191c92154 🔍
SHA256 28896cb1ff39fcb2c2a2ad525f28cb52f8fea52802008651d5a4e8676b1c12a1 🔍
SHA3 5ed510093038e771781fd3c7bd5698e2b66d84020447edd102717bb305a64427 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x48c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.26129
MD5 25bbb0c594a86fc970dacd2bca7ca484 🔍
SHA1 c82267234c8f35c60b6121e8750047a53857f881 🔍
SHA256 7b5f7386e770c4a20f9921d6a40a71245660e53f8cefad8bf403fb3bc5eb82fd 🔍
SHA3 3d313ef1f13468bd5c9a42da7bdaac6014d8bb6a5dfbb770936852e1375d3662 🔍

128 (#5)

Type UNKNOWN
Language English - United States
Codepage Latin 1 / Western European
Size 0x1c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.85988
MD5 1627c25b245688c792b62bfec25e6e73 🔍
SHA1 c850f595a333d8a7fa344066a4431f2faede14f7 🔍
SHA256 4a9ddd567a13d9d147d000cc776815a583857849927d8fd91b8a4d73c9a5433d 🔍
SHA3 90758203a6641628dbe13812dc9393b2d6b735bb2d710122c7961a9670bfe883 🔍

String Table contents

Latency Check
Ready
Create a new document
New
Open an existing document
Open
Close the active document
Close
Save the active document
Save
Save the active document with a new name
Save As
Change the printing options
Page Setup
Change the printer and printing options
Print Setup
Print the active document
Print
Display full pages
Print Preview
Erase the selection
Erase
Erase everything
Erase All
Copy the selection and put it on the Clipboard
Copy
Cut the selection and put it on the Clipboard
Cut
Find the specified text
Find
Insert Clipboard contents
Paste
Repeat the last action
Repeat
Replace specific text with different text
Replace
Select the entire document
Select All
Undo the last action
Undo
Redo the previously undone action
Redo
Open another window for the active document
New Window
Arrange icons at the bottom of the window
Arrange Icons
Arrange windows so they overlap
Cascade Windows
Arrange windows as non-overlapping tiles
Tile Windows
Arrange windows as non-overlapping tiles
Tile Windows
Split the active window into panes
Split
Display program information, version number and copyright
About
Quit the application.
Exit
Switch to the next window pane
Next Pane
Switch back to the previous window pane
Previous Pane
Show or hide the toolbar
Toggle ToolBar
Show or hide the status bar
Toggle StatusBar
Change the window size
Change the window position
Reduce the window to an icon
Enlarge the window to full size
Switch to the next document window
Switch to the previous document window
Close the active window and prompts to save the documents
Restore the window to normal size
Activate Task List
Activate this window
Open this document

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.4.0.0
ProductVersion 1.4.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Thesycon GmbH
FileDescription DPC Latency Checker
FileVersion (#2) 1.4.0.0
InternalName dpclat.exe
LegalCopyright © 2006-2015 Thesycon GmbH
OriginalFilename dpclat.exe
ProductName DPC Latency Checker
ProductVersion (#2) 1.4.0.0
BuildType release
Platform Windows x86
Resource LangID English - United States

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x4342c0
SEHandlerTable 0x4304c0
SEHandlerCount 77

RICH Header

XOR Key 0x92174a5e
Unmarked objects 0
ASM objects (VS2012 build 50727 / VS2005 build 50727) 30
C objects (VS2012 build 50727 / VS2005 build 50727) 136
C++ objects (VS2012 build 50727 / VS2005 build 50727) 58
C objects (VS2003 (.NET) build 4035) 1
Imports (VS2003 (.NET) build 4035) 17
Total imports 296
114 (VS2012 build 50727 / VS2005 build 50727) 6
Resource objects (VS2012 build 50727 / VS2005 build 50727) 1
Linker (VS2012 build 50727 / VS2005 build 50727) 1

Errors

Leave a comment

No comments yet.