283353a6f8e9d8c9ddffbf6e16afe85f1a9a6e3271ecbdd22275ef27f4001074
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Dec-09 22:08:41 |
| Detected languages |
English - United States
|
| Debug artifacts |
C:\Git\Engagement\WM\AcrobatDC\PluginSupport\PfxEngagementXtension\win32\Release\PfxEngagementXBroker64.pdb
|
| CompanyName | Wolters Kluwer |
| FileDescription | PfxEngagementXBroker64.exe |
| FileVersion | 2025.2.1024.0 |
| LegalCopyright | (C) CCH Incorporated and its affiliates and licensors. All rights reserved. |
| ProductName | CCH ProSystem fx Engagement |
| ProductVersion | 2025.2.1 |
Plugin Output
| Info | Matching compiler(s): | MASM/TASM - sig2(h) |
| Suspicious | The PE contains functions most legitimate programs don't use. |
Can access the registry:
|
| Info | The PE is digitally signed. |
Signer: CCH Incorporated
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 |
| Safe | VirusTotal score: 0/70 (Scanned on 2026-08-11 14:14:28) | All the AVs think this file is safe. |
Hashes
| MD5 | 072ebd5df4ad49b34297f9537cada5c6 🔍 |
|---|---|
| SHA1 | e63edd7979e87c934b5b2f35e9ca7836dc607b66 🔍 |
| SHA256 | 283353a6f8e9d8c9ddffbf6e16afe85f1a9a6e3271ecbdd22275ef27f4001074 🔍 |
| SHA3 | fd871b183c3f61a93e2c09712d0dee2deb19b73a9e202b6f54c12e960e411d81 🔍 |
| SSDeep | 3072:GGDaF41KxslnxXN+cViAGGTSp7bMbL044G4cubJcPMwXb5B6WxMpMVS1zfMjg14:GKVRJVABobo8ubJcPMwX3V24j64 🔍 |
| Imports Hash | c76e0b14ceaaf17fbd731a4cbf6b2800 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x118 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2025-Dec-09 22:08:41 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x27400 |
| SizeOfInitializedData | 0xf200 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00022E10 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x29000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3a000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x45ab6 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | b82f0bd022d73b221ae7ae467f32093a 🔍 |
|---|---|
| SHA1 | 845e55a6f5bc8085031cf15f875e1eae349ea764 🔍 |
| SHA256 | 8b693466de2e89c06e9c4f4f037075b2c58388b083c950b6d81860fccaaa8225 🔍 |
| SHA3 | fea07332813bf840256b674aeffa419da52c1561528f7d1ee7c6768e217720a0 🔍 |
| VirtualSize | 0x27206 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x27400 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.08934 |
.rdata
| MD5 | 986cbc51a9f8a2fb148178ecdcda4683 🔍 |
|---|---|
| SHA1 | 19a4f63e29c92810a39c30e778e8b30fcc939dd0 🔍 |
| SHA256 | 2ee0e21548a4a9a6be7100c70dcb2fab98b91258a0542c784a9b51a849960968 🔍 |
| SHA3 | c3578d3da76157fd4a6a48a43aef1063de1659a01c919aecddcad6d25dea5c5b 🔍 |
| VirtualSize | 0x9966 |
| VirtualAddress | 0x29000 |
| SizeOfRawData | 0x9a00 |
| PointerToRawData | 0x27800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.11762 |
.data
| MD5 | 728b98d4d56309b009d8b81188faa3bd 🔍 |
|---|---|
| SHA1 | 0e94cfbea07b6123737ceffa9f861b24a3f8ff9c 🔍 |
| SHA256 | fda06af176d71a45b860e2d197c1365697e0838f9780fde6da153ce460eb9a9c 🔍 |
| SHA3 | e4b02da6c542ff31ce83c8adc59a8dd56f8b6acc17df2c4bc7055b6c4f59b253 🔍 |
| VirtualSize | 0x18f4 |
| VirtualAddress | 0x33000 |
| SizeOfRawData | 0x1400 |
| PointerToRawData | 0x31200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 4.95872 |
.rsrc
| MD5 | ab5e803d44b9e5b2e1aa201ca9015f68 🔍 |
|---|---|
| SHA1 | 6393867463a843d2cd689768effb511110ae05e2 🔍 |
| SHA256 | 58a01473bc215896ae7f710ad4dd8431d093912f3f1773f711b15980b47de78a 🔍 |
| SHA3 | 203d012f64b44d6ee07704ef64deac3874609a52b22f7938566f1affa9ca414c 🔍 |
| VirtualSize | 0x1a28 |
| VirtualAddress | 0x35000 |
| SizeOfRawData | 0x1c00 |
| PointerToRawData | 0x32600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 3.61877 |
.reloc
| MD5 | d0cafb0e6fee0d7c36aeeabd6080d5ff 🔍 |
|---|---|
| SHA1 | d17b6819b6fa203c10340b67ee1f13de79ec41b8 🔍 |
| SHA256 | a80aebdb432ff6f27f0cf5caacd4c218bdedbb726212d9190a823ce4668d0bba 🔍 |
| SHA3 | c5d0d8fb5e0983e3859e81cb0f58c2b24a543491edc566b035498d49da837132 🔍 |
| VirtualSize | 0x2140 |
| VirtualAddress | 0x37000 |
| SizeOfRawData | 0x2200 |
| PointerToRawData | 0x34200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.56646 |
Imports
| MSVCP140.dll |
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Xlength_error@std@@YAXPBD@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ??Bid@locale@std@@QAEIXZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ |
|---|---|
| USER32.dll |
ShowWindow
SetForegroundWindow GetWindowTextA EnumWindows TranslateMessage DispatchMessageA PeekMessageA wsprintfW UnregisterClassA LoadStringA MsgWaitForMultipleObjects |
| ole32.dll |
OleRun
OleUninitialize CoCreateInstance CLSIDFromProgID OleInitialize CLSIDFromString |
| OLEAUT32.dll |
CreateErrorInfo
SetErrorInfo GetErrorInfo VariantChangeType VariantCopy VariantClear VariantInit SysAllocStringByteLen SysStringByteLen SysStringLen SysFreeString SysAllocStringLen SysAllocString |
| KERNEL32.dll |
MultiByteToWideChar
FormatMessageA LocalAlloc FindResourceW SizeofResource LockResource LoadResource FindResourceExW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException ReadFile OpenProcess CreateThread WaitForMultipleObjects CreateEventA ResetEvent SetEvent CreateNamedPipeW Sleep CloseHandle OutputDebugStringA GetCommandLineW GetOverlappedResult ConnectNamedPipe GetCurrentProcess CreateFileW DuplicateHandle GetTickCount WaitNamedPipeW EnterCriticalSection WideCharToMultiByte WriteFile DecodePointer GetCurrentProcessId LeaveCriticalSection OutputDebugStringW LocalFree FreeLibrary VirtualQuery InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleW CreateEventW WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount DisconnectNamedPipe |
| ADVAPI32.dll |
RegCloseKey
RegQueryValueExA RegOpenKeyExA |
| VCRUNTIME140.dll |
__vcrt_LoadLibraryExW
__vcrt_GetModuleFileNameW __std_type_info_destroy_list _except_handler4_common __current_exception_context __current_exception __std_terminate memcpy memmove strstr __std_exception_copy __std_exception_destroy _CxxThrowException __CxxFrameHandler3 _purecall memset |
| api-ms-win-crt-runtime-l1-1-0.dll |
_invalid_parameter_noinfo_noreturn
_controlfp_s terminate _invalid_parameter_noinfo _register_thread_local_exe_atexit_callback _c_exit _exit exit _initterm_e _beginthreadex _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _errno _set_app_type _seh_filter_exe _cexit _crt_at_quick_exit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _initterm _configure_narrow_argv _seh_filter_dll _endthreadex |
| api-ms-win-crt-string-l1-1-0.dll |
wcslen
strcat_s strcpy_s strlen strncpy_s |
| api-ms-win-crt-convert-l1-1-0.dll |
_wtol
|
| api-ms-win-crt-heap-l1-1-0.dll |
_recalloc
malloc free _set_new_mode _callnewh |
| api-ms-win-crt-stdio-l1-1-0.dll |
__stdio_common_vsprintf
__stdio_common_vsprintf_s __stdio_common_vsnprintf_s __p__commode ungetc setvbuf fwrite _fseeki64 fseek fsetpos fread fputc fgetpos fgetc fflush fclose _set_fmode fopen_s _get_stream_buffer_pointers |
| api-ms-win-crt-filesystem-l1-1-0.dll |
_lock_file
_unlock_file |
| api-ms-win-crt-math-l1-1-0.dll |
ceil
__setusermatherr |
| api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
Delayed Imports
1
| Type |
RT_CURSOR
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.87733 |
| MD5 | d384586468a10c833afbbabeead95e99 🔍 |
| SHA1 | 22b4339686223b4dc20957b6b51d6e1682f196ce 🔍 |
| SHA256 | 97a3d18229c1b07ac559645dd46cc9f3f402c9acb950bd6aade37ea07e8d02ce 🔍 |
| SHA3 | 1252525863ea7f421d8823baed0350dafd482a7a061e17619fa829e147d82f39 🔍 |
2
| Type |
RT_CURSOR
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.91035 |
| MD5 | 71505d217368e89e7f8c9ccb586be28d 🔍 |
| SHA1 | 70aad59afbac1bc286f9b93b3e2ff8956baecc85 🔍 |
| SHA256 | 21a55cf56baf297e7c36ba1f7dd62f2a7e1e381d1b8982d9feaee6b28ee1c6b5 🔍 |
| SHA3 | dd4d376f02f93e810306c42b1ecb1e48c8999a53fea644ee2981f661819b7a58 🔍 |
3
| Type |
RT_CURSOR
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x134 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.89215 |
| MD5 | 894e5a662a9ab4558fc5c9a8953cad22 🔍 |
| SHA1 | 54c5720504f3273a342e0238e00ec4f2356e27a8 🔍 |
| SHA256 | 1b7d3381a1886a0f123ba4d3bd159103eefe2254306e551ab5da74c950d85f84 🔍 |
| SHA3 | e2c13907336058c8a3a35f1fbd1d1076219875a99cb474f2a3b6c6a87bc64585 🔍 |
103
| Type |
RT_BITMAP
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x158 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.23101 |
| MD5 | 05f48e233fa87209a4436971157fd2de 🔍 |
| SHA1 | db15f90609ad001fba488b43ac5855ae4d6dd216 🔍 |
| SHA256 | 55aeb5bdc22638cb618cb9b7c5cef56e946861a2a8dbbcf5f6e640424ecda505 🔍 |
| SHA3 | 9665c94fff97e2f23fad0b5428c908268ec0b1a80087f7da160d49cc269c7bcc 🔍 |
| Preview |
|
106
| Type |
RT_BITMAP
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xe8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.12489 |
| MD5 | 6ee54f080f29f7b70b41935b71a50113 🔍 |
| SHA1 | 1bb4e5220b15a0626dcd9eb6df5516c9488be86b 🔍 |
| SHA256 | b571ad6036267e92793f6468e38f82cdba837f2d5c21b21932217ec36a589433 🔍 |
| SHA3 | 1746f27f4b00977136da72b47557444f3b6db0f1c26e6260db5b5c4bf9a6b412 🔍 |
| Preview |
|
107
| Type |
RT_BITMAP
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xe8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.54692 |
| MD5 | 8881b38541898d9ec8e5571c9ee444ac 🔍 |
| SHA1 | 855e4b4f0c7c4567f5293f2b271013f4add43ae5 🔍 |
| SHA256 | 2a441b2642ea5de79cf599b8b2254e99c22e276b4f2562fd0f6e6946ca70a5d0 🔍 |
| SHA3 | b6b3524b57099934771adf46cc408d8f108eb56bea135cfc5b37b60d1633ea3f 🔍 |
| Preview |
|
108
| Type |
RT_BITMAP
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xe8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.66216 |
| MD5 | 87b76d0dc4d32e49b975ab7643c789be 🔍 |
| SHA1 | 8a0808b9f0e64bad90ce7adea294a37cfa6744f3 🔍 |
| SHA256 | dee0d5d7152cecd7c5fd6c600612813dda2140a5b671505fba0c1806bb5cbdd4 🔍 |
| SHA3 | cc7aa544b6f775adebad395c44f37fe68280ede6efb6f20b932428f2fcf6c3e6 🔍 |
| Preview |
|
109
| Type |
RT_BITMAP
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xe8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.29363 |
| MD5 | e8d9f5183d003d1c48a3705475457274 🔍 |
| SHA1 | 7759a72dc5762c062952572eeef0c3df529bdd18 🔍 |
| SHA256 | cb57b82c450b9a5f14447a3a3ae31db7d1fdf1a0c06a5bead225741a6f2e1c01 🔍 |
| SHA3 | e79f01bbb8cf13348f351b00921f92a928eb11950d776655b6571a72a848e06e 🔍 |
| Preview |
|
113
| Type |
RT_BITMAP
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xe8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.09897 |
| MD5 | 2b5d3b591b797caaa52ae6e2ee88e9af 🔍 |
| SHA1 | 1c650d3bb44bf7f57f3bf0cb0db029e58ac46a87 🔍 |
| SHA256 | 24c65f5c17bb338c7f92d24d3812f847bfa8ec869c4d04ccd6152c041a2606b6 🔍 |
| SHA3 | f3279efab721063ca7fe2aa4ed330731f56d1a1f5fdcc1ccb837bdf019552850 🔍 |
| Preview |
|
114
| Type |
RT_BITMAP
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xe8 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.98764 |
| MD5 | 7124db5a8a3fb681fcc2b98d31965f6b 🔍 |
| SHA1 | 7a9029cce6677d1d5df83131bed58edbb5564d9d 🔍 |
| SHA256 | 559bfedb8794f0991802e8272390e34e3970910c0f1ddeb214461622369cbe2e 🔍 |
| SHA3 | 5a3053b0914be22d33294a50b56b7df04aea0362c1853b1fb4345fcbe190deba 🔍 |
| Preview |
|
13
| Type |
RT_STRING
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x12c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.18178 |
| MD5 | f200fb0a15a0a95b997b78cc305e672c 🔍 |
| SHA1 | 89711fa7d0790deed3b17b36c5e8ed05f59b3136 🔍 |
| SHA256 | 29c66102538fdea3aa8d56229faed36de4720127ed7bb2dd830e33b181774462 🔍 |
| SHA3 | 1c21950fd80e5ae9c95a0952e3028fac7ac60c30941340ff30369c9dd8e497db 🔍 |
14
| Type |
RT_STRING
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x7e |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.5824 |
| MD5 | 1ad2dea50b0b07e92e362fdcd15e31f9 🔍 |
| SHA1 | 30957efcebb0990ff6bae348846041bda26973ce 🔍 |
| SHA256 | c2218907a29404eef81c7adeade03fcc86f5638e1846060426ba420980393a3e 🔍 |
| SHA3 | 3e634d622c37da12586ccf512b7e27a65610f3477b914472e6a018e6c9717633 🔍 |
19
| Type |
RT_STRING
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x104 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.95403 |
| MD5 | 687a9a771ac2d600cb9e59043598dabe 🔍 |
| SHA1 | db3e5fbb7476c481159d92287fde12312d4d69db 🔍 |
| SHA256 | 6eb9d5d3d6659818dc4f8e8bde6ee88ba5e5df090dea8b8c57632178a303b175 🔍 |
| SHA3 | 78ff482f974afb7ac4df6bf1900641578bfbe01f3c397a9c484e0584bbcc9d1f 🔍 |
20
| Type |
RT_STRING
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x31a |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.13032 |
| MD5 | 6cffd6b7821d4bc66b527b29ca85f35b 🔍 |
| SHA1 | 2f430d1dfbc0b8d45b424a81d9f42c38be88fab1 🔍 |
| SHA256 | bd033db3ce378c4fd69cf9c19c362093187cec6c131b31949b1c1b7408adfa81 🔍 |
| SHA3 | 81736485a9505899c74409ef3a0fe3ba28a25ab0b39e4667de37961b73385dfa 🔍 |
101
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.83876 |
| Detected Filetype | Cursor file |
| MD5 | a2baa01ccdea3190e4998a54dbc202a4 🔍 |
| SHA1 | e8217df98038141ab4e449cb979b1c3bbea12da3 🔍 |
| SHA256 | c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710 🔍 |
| SHA3 | 8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc 🔍 |
| Preview |
|
120
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.91924 |
| Detected Filetype | Cursor file |
| MD5 | aff0f5e372bd49ceb9f615b9a04c97df 🔍 |
| SHA1 | e3205724d7ee695f027ab5ea8d8e1a453aaad0dd 🔍 |
| SHA256 | b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c 🔍 |
| SHA3 | 9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712 🔍 |
| Preview |
|
121
| Type |
RT_GROUP_CURSOR
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.01924 |
| Detected Filetype | Cursor file |
| MD5 | 48e064acaba0088aa097b52394887587 🔍 |
| SHA1 | 310b283d52aa218e77c0c08db694c970378b481d 🔍 |
| SHA256 | 43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a 🔍 |
| SHA3 | 38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5 🔍 |
| Preview |
|
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x304 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.50055 |
| MD5 | e7fba59ef5b4b27ef226beb5bb04c5c4 🔍 |
| SHA1 | f1d1319ee4586548f978c1c13ed656a825a7cbca 🔍 |
| SHA256 | 8770bb06b01fa56526b71bc51c15c00a9aaa38183c0221621bd3310ab96d2f03 🔍 |
| SHA3 | ce3f2cef07f162171650e49362f7c75b119913538865025dfc3d6f9b7154b33d 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x17d |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.91161 |
| MD5 | 1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍 |
| SHA1 | 4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍 |
| SHA256 | 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍 |
| SHA3 | 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍 |
106 (#2)
| Type |
UNKNOWN
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xa |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.12193 |
| MD5 | 4ad49a00bee317e2fee36fb0193f0b2b 🔍 |
| SHA1 | 0f5aa41b7f5f5af0f3d7511f068e79d333d01b44 🔍 |
| SHA256 | 80dcdadba0dde04c66fae0034deab3befcc0e0c3f5f6d7409cb20cbfb1c652a4 🔍 |
| SHA3 | 5559b8fa9869b900edba005f2208562e0eedf84ac0a4487dcfbc73531cd7cf2a 🔍 |
107 (#2)
| Type |
UNKNOWN
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xa |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.12193 |
| MD5 | f086148f0c45e6d473fd45b1eceee3e6 🔍 |
| SHA1 | a42fe84f552805cb0c041b032c8c9f1690c74ebf 🔍 |
| SHA256 | c2a7a2bbf4ba60231e527370bfa7f84b19df1e7a30ea91ab5cc023f49390a21e 🔍 |
| SHA3 | 172e47cea66732c550e27a877d91073b194493ea81bc47caf7768d9c2faed730 🔍 |
109 (#2)
| Type |
UNKNOWN
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xa |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.12193 |
| MD5 | e4d86f06a955fa04dc52c0ac183e558d 🔍 |
| SHA1 | 4df50d81fffc4142dba0e85f9859058fbd36391d 🔍 |
| SHA256 | 7db5e91ba2aa90eb976bcc2b579468b422dfd3baeac696f69727cdfa3929f951 🔍 |
| SHA3 | 00c54fa52b1fc70b115b5c83bff95a465dc87c9b3bd38c4cbd0acfbd335addc4 🔍 |
String Table contents
| Tickmark &Toolbar |
| &Insert WP Reference... |
| &Open WP Reference |
| Engage&ment |
| Crea&te Workpaper Note... |
| Tickmark |
| Tickmark &Definition... |
| Tick&mark |
| Wor&kpaper Reference |
| Tickmarks |
| Workpaper &Manager |
| Failed to get binder and/or workpaper ID. |
| Failed to load Tickmark Definition. |
| Failed to call |
| Failed to create object: |
| Failed to launch the Tickmark Definition dialog |
| Failed to refresh Tickmark toolbar |
| Failed to load Workpaper Reference dialog. |
| Failed to insert Workpaper Reference |
| Failed to open Workpaper Reference. |
| Failed to launch the Create Workpaper Note dialog |
| Failed to read image information table from image file |
| Failed to read image data from image file |
| Unknown error occurred when adding tickmark |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2025.2.1024.0 |
| ProductVersion | 2025.2.1.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_DLL
|
| Language | English - United States |
| CompanyName | Wolters Kluwer |
| FileDescription | PfxEngagementXBroker64.exe |
| FileVersion (#2) | 2025.2.1024.0 |
| LegalCopyright | (C) CCH Incorporated and its affiliates and licensors. All rights reserved. |
| ProductName | CCH ProSystem fx Engagement |
| ProductVersion (#2) | 2025.2.1 |
| Resource LangID | English - United States |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Dec-09 22:08:41 |
| Version | 0.0 |
| SizeofData | 132 |
| AddressOfRawData | 0x2dfe8 |
| PointerToRawData | 0x2c7e8 |
| Referenced File | C:\Git\Engagement\WM\AcrobatDC\PluginSupport\PfxEngagementXtension\win32\Release\PfxEngagementXBroker64.pdb |
IMAGE_DEBUG_TYPE_VC_FEATURE
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Dec-09 22:08:41 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x2e06c |
| PointerToRawData | 0x2c86c |
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Dec-09 22:08:41 |
| Version | 0.0 |
| SizeofData | 1048 |
| AddressOfRawData | 0x2e080 |
| PointerToRawData | 0x2c880 |
TLS Callbacks
| StartAddressOfRawData | 0x42e4c8 |
|---|---|
| EndAddressOfRawData | 0x42e4d0 |
| AddressOfIndex | 0x43451c |
| AddressOfCallbacks | 0x429448 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
Load Configuration
| Size | 0xbc |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x433004 |
| SEHandlerTable | 0x42d930 |
| SEHandlerCount | 141 |
RICH Header
| XOR Key | 0x296fed9d |
|---|---|
| Unmarked objects | 0 |
| Imports (VS2008 SP1 build 30729) | 16 |
| Imports (VS2017 v14.15 compiler 26715) | 10 |
| Imports (30034) | 5 |
| Total imports | 216 |
| C++ objects (30034) | 46 |
| C objects (30034) | 12 |
| ASM objects (30034) | 6 |
| C objects (VS2017 v14.15 compiler 26715) | 2 |
| C++ objects (LTCG) (30159) | 2 |
| C++ objects (30159) | 4 |
| Resource objects (30159) | 1 |
| 151 | 1 |
| Linker (30159) | 1 |
Errors
Leave a comment
No comments yet.