wsafnbids.unpacked.exe - WRSA.exe - Webroot SecureAnywhere

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

parent	wsafnbids.exe
filename	wsafnbids.unpacked.exe
size	2699736 (0x2931d8)
md5	43b9230db30f225b9d0d2b0e7fb65d82

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
149	30729	15
147	30729	4
93	4035	32
109	50727	1
156	20804	3
1	0	521
95	4035	6
131	30729	69
132	30729	16
126	50727	1
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x57574ad3
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x185400
SizeOfInitializedData	0x106e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x17e9e1
BaseOfCode	0x1000
BaseOfData	0x187000
ImageBase	0x1000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x28f000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0x81c0
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x18527c	0x185400	R-X CODE
.data	0x187000	0x5084	0x4400	RW- IDATA
.rsrc	0x18d000	0xf0d60	0xf0e00	R-- IDATA
.reloc	0x27e000	0x10c18	0x10e00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x183894	0x190
RESOURCE	0x18d000	0xf0d60
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x28898	0x40
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
BINARY	#200	140176
BINARY	#201	138576
BINARY	#202	181176
BINARY	#203	115768
BINARY	#204	1103
BINARY	#205	119288
BINARY	#206	117728
BINARY	#303	99044
BINARY	#700	5064
BINARY	#702	2119
BINARY	#705	528
BINARY	#707	663
BINARY	#708	529
BINARY	#709	353
BINARY	#710	530
BINARY	#711	446
BINARY	#712	123
BINARY	#713	149
BINARY	#714	533
BINARY	#715	649
BINARY	#716	350
BINARY	#717	445
BINARY	#719	706
BINARY	#721	648
BINARY	#722	651
BINARY	#739	289
BINARY	#740	237
BINARY	#741	289
BINARY	#742	328
BINARY	#743	210
BINARY	#744	336
BINARY	#745	416
BINARY	#746	413
BINARY	#747	318
BINARY	#748	204
BINARY	#749	331
BINARY	#750	130
BINARY	#751	221
BINARY	#752	198
BINARY	#753	556
BINARY	#760	3788
BINARY	#761	1081
BINARY	#762	873
BINARY	#770	397
BINARY	#771	214
BINARY	#772	401
BINARY	#773	143
BINARY	#774	97
BINARY	#775	143
BINARY	#776	97
BINARY	#790	706
BINARY	#791	514
BINARY	#792	803
BINARY	#793	425
BINARY	#794	474
BINARY	#795	757
BINARY	#796	642
BINARY	#797	551
BINARY	#798	565
BINARY	#800	241
BINARY	#801	135
BINARY	#802	217
BINARY	#810	2237
BINARY	#811	1803
BINARY	#816	600
BINARY	#817	555
BITMAP	#509	560
BITMAP	#510	560
BITMAP	#511	560
BITMAP	#512	560
BITMAP	#538	936
BITMAP	#539	168
BITMAP	#540	808
BITMAP	#541	168
BITMAP	#573	148
BITMAP	#583	500
BITMAP	#584	500
BITMAP	#585	808
BITMAP	#701	2280
ICON	#1	9640
ICON	#2	4264
ICON	#3	1128
ICON	#4	1128
ICON	#5	1128
ICON	#6	1128
ICON	#7	1128
ICON	#8	1128
STRING	#7	120
GROUP_ICON	#101	48
GROUP_ICON	#401	20
GROUP_ICON	#402	20
GROUP_ICON	#403	20
GROUP_ICON	#404	20
GROUP_ICON	#405	20
VERSION	#1	736
MANIFEST	#1	868

id	lang	string
101	1033	Webroot SecureAnywhere
102	1033	Webroot SecureAnywhere

module_name	ord	function_name
KERNEL32.DLL		GetCPInfo
KERNEL32.DLL		IsDBCSLeadByte
KERNEL32.DLL		GetVersionExW
KERNEL32.DLL		FindClose
KERNEL32.DLL		GetFileType
KERNEL32.DLL		GetStdHandle
KERNEL32.DLL		SetFileTime
KERNEL32.DLL		SetFileAttributesA
KERNEL32.DLL		lstrlenA
KERNEL32.DLL		lstrlenW
KERNEL32.DLL		FindNextFileA
KERNEL32.DLL		FindFirstFileA
KERNEL32.DLL		FindNextFileW
KERNEL32.DLL		FindFirstFileW
KERNEL32.DLL		GetVersion
KERNEL32.DLL		GetStartupInfoA
KERNEL32.DLL		RtlUnwind
KERNEL32.DLL		QueryPerformanceCounter
KERNEL32.DLL		UnhandledExceptionFilter
KERNEL32.DLL		CreateSemaphoreW
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		CloseHandle
KERNEL32.DLL		SetHandleInformation
KERNEL32.DLL		HeapFree
KERNEL32.DLL		GetProcessHeap
KERNEL32.DLL		HeapAlloc
KERNEL32.DLL		HeapReAlloc
KERNEL32.DLL		DeviceIoControl
KERNEL32.DLL		LocalFree
KERNEL32.DLL		LocalAlloc
KERNEL32.DLL		GetCurrentThreadId
KERNEL32.DLL		GetSystemTime
KERNEL32.DLL		LocalFileTimeToFileTime
KERNEL32.DLL		CreateThread
KERNEL32.DLL		MultiByteToWideChar
KERNEL32.DLL		WideCharToMultiByte
KERNEL32.DLL		GetCurrentProcess
KERNEL32.DLL		FreeLibrary
KERNEL32.DLL		LoadLibraryW
KERNEL32.DLL		GlobalFree
KERNEL32.DLL		LeaveCriticalSection
KERNEL32.DLL		EnterCriticalSection
KERNEL32.DLL		InitializeCriticalSection
KERNEL32.DLL		DeleteCriticalSection
KERNEL32.DLL		GetExitCodeProcess
KERNEL32.DLL		WaitForSingleObjectEx
KERNEL32.DLL		OpenProcess
KERNEL32.DLL		VerLanguageNameW
KERNEL32.DLL		CreateFileW
KERNEL32.DLL		InterlockedExchange
KERNEL32.DLL		GetTickCount
KERNEL32.DLL		VerifyVersionInfoW
KERNEL32.DLL		VerSetConditionMask
KERNEL32.DLL		InterlockedIncrement
KERNEL32.DLL		SetEvent
KERNEL32.DLL		WaitForSingleObject
KERNEL32.DLL		InterlockedDecrement
KERNEL32.DLL		InterlockedExchangeAdd
KERNEL32.DLL		ReadProcessMemory
KERNEL32.DLL		VirtualQueryEx
KERNEL32.DLL		RemoveDirectoryW
KERNEL32.DLL		Sleep
KERNEL32.DLL		GetShortPathNameW
KERNEL32.DLL		DuplicateHandle
KERNEL32.DLL		VirtualProtectEx
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		DeleteFileW
KERNEL32.DLL		GetProcessTimes
KERNEL32.DLL		GetSystemTimeAsFileTime
KERNEL32.DLL		MulDiv
KERNEL32.DLL		GlobalUnlock
KERNEL32.DLL		GlobalLock
KERNEL32.DLL		GlobalAlloc
KERNEL32.DLL		WriteFile
KERNEL32.DLL		SetFilePointer
KERNEL32.DLL		DeleteFileA
KERNEL32.DLL		CreateFileA
KERNEL32.DLL		GetLastError
KERNEL32.DLL		ReadFile
KERNEL32.DLL		GetCurrentProcessId
KERNEL32.DLL		GetFileAttributesW
KERNEL32.DLL		TerminateProcess
KERNEL32.DLL		SetUnhandledExceptionFilter
KERNEL32.DLL		ReleaseMutex
KERNEL32.DLL		GetUserDefaultUILanguage
KERNEL32.DLL		GetLocalTime
KERNEL32.DLL		GetDriveTypeW
KERNEL32.DLL		GetTimeFormatW
KERNEL32.DLL		GetDateFormatW
KERNEL32.DLL		FileTimeToSystemTime
KERNEL32.DLL		FileTimeToLocalFileTime
KERNEL32.DLL		CheckRemoteDebuggerPresent
KERNEL32.DLL		CreateDirectoryW
KERNEL32.DLL		WritePrivateProfileStringA
KERNEL32.DLL		GetPrivateProfileStringA
KERNEL32.DLL		GetModuleHandleW
KERNEL32.DLL		SystemTimeToFileTime
KERNEL32.DLL		GetDiskFreeSpaceExW
KERNEL32.DLL		GetVolumeInformationW
KERNEL32.DLL		GetSystemDirectoryA
KERNEL32.DLL		GetCurrentThread
KERNEL32.DLL		OutputDebugStringA
KERNEL32.DLL		GetSystemInfo
KERNEL32.DLL		ResumeThread
KERNEL32.DLL		CreateRemoteThread
KERNEL32.DLL		GetProcessIoCounters
KERNEL32.DLL		SetThreadPriority
KERNEL32.DLL		MoveFileW
KERNEL32.DLL		UnmapViewOfFile
KERNEL32.DLL		MapViewOfFile
KERNEL32.DLL		OpenFileMappingA
KERNEL32.DLL		GetPrivateProfileStringW
KERNEL32.DLL		GetComputerNameW
KERNEL32.DLL		GetFileSizeEx
KERNEL32.DLL		ProcessIdToSessionId
KERNEL32.DLL		GetLocaleInfoW
KERNEL32.DLL		AssignProcessToJobObject
KERNEL32.DLL		GetFileSize
KERNEL32.DLL		SetFileAttributesW
KERNEL32.DLL		InterlockedCompareExchange
KERNEL32.DLL		CopyFileW
KERNEL32.DLL		SetErrorMode
KERNEL32.DLL		CreateEventW
KERNEL32.DLL		OpenThread
KERNEL32.DLL		Thread32Next
KERNEL32.DLL		Thread32First
KERNEL32.DLL		CreateToolhelp32Snapshot
KERNEL32.DLL		CreateFileMappingW
KERNEL32.DLL		CreateDirectoryA
KERNEL32.DLL		GetFileAttributesA
KERNEL32.DLL		ExpandEnvironmentStringsW
KERNEL32.DLL		WinExec
KERNEL32.DLL		SetCurrentDirectoryW
KERNEL32.DLL		GetCurrentDirectoryW
KERNEL32.DLL		GetCommandLineW
KERNEL32.DLL		TryEnterCriticalSection
KERNEL32.DLL		TerminateThread
KERNEL32.DLL		WaitForMultipleObjects
KERNEL32.DLL		GetCommandLineA
KERNEL32.DLL		AddVectoredExceptionHandler
KERNEL32.DLL		SetEndOfFile
ADVAPI32.dll		RegOpenKeyExW
ADVAPI32.dll		SetSecurityInfo
ADVAPI32.dll		InitializeAcl
ADVAPI32.dll		GetLengthSid
ADVAPI32.dll		AllocateAndInitializeSid
ADVAPI32.dll		SetTokenInformation
ADVAPI32.dll		ConvertStringSidToSidW
ADVAPI32.dll		RegNotifyChangeKeyValue
ADVAPI32.dll		RegCloseKey
ADVAPI32.dll		GetUserNameW
ADVAPI32.dll		GetTokenInformation
ADVAPI32.dll		CheckTokenMembership
ADVAPI32.dll		CreateProcessAsUserW
ADVAPI32.dll		CreateWellKnownSid
ADVAPI32.dll		SetThreadToken
ADVAPI32.dll		DuplicateTokenEx
ADVAPI32.dll		OpenProcessToken
ADVAPI32.dll		SetEntriesInAclW
ADVAPI32.dll		FreeSid
CRYPT32.dll		CertCloseStore
CRYPT32.dll		CertGetNameStringW
CRYPT32.dll		CertFindCertificateInStore
CRYPT32.dll		CertOpenStore
CRYPT32.dll		CertGetCertificateContextProperty
dbghelp.dll		MiniDumpWriteDump
GDI32.dll		CreateSolidBrush
GDI32.dll		PatBlt
GDI32.dll		SetGraphicsMode
GDI32.dll		SetWorldTransform
GDI32.dll		BitBlt
GDI32.dll		StretchBlt
GDI32.dll		RoundRect
GDI32.dll		SetPixel
GDI32.dll		CreateRectRgn
GDI32.dll		CreateRoundRectRgn
GDI32.dll		CombineRgn
GDI32.dll		SetTextColor
GDI32.dll		SetBkMode
GDI32.dll		CreateFontA
GDI32.dll		CreateCompatibleBitmap
GDI32.dll		DeleteDC
GDI32.dll		DeleteObject
GDI32.dll		GetObjectW
GDI32.dll		CreateCompatibleDC
GDI32.dll		SelectObject
GDI32.dll		SetBkColor
GDI32.dll		ExtTextOutW
GDI32.dll		GetDeviceCaps
GDI32.dll		CreatePen
GDI32.dll		LineTo
GDI32.dll		MoveToEx
GDI32.dll		ExcludeClipRect
GDI32.dll		SelectClipRgn
GDI32.dll		SetBrushOrgEx
GDI32.dll		CreateDIBSection
GDI32.dll		SetStretchBltMode
GDI32.dll		SetDCBrushColor
GDI32.dll		SetDCPenColor
GDI32.dll		GetPixel
GDI32.dll		GetStockObject
GDI32.dll		Rectangle
GDI32.dll		IntersectClipRect
gdiplus.dll		GdipLoadImageFromStream
gdiplus.dll		GdipDeleteGraphics
gdiplus.dll		GdipDrawImageRect
gdiplus.dll		GdiplusStartup
gdiplus.dll		GdipDisposeImage
gdiplus.dll		GdipGetImageWidth
gdiplus.dll		GdipGetImageHeight
gdiplus.dll		GdipCreateFromHDC
gdiplus.dll		GdiplusShutdown
iphlpapi.dll		GetAdaptersInfo
MSIMG32.dll		AlphaBlend
msvcrt.dll		rand
msvcrt.dll		srand
msvcrt.dll		strftime
msvcrt.dll		localtime
msvcrt.dll		isspace
msvcrt.dll		islower
msvcrt.dll		isxdigit
msvcrt.dll		isdigit
msvcrt.dll		towlower
msvcrt.dll		strncat
msvcrt.dll		_strupr
msvcrt.dll		strstr
msvcrt.dll		_strnicmp
msvcrt.dll		_stricmp
msvcrt.dll		strrchr
msvcrt.dll		strchr
msvcrt.dll		strncpy
msvcrt.dll		_vsnprintf
msvcrt.dll		_wcslwr
msvcrt.dll		_wcsicmp
msvcrt.dll		_wcsnicmp
msvcrt.dll		wcsncpy
msvcrt.dll		wcsncat
msvcrt.dll		_vsnwprintf
msvcrt.dll		iswctype
msvcrt.dll		memcpy
msvcrt.dll		memmove
msvcrt.dll		_except_handler3
msvcrt.dll		wcschr
msvcrt.dll		ceil
msvcrt.dll		_CIlog
msvcrt.dll		_strdup
msvcrt.dll		_snprintf
msvcrt.dll		strncmp
msvcrt.dll		qsort
msvcrt.dll		isprint
msvcrt.dll		isalnum
msvcrt.dll		isalpha
msvcrt.dll		malloc
msvcrt.dll		free
msvcrt.dll		_open
msvcrt.dll		_read
msvcrt.dll		_write
msvcrt.dll		_close
msvcrt.dll		_lseek
msvcrt.dll		_wtoi
msvcrt.dll		_itoa
msvcrt.dll		_CIsin
msvcrt.dll		_CIcos
msvcrt.dll		time
msvcrt.dll		atol
msvcrt.dll		realloc
msvcrt.dll		calloc
msvcrt.dll		_CIpow
msvcrt.dll		system
msvcrt.dll		fopen
msvcrt.dll		fread
msvcrt.dll		fwrite
msvcrt.dll		ftell
msvcrt.dll		fseek
msvcrt.dll		fclose
msvcrt.dll		ferror
msvcrt.dll		sscanf
msvcrt.dll		_itow
msvcrt.dll		atoi
msvcrt.dll		mbstowcs
msvcrt.dll		memset
msvcrt.dll		isupper
msvcrt.dll		_ltoa
msvcrt.dll		_strlwr
msvcrt.dll		tolower
msvcrt.dll		_snwprintf
msvcrt.dll		_wtoi64
msvcrt.dll		wcstoul
msvcrt.dll		sprintf
msvcrt.dll		strpbrk
msvcrt.dll		_CxxThrowException
msvcrt.dll		remove
msvcrt.dll		void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
msvcrt.dll		void __cdecl operator delete(void *) ??3@YAXPAX@Z
msvcrt.dll		wcspbrk
msvcrt.dll		clearerr
msvcrt.dll		fputws
msvcrt.dll		feof
msvcrt.dll		fgetws
msvcrt.dll		fflush
msvcrt.dll		wcsrchr
msvcrt.dll		vswprintf
msvcrt.dll		_vscwprintf
msvcrt.dll		longjmp
msvcrt.dll		_wfopen
msvcrt.dll		_setjmp3
msvcrt.dll		__CxxFrameHandler
msvcrt.dll		_errno
msvcrt.dll		__getmainargs
msvcrt.dll		_cexit
msvcrt.dll		_exit
msvcrt.dll		_XcptFilter
msvcrt.dll		_ismbblead
msvcrt.dll		exit
msvcrt.dll		_acmdln
msvcrt.dll		_initterm
msvcrt.dll		_amsg_exit
msvcrt.dll		__setusermatherr
msvcrt.dll		__p__commode
msvcrt.dll		__p__fmode
msvcrt.dll		__set_app_type
msvcrt.dll		public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
msvcrt.dll		_unlock
msvcrt.dll		__dllonexit
msvcrt.dll		_lock
msvcrt.dll		_onexit
msvcrt.dll		void __cdecl terminate(void) ?terminate@@YAXXZ
msvcrt.dll		_controlfp
msvcrt.dll		mbtowc
msvcrt.dll		__mb_cur_max
msvcrt.dll		isleadbyte
msvcrt.dll		localeconv
msvcrt.dll		_iob
msvcrt.dll		__badioinfo
msvcrt.dll		__pioinfo
msvcrt.dll		_fileno
msvcrt.dll		_lseeki64
msvcrt.dll		_isatty
msvcrt.dll		bsearch
msvcrt.dll		toupper
msvcrt.dll		towupper
NETAPI32.dll		NetShareEnum
NETAPI32.dll		NetApiBufferFree
NETAPI32.dll		NetWkstaGetInfo
NETAPI32.dll		NetUserEnum
ole32.dll		CreateStreamOnHGlobal
Secur32.dll		GetUserNameExW
USER32.dll		GetMonitorInfoW
USER32.dll		EqualRect
USER32.dll		MonitorFromRect
USER32.dll		GetShellWindow
USER32.dll		DispatchMessageW
USER32.dll		TranslateMessage
USER32.dll		GetMessageW
USER32.dll		IsWindow
USER32.dll		GetFocus
USER32.dll		SetMessageExtraInfo
USER32.dll		FindWindowW
USER32.dll		DrawIcon
USER32.dll		SetTimer
USER32.dll		KillTimer
USER32.dll		GetWindowTextA
USER32.dll		ScreenToClient
USER32.dll		EnableMenuItem
USER32.dll		GetClassNameA
USER32.dll		InflateRect
USER32.dll		DrawFrameControl
USER32.dll		OffsetRect
USER32.dll		SetWindowsHookExW
USER32.dll		UnhookWindowsHookEx
USER32.dll		GetMessageExtraInfo
USER32.dll		SetWindowTextA
USER32.dll		GetWindowDC
USER32.dll		GetGuiResources
USER32.dll		wsprintfW
USER32.dll		IsWindowVisible
USER32.dll		EnumDisplayDevicesW
USER32.dll		CheckMenuItem
USER32.dll		LoadImageA
USER32.dll		DestroyIcon
USER32.dll		GetAncestor
USER32.dll		keybd_event
USER32.dll		LockWorkStation
USER32.dll		PostThreadMessageW
USER32.dll		CreateDesktopW
USER32.dll		CharToOemBuffW
USER32.dll		CharUpperA
USER32.dll		OemToCharA
USER32.dll		CharToOemA
USER32.dll		CharUpperW
USER32.dll		SwitchToThisWindow
USER32.dll		SetWinEventHook
USER32.dll		UnhookWinEvent
USER32.dll		MessageBoxW
USER32.dll		MessageBeep
USER32.dll		WaitForInputIdle
USER32.dll		SendMessageW
USER32.dll		GetDlgItem
USER32.dll		CallNextHookEx
USER32.dll		GetClassNameW
USER32.dll		GetGUIThreadInfo
USER32.dll		GetWindowThreadProcessId
USER32.dll		GetForegroundWindow
USER32.dll		GetAsyncKeyState
USER32.dll		MapVirtualKeyExW
USER32.dll		GetKeyboardLayout
USER32.dll		SendInput
USER32.dll		PostMessageW
USER32.dll		SetLayeredWindowAttributes
USER32.dll		SetWindowLongW
USER32.dll		GetWindowLongW
USER32.dll		MoveWindow
USER32.dll		ReleaseDC
USER32.dll		GetWindowRect
USER32.dll		GetDC
USER32.dll		FindWindowA
USER32.dll		SetRect
USER32.dll		ClientToScreen
USER32.dll		DestroyWindow
USER32.dll		SetWindowPos
USER32.dll		SetWindowTextW
USER32.dll		InvalidateRect
USER32.dll		SetFocus
USER32.dll		SetForegroundWindow
USER32.dll		AttachThreadInput
USER32.dll		ShowWindow
USER32.dll		IsIconic
USER32.dll		GetSystemMetrics
USER32.dll		GetWindowTextW
USER32.dll		SetCursor
USER32.dll		LoadCursorW
USER32.dll		EnableWindow
USER32.dll		DefWindowProcW
USER32.dll		SystemParametersInfoW
USER32.dll		LoadImageW
USER32.dll		DrawTextW
USER32.dll		GetDesktopWindow
USER32.dll		SetWindowRgn
USER32.dll		GetClientRect
USER32.dll		MapWindowPoints
USER32.dll		GetMessagePos
USER32.dll		GetCursorPos
USER32.dll		CreateWindowExW
USER32.dll		CallWindowProcW
USER32.dll		PostQuitMessage
USER32.dll		UpdateWindow
USER32.dll		EndPaint
USER32.dll		FillRect
USER32.dll		BeginPaint
USER32.dll		DrawTextA
USER32.dll		FindWindowExW
USER32.dll		FindWindowExA
USER32.dll		CloseClipboard
USER32.dll		SetClipboardData
USER32.dll		EmptyClipboard
USER32.dll		OpenClipboard
USER32.dll		PtInRect
USER32.dll		EnumWindows
VERSION.dll		GetFileVersionInfoW
VERSION.dll		GetFileVersionInfoSizeW
VERSION.dll		VerQueryValueW
WINHTTP.dll		WinHttpSetCredentials
WINHTTP.dll		WinHttpConnect
WINHTTP.dll		WinHttpOpenRequest
WINHTTP.dll		WinHttpSetTimeouts
WINHTTP.dll		WinHttpSetOption
WINHTTP.dll		WinHttpSendRequest
WINHTTP.dll		WinHttpReceiveResponse
WINHTTP.dll		WinHttpAddRequestHeaders
WINHTTP.dll		WinHttpCloseHandle
WINHTTP.dll		WinHttpReadData
WINHTTP.dll		WinHttpQueryHeaders
WININET.dll		InternetQueryOptionW
WINSPOOL.DRV		EnumPrintersW
WINTRUST.dll		CryptCATAdminCalcHashFromFileHandle
WINTRUST.dll		CryptCATAdminReleaseCatalogContext
WINTRUST.dll		CryptCATAdminReleaseContext
WINTRUST.dll		CryptCATAdminAcquireContext
WINTRUST.dll		WinVerifyTrust
WINTRUST.dll		CryptCATCatalogInfoFromContext
WINTRUST.dll		CryptCATAdminEnumCatalogFromHash
WS2_32.dll	3
WS2_32.dll	19
WS2_32.dll	4
WS2_32.dll	23
WS2_32.dll	11
WS2_32.dll	52
WS2_32.dll	9
WS2_32.dll		freeaddrinfo
WS2_32.dll		WSAAddressToStringA
WS2_32.dll		getaddrinfo

StringTable 040904B0

CompanyName	Webroot
FileDescription	Webroot SecureAnywhere
FileVersion	9.0.9.78
InternalName	WRSA.exe
LegalCopyright	(c) Webroot 2006-2016
OriginalFilename	WRSA.exe
ProductName	Webroot SecureAnywhere
ProductVersion	9.0.9.78

VS_FIXEDFILEINFO

FileVersion	9.0.9.78
ProductVersion	9.0.9.78
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	8
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	2668544	EXE	06/07/2016 22:29:39	#
15c1	15	HTM		#
1d758	44	HTM		#
270988	5064	PNG	(260 x 50)	#
272638	528	PNG	(14 x 14)	#
272848	663	PNG	(14 x 14)	#
272ae0	529	PNG	(14 x 14)	#
272cf8	353	PNG	(14 x 14)	#
272e60	530	PNG	(14 x 14)	#
273078	446	PNG	(14 x 14)	#
273238	123	PNG	(14 x 14)	#
2732b8	149	PNG	(16 x 7)	#
273350	533	PNG	(16 x 14)	#
273568	649	PNG	(14 x 14)	#
2737f8	350	PNG	(16 x 16)	#
273958	445	PNG	(16 x 16)	#
273b18	706	PNG	(16 x 16)	#
273de0	648	PNG	(14 x 14)	#
274068	651	PNG	(16 x 16)	#
2742f8	289	PNG	(3 x 28)	#
274420	237	PNG	(1 x 28)	#
274510	289	PNG	(3 x 28)	#
274638	318	PNG	(4 x 24)	#
274778	204	PNG	(1 x 24)	#
274848	331	PNG	(5 x 24)	#
274998	328	PNG	(5 x 28)	#
274ae0	210	PNG	(1 x 28)	#
274bb8	336	PNG	(5 x 28)	#
274d08	416	PNG	(33 x 13)	#
274ea8	413	PNG	(33 x 13)	#
275048	198	PNG	(14 x 14)	#
275110	221	PNG	(14 x 14)	#
2751f0	130	PNG	(14 x 14)	#
275278	556	PNG	(26 x 25)	#
2754a8	3788	PNG	(82 x 134)	#
276378	1081	PNG	(36 x 48)	#
2767b8	873	PNG	(36 x 48)	#
276b28	397	PNG	(4 x 24)	#
276cb8	214	PNG	(1 x 24)	#
276d90	401	PNG	(4 x 24)	#
276f28	143	PNG	(3 x 18)	#
276fb8	97	PNG	(1 x 18)	#
277020	143	PNG	(3 x 18)	#
2770b0	97	PNG	(1 x 18)	#
277118	706	PNG	(16 x 16)	#
2773e0	514	PNG	(16 x 16)	#
2775e8	803	PNG	(16 x 16)	#
277910	425	PNG	(16 x 16)	#
277ac0	474	PNG	(16 x 16)	#
277ca0	757	PNG	(16 x 16)	#
277f98	642	PNG	(16 x 16)	#
278220	551	PNG	(16 x 16)	#
278448	565	PNG	(16 x 16)	#
278680	2237	PNG	(40 x 47)	#
278f40	1803	PNG	(40 x 47)	#
279650	600	PNG	(16 x 16)	#
2798a8	555	PNG	(16 x 16)	#
279ad8	2119	PNG	(59 x 59)	#
27a320	241	PNG	(4 x 24)	#
27a418	135	PNG	(1 x 24)	#
27a4a0	217	PNG	(4 x 24)	#
28b800	31192	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 2699736 bytes (2637 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

wsafnbids.unpacked.exe- WRSA.exe - Webroot SecureAnywhere

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

wsafnbids.unpacked.exe
- WRSA.exe - Webroot SecureAnywhere