4cd2b175c1ba046d925463769e52d860

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2011-Nov-14 22:16:00
Detected languages English - United States
CompanyName Citrix Online, a division of Citrix Systems, Inc.
FileDescription GoToMeeting Installer Extractor
FileVersion 5.1 Build 880
InternalName GoToMeeting Installer Extractor
LegalCopyright Copyright © 2004-2010 Citrix Systems, Inc.
OriginalFilename G2MInstallerExtractor.exe
ProductName GoToMeeting
ProductVersion 5.1 Build 880

Plugin Output

Suspicious PEiD Signature: UPX V2.00-V2.90 -> Markus Oberhumer & Laszlo Molnar & John Reiser
UPX v2.0 -> Markus, Laszlo & Reiser (h)
UPX 2.00-3.0X -> Markus Oberhumer & Laszlo Molnar & John Reiser
UPX V2.00-V2.90 -> Markus Oberhumer & Laszlo Molnar & John Reiser
UPX 2.00-3.0X -> Markus Oberhumer & Laszlo Molnar & John Reiser
Suspicious The PE is packed with UPX Unusual section name found: UPX0
Section UPX0 is both writable and executable.
Unusual section name found: UPX1
Section UPX1 is both writable and executable.
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Can access the registry:
  • RegOpenKeyA
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
Info The PE's resources present abnormal characteristics. Resource 4501 is possibly compressed or encrypted.
Resource 4502 is possibly compressed or encrypted.
Resource 4503 is possibly compressed or encrypted.
Resource 4504 is possibly compressed or encrypted.
Resource 4505 is possibly compressed or encrypted.
Resource 4506 is possibly compressed or encrypted.
Resource 4507 is possibly compressed or encrypted.
Resource 4508 is possibly compressed or encrypted.
Resource 4509 is possibly compressed or encrypted.
Resource 4510 is possibly compressed or encrypted.
Resource 201 is possibly compressed or encrypted.
Resource 202 is possibly compressed or encrypted.
Resource 38 is possibly compressed or encrypted.
Resource 39 is possibly compressed or encrypted.
Resource 40 is possibly compressed or encrypted.
Resource 270 is possibly compressed or encrypted.
Info The PE is digitally signed. Signer: Citrix Online
Issuer: VeriSign Class 3 Code Signing 2009-2 CA
Safe VirusTotal score: 0/66 (Scanned on 2022-03-25 13:20:22) All the AVs think this file is safe.

Hashes

MD5 4cd2b175c1ba046d925463769e52d860
SHA1 62139eca57bfefad20f1382e19316a324feeeb2f
SHA256 c5b08bf639bd77ddd027867f74fd6dce2393eb4b5524654ecab94774c9f2bec0
SHA3 828b6cccfc9bcdec92f1ac69a6f715ec46b49fb1b74857aac0d03d86a0940683
SSDeep 98304:lK6XjZOcMw2sukZMJmTjmfSEIo6sABE94hXPjDth1CavzSUpmj9tBKlE0QYZprTn:lKWjZR9vTjmfSEOnCSh1JbSKmT4u07Z5
Imports Hash 55be86217f4c677be1228332cc9bbb9c

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2011-Nov-14 22:16:00
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 7.0
SizeOfCode 0x4fb000
SizeOfInitializedData 0x8000
SizeOfUninitializedData 0xc40000
AddressOfEntryPoint 0x0113B460 (Section: UPX1)
BaseOfCode 0xc41000
BaseOfData 0x113c000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x1144000
SizeOfHeaders 0x1000
Checksum 0x50ce41
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

UPX0

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0xc40000
VirtualAddress 0x1000
SizeOfRawData 0
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1

MD5 39937ce4a3a5d648e63881b3bf6ae90a
SHA1 9dd298e224b8827c15acd87efc1a2efdb4b91db9
SHA256 47d4ec99c8bb54bd5f1c09420f0832f4af35de9f0c20ed0b0445ffd4b1664c81
SHA3 bcbf610bee160189367a063aa2f1b9e04bc4055a9e7e95688a6081a311e40ffe
VirtualSize 0x4fb000
VirtualAddress 0xc41000
SizeOfRawData 0x4fb000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.99996

.rsrc

MD5 be3efb5289f0e2a02aa92eb68af16ad1
SHA1 f387e453ae7e0dfa30656dd43b8520e5af9bb442
SHA256 aa69770450c3c7b7b0124624607206f5ab1cc320fb40fa686d38fecc92414d59
SHA3 726addcb9a95c9eeea941d4ad9787b85ea1f62b9fc081f26d10d941623393117
VirtualSize 0x8000
VirtualAddress 0x113c000
SizeOfRawData 0x7a00
PointerToRawData 0x4fb400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.47877

Imports

KERNEL32.DLL LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
ADVAPI32.dll RegOpenKeyA
MSVCRT.dll exit
SHELL32.dll ShellExecuteExA
USER32.dll SetTimer

Delayed Imports

4501

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x9b88
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99555
MD5 3b22da2a1a75e619bf972853a36f7c54
SHA1 9077ae28a39e1b721863f2e378bd57ed2d2bc607
SHA256 61236cfcd1dbbb72f2f858a5f3724af1bc0f7c058189dfe9501a35546dbd5db8
SHA3 59136b77ff7d167e86ce46690abed5953e048abebddef9f6954c2a03bf8c2b22

4502

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3f790
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99931
MD5 4e115aa72de3ecad08e042a540a78e19
SHA1 d6457ae643bbb9bf008b284e33ad147c1876ab3c
SHA256 d5e175ed7c384859002cb8edb92fbeed47c1c813e461bfd02ba6a627fa415f71
SHA3 d42079a399b59e73c2fe0c3048e91f010c489e42aac10132ce5645e1cd08ea3c

4503

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x31d88
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99911
MD5 3beeea0f6eb5f19acffb105a5d592ee8
SHA1 43c61f24925678f137b05a19a6de810b7ec5cfa1
SHA256 856f0e75961acd6b6a49c9d495b339b784f492bce5c6e7f770ad0e4bf9c5398b
SHA3 daeab39da5bdf2efe7ec86ff3dd65c0fcf0445807b3e253680647231992aa4e8

4504

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x3180
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98638
MD5 fe5b0d6da865bad7896cd81f7cbe73b3
SHA1 93f766c6eb8bdd079c565b4b6692acfa6f71c5f7
SHA256 e06466f8b345600ffc87827265665b07147acdceae95ca9afd561865de67831c
SHA3 bfd3992c7b8a2b5617ae7eecc0952afb556b4fd004499934b1860118b1b41490

4505

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x138388
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99985
MD5 511153bd7a9c9ac5fb20ed53c4bb8b4b
SHA1 f56fdf6bdc919482207b651980fd031dce2e73bf
SHA256 3fd69158078f692d0cca432bf8b9c1c33aa608da2d93196425fc67312cb0d539
SHA3 fe7dfa0f0de7d98e082a92f66d2e258709ab2fbd8738d4da9dbcecc985677e77

4506

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x1d988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99838
MD5 53ce3cf61c552bd8c835867e408617e1
SHA1 579c8c413df542ee58352d28f5f6d6bc6a795c0b
SHA256 9f36c69c591a2c1e45beada7db624613789605be26fbec14f7d7d06613b6da0e
SHA3 4afcb6249f101df440bd3384089d7b168d5e3849b2b756d839d99a99112c37ab

4507

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x9b88
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.9954
MD5 08ca7b92f2d02ae4ad371761a5cc9fb0
SHA1 d7c6d94ce7ef723e35101b69e71232b8f39dc0cc
SHA256 c75bcff610b804d669b94985a5e66c27e49355be785707969d69ab845d6d8fbc
SHA3 23917ccd36e42d1471141573b759890da96c3215d9cc2fb409ca9ddad4669e45

4508

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0xd1d6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99636
MD5 e68823735f557e1d31c255d747531a16
SHA1 ac888e4bffc54532fb454bd0e4d8d67ace89a68c
SHA256 61eb038a7d11ac64e6de2700e2b59a573f40a17a4986693090c0f730b9d26aa8
SHA3 2838232ef7bb01c99a97c4efd3c2d2b07179f6b629efd9c64496f100b7b72727

4509

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x4a590
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99935
MD5 209cd36a6ed3538332bcb41394fc0e2a
SHA1 9a32395cadbf33d2b9104ac0cbf2c411cbe02215
SHA256 c7e32e84662671d4756e652cf1155bb6f46c8b05a4b7155e9eb1191e6a791cdb
SHA3 38a6d7fe14f44b4f41eb53408542e3c876d6b778628a61a065ac546a6cebdd73

4510

Type TEXT
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x800
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91931
MD5 e984571115874be3180d8103d9471fa3
SHA1 5d6da879f902d956dadd9936e2e3c1c38b4d3a45
SHA256 3a1f2b13611e43cc5ce8bd38ce8d8a001d33efe3527d5897763ef3363247b6e9
SHA3 04393ebe83c02b1684d7e602c35527542b8c07dc941f2c93d122246b0752d77a

1

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.60779
MD5 2fb6d6e70f6f02779e78d96076a321b5
SHA1 d570aaedb67bc86e232eac3a1a320619db2438d0
SHA256 2101ccf875b52f32485e481c1a8c10f963a8f5c9fdd215991d5da5e919f07ff4
SHA3 16ab6c132f7d4d982ae06faaab691856e1fb78a65f39ed72c2a0637a674226da

2

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.28928
MD5 872c34e1856dd37fb22e76c8a25a9d5a
SHA1 081b1077000c6fb3694a2fcbd34b45c39d8c6c83
SHA256 f258ed02b2eddd4c81629afe9eaadb77f333035c08662daa643be262f4ea32e2
SHA3 be9328e624b5d279813e2313f07af05685fc768bb16417726588a6b731208aaa

3

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x6c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.11988
MD5 0ff0a93a3a1348dc601964388923e883
SHA1 325e0e5d944ece12a2eeea48ab1641ded5d6405e
SHA256 1b0c706c05a3f147ebea9b205c5e3efd84e00c9206f67f468fbb9a89306f4780
SHA3 36cf73db462d60dc47217f17996e5406f8d7be98c1bccd7a24ea4a3aa2248838

4

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.9054
MD5 e1fecb8994286ef9f8d43c1ad99f01a7
SHA1 c7975c2e21f66f0411c7b125a132e1842b6646c9
SHA256 bf1055f34ca82c572a7dad1f9264b420db36b304ace79534c02a065b86188125
SHA3 433b3648ae82ccd4090a1a942958f4177e116ee766eb22113bc120b546b1844c

5

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.09716
MD5 a714e4166b38ec2f71f31d1a8b7e35d5
SHA1 6012706591171ba116e197545540d8be6d796f1f
SHA256 efbb1434b6f5c0412b7e7441f533064426791fab2aa8f05ea0bb2e250b823b66
SHA3 069f7ac77c5fb21285ea323e4953558630f330a847da00ff377d7afd54da3bac

6

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.58221
MD5 48b3134d5616a0fad207dc998e647fbe
SHA1 0242cabb869e66b655edd41d68c67dd503e93286
SHA256 92067cd181a461ecc3c6d3e98b8f965a53da2643ea7c04edfd32a75b53b293da
SHA3 8e745d4b9e3f1e747a5eabe76020b1ef27f8934d66948053db5cee470c25a2a0

7

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.87498
MD5 8882ec4ed59f333f251a0572c6072466
SHA1 02011bc2d9859af5203cb05c1f386f88e36fbf2c
SHA256 450d681dcc789c45c11db4e32f23d84f5ac90035f501cf37de2eece53dccfcc0
SHA3 0f142eff85a113f7dcc33bbe343a0ea8040206550dd544fbd1c126e5879b3fb3

8

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.82284
MD5 f76e3dbbeca9a5d2ac4dd654088c4c2a
SHA1 0f4b7aaad0e082e6c94cac2ffe52ef70f668b601
SHA256 eea55693bc18e59104249763be4d6185f3709c3a9965020e910e304664f9c2eb
SHA3 9dbd5bf01ad0ac350352ae69f0e09a20328e48d3c3e31eb235082820fba14802

9

Type RT_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.9681
MD5 f7de36a1d6fa06082f422d8d338a7ab8
SHA1 7e1b2350d4241f32996280df42ebdadfbc4487c2
SHA256 7c4ae574fb2bc7ab107e6fe47d13e982d62bd2098cc8fc08985332c2ce0c6c2a
SHA3 7897668c01a450523004bd0ec60ff9ec4d25e7c805d4673cd6c8f8c754cc4f3a

201

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0xf0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.15452
MD5 73ab9d7ad4cf9fa4a4901e9c555cb74e
SHA1 cb6a46053d8b9cd1d7b634b1582f240b162f399b
SHA256 1e894084baaa344bcda4ff7ade03a48096fbe63596ca6bbedcbe36933d46c884
SHA3 9c1002ef7c56b3a25696dc0ccccb3baf2e19abbf5366dcb73b4df5342f6e62ab

202

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x1c2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.46702
MD5 12c9c93a9167a4ef49a801123b9239f5
SHA1 f08c3a1ba3658b29afa624d0567e63c27fe0f746
SHA256 0af016824ca19f43d798711168d97b62bd7670724c38530e3321bae3d95e7843
SHA3 d459a6a495720ab193b1d1b90e97aeec0cb321cadb348a97cfc2912b1346423e

38

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x238
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.63406
MD5 141211f5a4fa516b02f52209e0f09f33
SHA1 d006086f9ff16b9461479aab54ae4c451fb9a473
SHA256 47dec59eb3e146a7343ca8877c7e071354cb7ed77a1281a1a4138d450c730911
SHA3 9b8debb20e66ec93beea30a9d51f89957e7858b6b9b7a158df2ef70a64e7ca5e

39

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x50e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.83674
MD5 cdd355a7d3a0aabc54c24d78a75723e5
SHA1 9065ae6b64b449673c813ce78dee95af38e962cc
SHA256 667fae668838a110e48e9a376cb93045bf0cb85fd73146aef0dc4d1b540fbb9d
SHA3 2928f5038a7ad646d8324bd3c5d1a21aeaf483bcb70f29a024580d127d4e4f44

40

Type RT_STRING
Language English - United States
Codepage Latin 1 / Western European
Size 0x232
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.67375
MD5 ecd1380db31b67f538c5295b98674716
SHA1 dd220700a699ac7c7f696d80b44d3a2c39c69398
SHA256 296192516f54f1baf4cacdbd3e5531311c57864993f4199244d7a6ed6cf55928
SHA3 506a1630b31275b3da40cd95fb0ef0eb48e9c5a086b5e218b3393baf4ed14e41

263

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x40
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.76945
MD5 f398f70ef5fed7905be71720f776b61a
SHA1 2b8968c869160858f22f9b1fe4a82aebfcc1d5d4
SHA256 a8dde54aeae1a362243dec8d5bf2f7ebf5cdeaf4a89e5d026ccfa4f9a43a3d85
SHA3 da292e4c1501c17e3b50227efe57e31b8701a0768fb800db02418b1b4bfa6685

269

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x9e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.84163
MD5 50790eeacfbb3060153e912634c71f90
SHA1 fa194ba4be91f13f1b1d16c8463df775b2bbe20b
SHA256 b583aa918397bbe9df81742cfefffc1806d50ca5bb9a3580eec84019c33bff44
SHA3 b9895f0ff3041783d806af9a662e56c3f5b445eb0eb1d792e55a012824a98aab

270

Type RT_STRING
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x10c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.27658
MD5 5d6b60f411b1db8df6d22641e8477e8a
SHA1 7286dff66164c5d26506e6f59102e889c19ff515
SHA256 5cadde47a7c0216e6c93f204085f9bf2ff0df02f10bbf1665137ba77e918cea1
SHA3 10fefd73bbc959f878a44034300fedef86bd474337e4dcf8aed3fba9d87e9b36

4210

Type RT_RCDATA
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2
MD5 4d02731d6376d32882476d53e811f1d3
SHA1 07034e86238a446fddf71073a472c98039be2feb
SHA256 aaf161c46f4ab750d87815b64d64d0bc1d974e23bb2c1ea990817ecd5c3219ae
SHA3 b9925aa19e925a5fc59b24d2a372fa22cb55c0abe2180f1d453835866f258bd6

101

Type RT_GROUP_ICON
Language English - United States
Codepage Latin 1 / Western European
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.91584
Detected Filetype Icon file
MD5 ad9dc76fd3d3510b67b28043e00af0c3
SHA1 11bbd537434d75d6c9dc2b770acae58a9008b16b
SHA256 9665e76967c537034883900a88ce3eb918e0e4d1c52cccd01554b0ed20e4ffaa
SHA3 6169dd505e73a29a83c39e15ded9b0b56354a822ea8e5286e80e1d10d2c03734

1 (#2)

Type RT_VERSION
Language English - United States
Codepage Latin 1 / Western European
Size 0x3b4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.47255
MD5 bdbb6c2819c85bed85ded57dd15ffbcb
SHA1 0190863f498bd4e07495d3ae90113f1aea77268e
SHA256 d3756c570691989415ff6a788eab0c02e92b370c51512853ae3e3b6458126b9a
SHA3 ac9f69060bf8684c5bb09e87ec685461917b88725685988ef1a644b85637da23

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage Latin 1 / Western European
Size 0x352
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.02451
MD5 68bd97a3c207b7b5f91824dc4af9b973
SHA1 f2f223d120c988827816da2a6217f080a2ddd77d
SHA256 32d8fe626ed431c83b7499f1b73556f27d2701f59a9df3db7587e329b677e6b8
SHA3 d682a31f7581d2a64ea345b3c0199a50ac3568e451be281715c3ada2e0009932

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.1.0.880
ProductVersion 5.1.880.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName Citrix Online, a division of Citrix Systems, Inc.
FileDescription GoToMeeting Installer Extractor
FileVersion (#2) 5.1 Build 880
InternalName GoToMeeting Installer Extractor
LegalCopyright Copyright © 2004-2010 Citrix Systems, Inc.
OriginalFilename G2MInstallerExtractor.exe
ProductName GoToMeeting
ProductVersion (#2) 5.1 Build 880
Resource LangID English - United States

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0xeb01ef35
Unmarked objects 0
Imports (9210) 2
Imports (2067) 2
Imports (2179) 4
14 (7299) 1
C objects (8047) 11
Linker (8047) 3
Total imports 127
C++ objects (6015) 1
ASM objects (VS2003 (.NET) build 3077) 2
C++ objects (VS2003 (.NET) build 3077) 2
C++ objects (VS2003 (.NET) SP1 build 6030) 14
94 (VS2003 (.NET) build 3052) 1
Linker (VS2003 (.NET) SP1 build 6030) 1

Errors

[*] Warning: Ignored an invalid IMAGE_RESOURCE_DATA_ENTRY [*] Warning: Section UPX0 has a size of 0! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8!
<-- -->