General

Malware Config

Signatures

Files

• InstAccountsManager.zip

  .zip
• InstAccountsManager/Antigate.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/DotNetZip.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 444KB - Virtual size: 443KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 932B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/InstAccountsManager.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  JwdA B

  Size: 512B - Virtual size: 368B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 8.9MB - Virtual size: 8.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  zcoRY

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/MailBee.NET.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c

  Certificate

  Issuer

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  17-10-2017 00:00

  Not After

  17-10-2021 23:59

  Subject

  CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af

  Certificate

  Issuer

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  09-05-2013 00:00

  Not After

  08-05-2028 23:59

  Subject

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  01-08-2030 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c

  Certificate

  Issuer

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  17-10-2017 00:00

  Not After

  17-10-2021 23:59

  Subject

  CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af

  Certificate

  Issuer

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  09-05-2013 00:00

  Not After

  08-05-2028 23:59

  Subject

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  01-08-2030 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f8:56:c8:88:01:ea:4d:48:3a:00:03:09:82:c9:51:90:7f:b1:4c:68:df:eb:d5:86:e4:c7:69:34:f8:62:e7:20

  Signer

  Actual PE Digest

  f8:56:c8:88:01:ea:4d:48:3a:00:03:09:82:c9:51:90:7f:b1:4c:68:df:eb:d5:86:e4:c7:69:34:f8:62:e7:20

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

  11-05-2023 10:06

  Valid: false

  a0:64:2f:c8:99:7d:ed:8b:81:8d:9a:b7:51:62:68:da:06:a6:9c:55

  Signer

  Actual PE Digest

  a0:64:2f:c8:99:7d:ed:8b:81:8d:9a:b7:51:62:68:da:06:a6:9c:55

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

  11-05-2023 10:06

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/Newtonsoft.Json.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2031 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27-04-2018 12:41

  Not After

  27-04-2028 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25-10-2018 00:00

  Not After

  29-10-2021 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  04-01-2017 00:00

  Not After

  18-01-2028 00:00

  Subject

  CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

  Signer

  Actual PE Digest

  a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  22-04-2019 01:06

  Valid: true

  Chain 1

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 649KB - Virtual size: 649KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/Rucaptcha.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/System.Data.SQLite.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 308KB - Virtual size: 306KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/Updater.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Code Sign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:01:3c:d2:aa:b2:6a:69:ce:f0:f5:ec:23:28:e4:25

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  03-05-2021 00:00

  Not After

  07-05-2024 23:59

  Subject

  CN=Nebesnyi Bohdan,O=Nebesnyi Bohdan,L=Letychiv,ST=Khmelnytskyi Oblast,C=UA

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  23-10-2020 00:00

  Not After

  22-01-2032 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  d9:5f:98:60:0e:0c:4a:9f:cc:f2:06:8a:e2:a0:3b:61:9f:1e:2d:02

  Signer

  Actual PE Digest

  d9:5f:98:60:0e:0c:4a:9f:cc:f2:06:8a:e2:a0:3b:61:9f:1e:2d:02

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Nebesnyi Bohdan,O=Nebesnyi Bohdan,L=Letychiv,ST=Khmelnytskyi Oblast,C=UA

  11-05-2023 10:06

  Valid: true

  Chain 1

  CN=Nebesnyi Bohdan,O=Nebesnyi Bohdan,L=Letychiv,ST=Khmelnytskyi Oblast,C=UA

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 647KB - Virtual size: 647KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 39KB - Virtual size: 39KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/WebDriver.Support.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 49KB - Virtual size: 49KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/WebDriver.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/chromedriver.exe

  .exe windows x86

  0d53ef2be22ebfa8284d8bcca6319c7f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  ActivateKeyboardLayout

  AllowSetForegroundWindow

  CreateWindowExW

  DefWindowProcW

  DestroyWindow

  DispatchMessageW

  GetKeyboardLayoutList

  GetKeyboardLayoutNameW

  GetQueueStatus

  GetWindowLongW

  KillTimer

  LoadKeyboardLayoutW

  MapVirtualKeyW

  MsgWaitForMultipleObjectsEx

  PeekMessageW

  PostMessageW

  PostQuitMessage

  RegisterClassExW

  SetTimer

  SetWindowLongW

  ToUnicode

  TranslateMessage

  UnregisterClassW

  VkKeyScanW

  ws2_32

  WSACloseEvent

  WSACreateEvent

  WSAEnumNetworkEvents

  WSAEventSelect

  WSAGetLastError

  WSAGetOverlappedResult

  WSAIoctl

  WSARecvFrom

  WSAResetEvent

  WSASend

  WSASendTo

  WSASocketW

  WSAStartup

  accept

  bind

  closesocket

  connect

  freeaddrinfo

  getaddrinfo

  getpeername

  getsockname

  getsockopt

  htonl

  ioctlsocket

  listen

  recv

  recvfrom

  sendto

  setsockopt

  shutdown

  socket

  kernel32

  AcquireSRWLockExclusive

  AcquireSRWLockShared

  AssignProcessToJobObject

  CancelIo

  CloseHandle

  CompareStringW

  CreateDirectoryW

  CreateEventW

  CreateFileA

  CreateFileMappingW

  CreateFileW

  CreateIoCompletionPort

  CreateProcessW

  CreateThread

  DecodePointer

  DeleteCriticalSection

  DeleteFileW

  DuplicateHandle

  EncodePointer

  EnterCriticalSection

  EnumSystemLocalesW

  ExitProcess

  ExpandEnvironmentStringsW

  FileTimeToSystemTime

  FindClose

  FindFirstFileExW

  FindNextFileW

  FlushFileBuffers

  FormatMessageA

  FormatMessageW

  FreeEnvironmentStringsW

  FreeLibrary

  GetACP

  GetCPInfo

  GetCommandLineA

  GetCommandLineW

  GetConsoleCP

  GetConsoleMode

  GetCurrencyFormatEx

  GetCurrentDirectoryW

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThread

  GetCurrentThreadId

  GetDateFormatEx

  GetDiskFreeSpaceExW

  GetDriveTypeW

  GetDynamicTimeZoneInformation

  GetEnvironmentStringsW

  GetEnvironmentVariableW

  GetExitCodeProcess

  GetFileAttributesExW

  GetFileAttributesW

  GetFileInformationByHandle

  GetFileSizeEx

  GetFileType

  GetFullPathNameW

  GetGeoInfoW

  GetLastError

  GetLocalTime

  GetLocaleInfoEx

  GetLocaleInfoW

  GetLongPathNameW

  GetModuleFileNameW

  GetModuleHandleExW

  GetModuleHandleW

  GetNativeSystemInfo

  GetNumberFormatEx

  GetOEMCP

  GetProcAddress

  GetProcessId

  GetProcessTimes

  GetQueuedCompletionStatus

  GetStartupInfoW

  GetStdHandle

  GetStringTypeW

  GetSystemDirectoryW

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetTempPathW

  GetThreadId

  GetThreadPriority

  GetThreadTimes

  GetTickCount

  GetTimeFormatEx

  GetTimeZoneInformation

  GetUserDefaultLCID

  GetUserDefaultLocaleName

  GetUserGeoID

  GetVersionExW

  GetWindowsDirectoryW

  GlobalFree

  GlobalMemoryStatusEx

  HeapAlloc

  HeapCreate

  HeapDestroy

  HeapFree

  HeapReAlloc

  HeapSize

  InitOnceExecuteOnce

  InitializeConditionVariable

  InitializeCriticalSection

  InitializeCriticalSectionAndSpinCount

  InitializeSListHead

  InitializeSRWLock

  InterlockedPushEntrySList

  IsDebuggerPresent

  IsProcessorFeaturePresent

  IsValidCodePage

  IsValidLocale

  LCMapStringW

  LeaveCriticalSection

  LoadLibraryExA

  LoadLibraryExW

  LoadLibraryW

  LocalFree

  MapViewOfFile

  MoveFileExW

  MoveFileW

  MultiByteToWideChar

  OutputDebugStringA

  PostQueuedCompletionStatus

  QueryPerformanceCounter

  QueryPerformanceFrequency

  QueryThreadCycleTime

  RaiseException

  ReadConsoleW

  ReadFile

  RegisterWaitForSingleObject

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  RemoveDirectoryW

  ReplaceFileW

  ResetEvent

  ResolveLocaleName

  RtlCaptureStackBackTrace

  RtlUnwind

  SetEndOfFile

  SetEnvironmentVariableW

  SetEvent

  SetFileAttributesW

  SetFilePointer

  SetFilePointerEx

  SetFileTime

  SetHandleInformation

  SetLastError

  SetStdHandle

  SetThreadPriority

  SetUnhandledExceptionFilter

  Sleep

  SleepConditionVariableSRW

  SwitchToThread

  SystemTimeToFileTime

  SystemTimeToTzSpecificLocalTime

  TerminateProcess

  TlsAlloc

  TlsFree

  TlsGetValue

  TlsSetValue

  TryAcquireSRWLockExclusive

  TzSpecificLocalTimeToSystemTime

  UnhandledExceptionFilter

  UnmapViewOfFile

  UnregisterWaitEx

  VerSetConditionMask

  VerifyVersionInfoW

  VirtualProtect

  VirtualQuery

  WaitForSingleObject

  WaitForSingleObjectEx

  WakeAllConditionVariable

  WakeConditionVariable

  WideCharToMultiByte

  WriteConsoleW

  WriteFile

  iphlpapi

  GetAdaptersAddresses

  shell32

  CommandLineToArgvW

  SHGetFolderPathW

  SHGetKnownFolderPath

  userenv

  CreateEnvironmentBlock

  DestroyEnvironmentBlock

  advapi32

  CreateProcessAsUserW

  EventRegister

  EventUnregister

  EventWrite

  InitializeSecurityDescriptor

  RegCloseKey

  RegCreateKeyExW

  RegNotifyChangeKeyValue

  RegOpenKeyExW

  RegQueryValueExW

  SetSecurityDescriptorDacl

  SystemFunction036

  shlwapi

  PathMatchSpecW

  winmm

  timeBeginPeriod

  timeEndPeriod

  timeGetTime

  dbghelp

  SymFromAddr

  SymGetLineFromAddr64

  SymGetSearchPathW

  SymInitialize

  SymSetOptions

  SymSetSearchPathW

  ole32

  CoCreateInstance

  CoInitializeEx

  CoTaskMemFree

  CoUninitialize

  PropVariantClear

  secur32

  AcquireCredentialsHandleW

  DeleteSecurityContext

  FreeContextBuffer

  FreeCredentialsHandle

  InitializeSecurityContextW

  QuerySecurityPackageInfoW

  winhttp

  WinHttpCloseHandle

  WinHttpGetIEProxyConfigForCurrentUser

  WinHttpGetProxyForUrl

  WinHttpOpen

  WinHttpSetTimeouts

  crypt32

  CertAddEncodedCertificateToStore

  CertCloseStore

  CertCompareCertificateName

  CertCreateCertificateChainEngine

  CertDuplicateCertificateContext

  CertFindExtension

  CertFreeCertificateChain

  CertFreeCertificateChainEngine

  CertFreeCertificateContext

  CertGetCertificateChain

  CertGetCertificateContextProperty

  CertGetIssuerCertificateFromStore

  CertOpenStore

  CertSetCertificateContextProperty

  CertVerifyCertificateChainPolicy

  CryptDecodeObjectEx

  CryptInstallOIDFunctionAddress

  CryptVerifyCertificateSignatureEx

  Exports

  Exports

  GetHandleVerifier

  Sections

  .text

  Size: 4.1MB - Virtual size: 4.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2.1MB - Virtual size: 2.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 22KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .00cfg

  Size: 512B - Virtual size: 4B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: 512B - Virtual size: 9B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  prot

  Size: 512B - Virtual size: 184B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 51KB - Virtual size: 50KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 152KB - Virtual size: 151KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/extension/webcrt.crx

  .zip
• InstAccountsManager/images/Thumbs.db
• InstAccountsManager/images/avatar.jpg
• InstAccountsManager/images/like.png

  .png
• InstAccountsManager/langs/English.txt
• InstAccountsManager/langs/Русский.txt
• InstAccountsManager/x64/SQLite.Interop.dll

  .dll windows x64

  1b5f5b6c478e4c7eeb546c0b91347ea2

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  UnmapViewOfFile

  SetEndOfFile

  FreeLibrary

  HeapAlloc

  SystemTimeToFileTime

  QueryPerformanceCounter

  HeapFree

  WaitForSingleObject

  UnlockFile

  FlushViewOfFile

  LockFile

  WaitForSingleObjectEx

  OutputDebugStringW

  GetTickCount

  UnlockFileEx

  GetProcessHeap

  GetSystemTimeAsFileTime

  FormatMessageA

  WriteFile

  InitializeCriticalSection

  WideCharToMultiByte

  LoadLibraryW

  Sleep

  FormatMessageW

  GetVersionExW

  HeapDestroy

  LeaveCriticalSection

  GetFileAttributesA

  HeapCreate

  HeapValidate

  MapViewOfFile

  ReadFile

  CreateFileW

  MultiByteToWideChar

  FlushFileBuffers

  GetTempPathW

  GetLastError

  GetProcAddress

  HeapSize

  LockFileEx

  EnterCriticalSection

  GetDiskFreeSpaceW

  LoadLibraryA

  CreateFileMappingA

  CreateFileMappingW

  GetDiskFreeSpaceA

  GetSystemInfo

  GetFileAttributesExW

  DeleteCriticalSection

  GetCurrentThreadId

  OutputDebugStringA

  GetVersionExA

  CloseHandle

  DeleteFileW

  GetCurrentProcessId

  GetTempPathA

  LocalFree

  GetSystemTime

  AreFileApisANSI

  DeleteFileA

  TryEnterCriticalSection

  SetFilePointer

  HeapCompact

  CreateMutexW

  GetFileSize

  CreateFileA

  HeapReAlloc

  GetFullPathNameA

  GetFileAttributesW

  GetFullPathNameW

  ExitThread

  CreateThread

  FlsSetValue

  GetCommandLineA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  HeapSetInformation

  GetTimeZoneInformation

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  SetLastError

  FlsAlloc

  RtlUnwindEx

  GetModuleHandleW

  ExitProcess

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LCMapStringA

  LCMapStringW

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  InitializeCriticalSectionAndSpinCount

  GetStringTypeA

  GetStringTypeW

  GetLocaleInfoA

  CompareStringA

  CompareStringW

  SetEnvironmentVariableA

  RaiseException

  advapi32

  CryptDestroyHash

  CryptDecrypt

  CryptDestroyKey

  CryptCreateHash

  CryptEncrypt

  CryptDuplicateKey

  CryptDeriveKey

  CryptAcquireContextW

  CryptHashData

  Exports

  Exports

  interop_compileoption_get

  interop_compileoption_used

  interop_libversion

  interop_sourceid

  sqlite3_activate_see

  sqlite3_aggregate_context

  sqlite3_aggregate_count

  sqlite3_auto_extension

  sqlite3_backup_finish

  sqlite3_backup_finish_interop

  sqlite3_backup_init

  sqlite3_backup_pagecount

  sqlite3_backup_remaining

  sqlite3_backup_step

  sqlite3_bind_blob

  sqlite3_bind_blob64

  sqlite3_bind_double

  sqlite3_bind_double_interop

  sqlite3_bind_int

  sqlite3_bind_int64

  sqlite3_bind_int64_interop

  sqlite3_bind_null

  sqlite3_bind_parameter_count

  sqlite3_bind_parameter_index

  sqlite3_bind_parameter_name

  sqlite3_bind_parameter_name_interop

  sqlite3_bind_text

  sqlite3_bind_text16

  sqlite3_bind_text64

  sqlite3_bind_value

  sqlite3_bind_zeroblob

  sqlite3_bind_zeroblob64

  sqlite3_blob_bytes

  sqlite3_blob_close

  sqlite3_blob_close_interop

  sqlite3_blob_open

  sqlite3_blob_read

  sqlite3_blob_reopen

  sqlite3_blob_write

  sqlite3_busy_handler

  sqlite3_busy_timeout

  sqlite3_cancel_auto_extension

  sqlite3_changes

  sqlite3_changes_interop

  sqlite3_clear_bindings

  sqlite3_close

  sqlite3_close_interop

  sqlite3_close_v2

  sqlite3_collation_needed

  sqlite3_collation_needed16

  sqlite3_column_blob

  sqlite3_column_bytes

  sqlite3_column_bytes16

  sqlite3_column_count

  sqlite3_column_database_name

  sqlite3_column_database_name16

  sqlite3_column_database_name16_interop

  sqlite3_column_database_name_interop

  sqlite3_column_decltype

  sqlite3_column_decltype16

  sqlite3_column_decltype16_interop

  sqlite3_column_decltype_interop

  sqlite3_column_double

  sqlite3_column_double_interop

  sqlite3_column_int

  sqlite3_column_int64

  sqlite3_column_int64_interop

  sqlite3_column_name

  sqlite3_column_name16

  sqlite3_column_name16_interop

  sqlite3_column_name_interop

  sqlite3_column_origin_name

  sqlite3_column_origin_name16

  sqlite3_column_origin_name16_interop

  sqlite3_column_origin_name_interop

  sqlite3_column_table_name

  sqlite3_column_table_name16

  sqlite3_column_table_name16_interop

  sqlite3_column_table_name_interop

  sqlite3_column_text

  sqlite3_column_text16

  sqlite3_column_text16_interop

  sqlite3_column_text_interop

  sqlite3_column_type

  sqlite3_column_value

  sqlite3_commit_hook

  sqlite3_compileoption_get

  sqlite3_compileoption_used

  sqlite3_complete

  sqlite3_complete16

  sqlite3_config

  sqlite3_context_collcompare_interop

  sqlite3_context_collseq_interop

  sqlite3_context_db_handle

  sqlite3_create_collation

  sqlite3_create_collation16

  sqlite3_create_collation_v2

  sqlite3_create_disposable_module

  sqlite3_create_disposable_module_interop

  sqlite3_create_function

  sqlite3_create_function16

  sqlite3_create_function_interop

  sqlite3_create_function_v2

  sqlite3_create_module

  sqlite3_create_module_v2

  sqlite3_cursor_rowid_interop

  sqlite3_data_count

  sqlite3_data_directory

  sqlite3_db_cacheflush

  sqlite3_db_config

  sqlite3_db_filename

  sqlite3_db_handle

  sqlite3_db_mutex

  sqlite3_db_readonly

  sqlite3_db_release_memory

  sqlite3_db_status

  sqlite3_declare_vtab

  sqlite3_dispose_module

  sqlite3_enable_load_extension

  sqlite3_enable_shared_cache

  sqlite3_errcode

  sqlite3_errmsg

  sqlite3_errmsg16

  sqlite3_errmsg_interop

  sqlite3_errstr

  sqlite3_exec

  sqlite3_expanded_sql

  sqlite3_expired

  sqlite3_extended_errcode

  sqlite3_extended_result_codes

  sqlite3_file_control

  sqlite3_finalize

  sqlite3_finalize_interop

  sqlite3_free

  sqlite3_free_table

  sqlite3_fts5_init

  sqlite3_fts_init

  sqlite3_get_autocommit

  sqlite3_get_auxdata

  sqlite3_get_table

  sqlite3_global_recover

  sqlite3_index_column_info_interop

  sqlite3_initialize

  sqlite3_interrupt

  sqlite3_json_init

  sqlite3_key

  sqlite3_key_v2

  sqlite3_last_insert_rowid

  sqlite3_last_insert_rowid_interop

  sqlite3_libversion

  sqlite3_libversion_number

  sqlite3_limit

  sqlite3_load_extension

  sqlite3_log

  sqlite3_malloc

  sqlite3_malloc64

  sqlite3_malloc_size_interop

  sqlite3_memory_alarm

  sqlite3_memory_highwater

  sqlite3_memory_highwater_interop

  sqlite3_memory_used

  sqlite3_memory_used_interop

  sqlite3_mprintf

  sqlite3_msize

  sqlite3_mutex_alloc

  sqlite3_mutex_enter

  sqlite3_mutex_free

  sqlite3_mutex_leave

  sqlite3_mutex_try

  sqlite3_next_stmt

  sqlite3_open

  sqlite3_open16

  sqlite3_open16_interop

  sqlite3_open_interop

  sqlite3_open_v2

  sqlite3_os_end

  sqlite3_os_init

  sqlite3_overload_function

  sqlite3_percentile_init

  sqlite3_prepare

  sqlite3_prepare16

  sqlite3_prepare16_interop

  sqlite3_prepare16_v2

  sqlite3_prepare_interop

  sqlite3_prepare_v2

  sqlite3_profile

  sqlite3_progress_handler

  sqlite3_randomness

  sqlite3_realloc

  sqlite3_realloc64

  sqlite3_regexp_init

  sqlite3_rekey

  sqlite3_rekey_v2

  sqlite3_release_memory

  sqlite3_reset

  sqlite3_reset_auto_extension

  sqlite3_reset_interop

  sqlite3_result_blob

  sqlite3_result_blob64

  sqlite3_result_double

  sqlite3_result_double_interop

  sqlite3_result_error

  sqlite3_result_error16

  sqlite3_result_error_code

  sqlite3_result_error_nomem

  sqlite3_result_error_toobig

  sqlite3_result_int

  sqlite3_result_int64

  sqlite3_result_int64_interop

  sqlite3_result_null

  sqlite3_result_subtype

  sqlite3_result_text

  sqlite3_result_text16

  sqlite3_result_text16be

  sqlite3_result_text16le

  sqlite3_result_text64

  sqlite3_result_value

  sqlite3_result_zeroblob

  sqlite3_result_zeroblob64

  sqlite3_rollback_hook

  sqlite3_rtree_geometry_callback

  sqlite3_rtree_query_callback

  sqlite3_set_authorizer

  sqlite3_set_auxdata

  sqlite3_shutdown

  sqlite3_sleep

  sqlite3_snprintf

  sqlite3_soft_heap_limit

  sqlite3_soft_heap_limit64

  sqlite3_sourceid

  sqlite3_sql

  sqlite3_status

  sqlite3_status64

  sqlite3_step

  sqlite3_stmt_busy

  sqlite3_stmt_readonly

  sqlite3_stmt_status

  sqlite3_strglob

  sqlite3_stricmp

  sqlite3_strlike

  sqlite3_strnicmp

  sqlite3_system_errno

  sqlite3_table_column_metadata

  sqlite3_table_column_metadata_interop

  sqlite3_table_cursor_interop

  sqlite3_temp_directory

  sqlite3_test_control

  sqlite3_thread_cleanup

  sqlite3_threadsafe

  sqlite3_total_changes

  sqlite3_totype_init

  sqlite3_trace

  sqlite3_trace_v2

  sqlite3_transfer_bindings

  sqlite3_update_hook

  sqlite3_uri_boolean

  sqlite3_uri_int64

  sqlite3_uri_parameter

  sqlite3_user_data

  sqlite3_value_blob

  sqlite3_value_bytes

  sqlite3_value_bytes16

  sqlite3_value_double

  sqlite3_value_double_interop

  sqlite3_value_dup

  sqlite3_value_free

  sqlite3_value_int

  sqlite3_value_int64

  sqlite3_value_int64_interop

  sqlite3_value_numeric_type

  sqlite3_value_subtype

  sqlite3_value_text

  sqlite3_value_text16

  sqlite3_value_text16_interop

  sqlite3_value_text16be

  sqlite3_value_text16le

  sqlite3_value_text_interop

  sqlite3_value_type

  sqlite3_version

  sqlite3_vfs_find

  sqlite3_vfs_register

  sqlite3_vfs_unregister

  sqlite3_vmprintf

  sqlite3_vsnprintf

  sqlite3_vtab_config

  sqlite3_vtab_on_conflict

  sqlite3_vtshim_init

  sqlite3_wal_autocheckpoint

  sqlite3_wal_checkpoint

  sqlite3_wal_checkpoint_v2

  sqlite3_wal_hook

  sqlite3_win32_compact_heap

  sqlite3_win32_is_nt

  sqlite3_win32_mbcs_to_utf8

  sqlite3_win32_mbcs_to_utf8_v2

  sqlite3_win32_reset_heap

  sqlite3_win32_set_directory

  sqlite3_win32_sleep

  sqlite3_win32_unicode_to_utf8

  sqlite3_win32_utf8_to_mbcs

  sqlite3_win32_utf8_to_mbcs_v2

  sqlite3_win32_utf8_to_unicode

  sqlite3_win32_write_debug

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 185KB - Virtual size: 184KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 15KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 61KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  data

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/x86/SQLite.Interop.dll

  .dll windows x86

  f7e8b27070da8fb5f4925f9ec46fb343

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  UnmapViewOfFile

  SetEndOfFile

  FreeLibrary

  HeapAlloc

  SystemTimeToFileTime

  QueryPerformanceCounter

  HeapFree

  WaitForSingleObject

  InterlockedCompareExchange

  UnlockFile

  FlushViewOfFile

  LockFile

  WaitForSingleObjectEx

  OutputDebugStringW

  GetTickCount

  UnlockFileEx

  GetProcessHeap

  GetSystemTimeAsFileTime

  FormatMessageA

  WriteFile

  InitializeCriticalSection

  WideCharToMultiByte

  LoadLibraryW

  Sleep

  FormatMessageW

  GetVersionExW

  HeapDestroy

  LeaveCriticalSection

  GetFileAttributesA

  HeapCreate

  MapViewOfFile

  GetFileAttributesW

  ReadFile

  CreateFileW

  MultiByteToWideChar

  FlushFileBuffers

  GetTempPathW

  GetLastError

  GetProcAddress

  HeapSize

  LockFileEx

  EnterCriticalSection

  GetDiskFreeSpaceW

  LoadLibraryA

  CreateFileMappingA

  CreateFileMappingW

  GetDiskFreeSpaceA

  GetSystemInfo

  GetFileAttributesExW

  DeleteCriticalSection

  GetCurrentThreadId

  OutputDebugStringA

  GetVersionExA

  CloseHandle

  DeleteFileW

  GetCurrentProcessId

  GetTempPathA

  LocalFree

  GetSystemTime

  AreFileApisANSI

  DeleteFileA

  TryEnterCriticalSection

  SetFilePointer

  HeapCompact

  CreateMutexW

  GetFileSize

  CreateFileA

  HeapReAlloc

  GetFullPathNameA

  HeapValidate

  GetFullPathNameW

  ExitThread

  CreateThread

  InterlockedExchange

  GetCommandLineA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  VirtualFree

  VirtualAlloc

  GetTimeZoneInformation

  GetModuleHandleW

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  InterlockedDecrement

  ExitProcess

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LCMapStringA

  LCMapStringW

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  RaiseException

  InitializeCriticalSectionAndSpinCount

  RtlUnwind

  GetStringTypeA

  GetStringTypeW

  GetLocaleInfoA

  GetModuleHandleA

  CompareStringA

  CompareStringW

  SetEnvironmentVariableA

  advapi32

  CryptDestroyHash

  CryptDecrypt

  CryptDestroyKey

  CryptCreateHash

  CryptEncrypt

  CryptDuplicateKey

  CryptDeriveKey

  CryptAcquireContextW

  CryptHashData

  Exports

  Exports

  _interop_compileoption_get@4

  _interop_compileoption_used@4

  _interop_libversion@0

  _interop_sourceid@0

  _sqlite3_backup_finish_interop@4

  _sqlite3_bind_double_interop@12

  _sqlite3_bind_int64_interop@12

  _sqlite3_bind_parameter_name_interop@12

  _sqlite3_blob_close_interop@4

  _sqlite3_changes_interop@4

  _sqlite3_close_interop@4

  _sqlite3_column_database_name16_interop@12

  _sqlite3_column_database_name_interop@12

  _sqlite3_column_decltype16_interop@12

  _sqlite3_column_decltype_interop@12

  _sqlite3_column_double_interop@12

  _sqlite3_column_int64_interop@12

  _sqlite3_column_name16_interop@12

  _sqlite3_column_name_interop@12

  _sqlite3_column_origin_name16_interop@12

  _sqlite3_column_origin_name_interop@12

  _sqlite3_column_table_name16_interop@12

  _sqlite3_column_table_name_interop@12

  _sqlite3_column_text16_interop@12

  _sqlite3_column_text_interop@12

  _sqlite3_context_collcompare_interop@20

  _sqlite3_context_collseq_interop@16

  _sqlite3_create_disposable_module_interop@112

  _sqlite3_create_function_interop@36

  _sqlite3_cursor_rowid_interop@12

  _sqlite3_errmsg_interop@8

  _sqlite3_finalize_interop@4

  _sqlite3_index_column_info_interop@32

  _sqlite3_last_insert_rowid_interop@8

  _sqlite3_malloc_size_interop@4

  _sqlite3_memory_highwater_interop@8

  _sqlite3_memory_used_interop@4

  _sqlite3_open16_interop@20

  _sqlite3_open_interop@20

  _sqlite3_prepare16_interop@24

  _sqlite3_prepare_interop@24

  _sqlite3_reset_interop@4

  _sqlite3_result_double_interop@8

  _sqlite3_result_int64_interop@8

  _sqlite3_table_column_metadata_interop@44

  _sqlite3_table_cursor_interop@12

  _sqlite3_value_double_interop@8

  _sqlite3_value_int64_interop@8

  _sqlite3_value_text16_interop@8

  _sqlite3_value_text_interop@8

  sqlite3_activate_see

  sqlite3_aggregate_context

  sqlite3_aggregate_count

  sqlite3_auto_extension

  sqlite3_backup_finish

  sqlite3_backup_init

  sqlite3_backup_pagecount

  sqlite3_backup_remaining

  sqlite3_backup_step

  sqlite3_bind_blob

  sqlite3_bind_blob64

  sqlite3_bind_double

  sqlite3_bind_int

  sqlite3_bind_int64

  sqlite3_bind_null

  sqlite3_bind_parameter_count

  sqlite3_bind_parameter_index

  sqlite3_bind_parameter_name

  sqlite3_bind_text

  sqlite3_bind_text16

  sqlite3_bind_text64

  sqlite3_bind_value

  sqlite3_bind_zeroblob

  sqlite3_bind_zeroblob64

  sqlite3_blob_bytes

  sqlite3_blob_close

  sqlite3_blob_open

  sqlite3_blob_read

  sqlite3_blob_reopen

  sqlite3_blob_write

  sqlite3_busy_handler

  sqlite3_busy_timeout

  sqlite3_cancel_auto_extension

  sqlite3_changes

  sqlite3_clear_bindings

  sqlite3_close

  sqlite3_close_v2

  sqlite3_collation_needed

  sqlite3_collation_needed16

  sqlite3_column_blob

  sqlite3_column_bytes

  sqlite3_column_bytes16

  sqlite3_column_count

  sqlite3_column_database_name

  sqlite3_column_database_name16

  sqlite3_column_decltype

  sqlite3_column_decltype16

  sqlite3_column_double

  sqlite3_column_int

  sqlite3_column_int64

  sqlite3_column_name

  sqlite3_column_name16

  sqlite3_column_origin_name

  sqlite3_column_origin_name16

  sqlite3_column_table_name

  sqlite3_column_table_name16

  sqlite3_column_text

  sqlite3_column_text16

  sqlite3_column_type

  sqlite3_column_value

  sqlite3_commit_hook

  sqlite3_compileoption_get

  sqlite3_compileoption_used

  sqlite3_complete

  sqlite3_complete16

  sqlite3_config

  sqlite3_context_db_handle

  sqlite3_create_collation

  sqlite3_create_collation16

  sqlite3_create_collation_v2

  sqlite3_create_disposable_module

  sqlite3_create_function

  sqlite3_create_function16

  sqlite3_create_function_v2

  sqlite3_create_module

  sqlite3_create_module_v2

  sqlite3_data_count

  sqlite3_data_directory

  sqlite3_db_cacheflush

  sqlite3_db_config

  sqlite3_db_filename

  sqlite3_db_handle

  sqlite3_db_mutex

  sqlite3_db_readonly

  sqlite3_db_release_memory

  sqlite3_db_status

  sqlite3_declare_vtab

  sqlite3_dispose_module

  sqlite3_enable_load_extension

  sqlite3_enable_shared_cache

  sqlite3_errcode

  sqlite3_errmsg

  sqlite3_errmsg16

  sqlite3_errstr

  sqlite3_exec

  sqlite3_expanded_sql

  sqlite3_expired

  sqlite3_extended_errcode

  sqlite3_extended_result_codes

  sqlite3_file_control

  sqlite3_finalize

  sqlite3_free

  sqlite3_free_table

  sqlite3_fts5_init

  sqlite3_fts_init

  sqlite3_get_autocommit

  sqlite3_get_auxdata

  sqlite3_get_table

  sqlite3_global_recover

  sqlite3_initialize

  sqlite3_interrupt

  sqlite3_json_init

  sqlite3_key

  sqlite3_key_v2

  sqlite3_last_insert_rowid

  sqlite3_libversion

  sqlite3_libversion_number

  sqlite3_limit

  sqlite3_load_extension

  sqlite3_log

  sqlite3_malloc

  sqlite3_malloc64

  sqlite3_memory_alarm

  sqlite3_memory_highwater

  sqlite3_memory_used

  sqlite3_mprintf

  sqlite3_msize

  sqlite3_mutex_alloc

  sqlite3_mutex_enter

  sqlite3_mutex_free

  sqlite3_mutex_leave

  sqlite3_mutex_try

  sqlite3_next_stmt

  sqlite3_open

  sqlite3_open16

  sqlite3_open_v2

  sqlite3_os_end

  sqlite3_os_init

  sqlite3_overload_function

  sqlite3_percentile_init

  sqlite3_prepare

  sqlite3_prepare16

  sqlite3_prepare16_v2

  sqlite3_prepare_v2

  sqlite3_profile

  sqlite3_progress_handler

  sqlite3_randomness

  sqlite3_realloc

  sqlite3_realloc64

  sqlite3_regexp_init

  sqlite3_rekey

  sqlite3_rekey_v2

  sqlite3_release_memory

  sqlite3_reset

  sqlite3_reset_auto_extension

  sqlite3_result_blob

  sqlite3_result_blob64

  sqlite3_result_double

  sqlite3_result_error

  sqlite3_result_error16

  sqlite3_result_error_code

  sqlite3_result_error_nomem

  sqlite3_result_error_toobig

  sqlite3_result_int

  sqlite3_result_int64

  sqlite3_result_null

  sqlite3_result_subtype

  sqlite3_result_text

  sqlite3_result_text16

  sqlite3_result_text16be

  sqlite3_result_text16le

  sqlite3_result_text64

  sqlite3_result_value

  sqlite3_result_zeroblob

  sqlite3_result_zeroblob64

  sqlite3_rollback_hook

  sqlite3_rtree_geometry_callback

  sqlite3_rtree_query_callback

  sqlite3_set_authorizer

  sqlite3_set_auxdata

  sqlite3_shutdown

  sqlite3_sleep

  sqlite3_snprintf

  sqlite3_soft_heap_limit

  sqlite3_soft_heap_limit64

  sqlite3_sourceid

  sqlite3_sql

  sqlite3_status

  sqlite3_status64

  sqlite3_step

  sqlite3_stmt_busy

  sqlite3_stmt_readonly

  sqlite3_stmt_status

  sqlite3_strglob

  sqlite3_stricmp

  sqlite3_strlike

  sqlite3_strnicmp

  sqlite3_system_errno

  sqlite3_table_column_metadata

  sqlite3_temp_directory

  sqlite3_test_control

  sqlite3_thread_cleanup

  sqlite3_threadsafe

  sqlite3_total_changes

  sqlite3_totype_init

  sqlite3_trace

  sqlite3_trace_v2

  sqlite3_transfer_bindings

  sqlite3_update_hook

  sqlite3_uri_boolean

  sqlite3_uri_int64

  sqlite3_uri_parameter

  sqlite3_user_data

  sqlite3_value_blob

  sqlite3_value_bytes

  sqlite3_value_bytes16

  sqlite3_value_double

  sqlite3_value_dup

  sqlite3_value_free

  sqlite3_value_int

  sqlite3_value_int64

  sqlite3_value_numeric_type

  sqlite3_value_subtype

  sqlite3_value_text

  sqlite3_value_text16

  sqlite3_value_text16be

  sqlite3_value_text16le

  sqlite3_value_type

  sqlite3_version

  sqlite3_vfs_find

  sqlite3_vfs_register

  sqlite3_vfs_unregister

  sqlite3_vmprintf

  sqlite3_vsnprintf

  sqlite3_vtab_config

  sqlite3_vtab_on_conflict

  sqlite3_vtshim_init

  sqlite3_wal_autocheckpoint

  sqlite3_wal_checkpoint

  sqlite3_wal_checkpoint_v2

  sqlite3_wal_hook

  sqlite3_win32_compact_heap

  sqlite3_win32_is_nt

  sqlite3_win32_mbcs_to_utf8

  sqlite3_win32_mbcs_to_utf8_v2

  sqlite3_win32_reset_heap

  sqlite3_win32_set_directory

  sqlite3_win32_sleep

  sqlite3_win32_unicode_to_utf8

  sqlite3_win32_utf8_to_mbcs

  sqlite3_win32_utf8_to_mbcs_v2

  sqlite3_win32_utf8_to_unicode

  sqlite3_win32_write_debug

  Sections

  .text

  Size: 835KB - Virtual size: 834KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 126KB - Virtual size: 125KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 25KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• InstAccountsManager/xNet.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 87KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ