Koalageddon[.]zip

resource
unpack001/Koalageddon/Koalageddon.exe
unpack001/Koalageddon/app/skiko-windows-x64.dll

Koalageddon.zip

.zip

Koalageddon/Koalageddon.exe

.exe windows:6 windows x64

5ee94995f32b14841cb0fab5026d0dbb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

AllowSetForegroundWindow

MessageBoxW

shell32

CommandLineToArgvW

kernel32

GetStringTypeW

SetEndOfFile

WriteConsoleW

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCommandLineA

GetOEMCP

GetACP

IsValidCodePage

FindFirstFileExW

HeapReAlloc

GetCurrentDirectoryW

ReadConsoleW

SetFilePointerEx

GetFileSizeEx

ReadFile

GetConsoleMode

GetConsoleOutputCP

FlushFileBuffers

GetFileType

EnumSystemLocalesW

GetUserDefaultLCID

IsValidLocale

GetLocaleInfoW

LCMapStringW

CompareStringW

SetEnvironmentVariableW

CloseHandle

GetLastError

WaitForSingleObject

LoadLibraryExW

GetCurrentProcessId

GetCurrentThreadId

GetLocalTime

AllocConsole

AttachConsole

FreeLibrary

GetModuleHandleExW

GetProcAddress

LoadLibraryW

LocalFree

FormatMessageW

CreateFileW

FindClose

FindNextFileW

GetFileAttributesW

SetLastError

GetCommandLineW

GetExitCodeProcess

CreateProcessW

SetDllDirectoryW

GetEnvironmentVariableW

GetSystemDirectoryW

GetModuleFileNameW

MultiByteToWideChar

WideCharToMultiByte

RtlUnwind

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSectionEx

DeleteCriticalSection

EncodePointer

DecodePointer

LCMapStringEx

GetCPInfo

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

IsDebuggerPresent

GetStartupInfoW

GetModuleHandleW

QueryPerformanceCounter

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

RaiseException

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

GetFullPathNameW

GetDriveTypeW

ExitProcess

GetStdHandle

WriteFile

HeapFree

HeapAlloc

Exports

jvmLauncherGetAPI

Sections

.text
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/Koalageddon.ico

Koalageddon/app/ByteUtilities-1.0-2d2583acbdb74f5ed6981b74188115e.jar

.jar

Koalageddon/app/Executor-3.0-4867e75d7efe8952a836ee63449.jar

.jar

Koalageddon/app/Koalageddon.cfg

Koalageddon/app/PeParser-3.1-c48591bef4ad95be5953db6129e5721.jar

.jar

Koalageddon/app/PropertyLoader-1.0-fa4ec16cd0863af4cf71a88731eba37.jar

.jar

Koalageddon/app/SwtJavaFx-1.1-7d5354a35e5b72de6f6f961a3d59a739.jar

.jar

Koalageddon/app/Updates-1.0-86b3949080a86834369406e68bcfaed.jar

.jar

Koalageddon/app/Utilities-1.9-1743ef7c86228a5fc7415c35d339dfdb.jar

.jar

Koalageddon/app/animation-core-desktop-1.3.0-e4e0deec43a1fe5e167c411ddc9bf385.jar

.jar

Koalageddon/app/animation-desktop-1.3.0-6ed1e4ad7942e528b3f2af8cf36d32d.jar

.jar

Koalageddon/app/annotations-13.0-f4fb462172517b46b6cd900358515a.jar

.jar

Koalageddon/app/appdirs-1.2.1-accf8bf9c4a91aee4c715d66240d4.jar

.jar

Koalageddon/app/asn-one-0.4.0-d3153e6fec8296ebfbc8936fdcef775b.jar

.jar

Koalageddon/app/atomicfu-jvm-0.17.2-d6b6f3a195696acf1828b1f125125ed7.jar

.jar

Koalageddon/app/bcpkix-jdk15on-1.66-a5b13435d46cb52abb0a47feb77e5e.jar

.jar

Koalageddon/app/bcprov-jdk15on-1.66-fd57b228172782ae6a73d22a7ac9b45.jar

.jar

Koalageddon/app/desktop-jvm-1.3.0-58ea927638b39cfe35a1568cc156f01d.jar

.jar

Koalageddon/app/eddsa-0.3.0-ee7de3b6f19de76a6e465efc978f669.jar

.jar

Koalageddon/app/foundation-desktop-1.3.0-f7b774ebd164a1b82180e7279ce3ba2a.jar

.jar

Koalageddon/app/foundation-layout-desktop-1.3.0-2a41879288ebb32c327f62a59054eb4f.jar

.jar

Koalageddon/app/icudtl.dat

Koalageddon/app/jna-5.6.0-56892d6f4d2719833fd53b7cc57ec86.jar

.jar

Koalageddon/app/jna-platform-5.6.0-3c34526c4f2243e5d1d7caceb9243cd.jar

.jar

Koalageddon/app/jzlib-1.1.3-386d3714fef534d21175d8885ae48bf7.jar

.jar

Koalageddon/app/kaverit-jvm-2.3.0-17af38bb801a1e7f9991de1afdb3b4ed.jar

.jar

Koalageddon/app/koalageddon-jvm-2.0.1.jar

.jar

Koalageddon/app/kodein-di-framework-compose-jvm-7.18.0-d971578ee18e2e4a27be0f364679d.jar

.jar

Koalageddon/app/kodein-di-jvm-7.18.0-26df9a79e768686def3c0e922a815a2.jar

.jar

Koalageddon/app/kotlin-logging-jvm-2.0.6-856a1d5c29f7da63af421f223e85d20.jar

.jar

Koalageddon/app/kotlin-stdlib-1.8.0-952dbd9391b7c09ee33321daff5d583.jar

.jar

Koalageddon/app/kotlin-stdlib-jdk7-1.8.0-e881855ce1f9d979c8fae52accc231d.jar

.jar

Koalageddon/app/kotlin-stdlib-jdk8-1.8.0-34246294df79630616b9b6352ffcece.jar

.jar

Koalageddon/app/kotlinx-coroutines-core-jvm-1.6.4-9ba1873872fe146d39bc46835c45.jar

.jar

Koalageddon/app/kotlinx-coroutines-jdk8-1.6.4-9532e16578f95c1f9bb3d199fa1c1039.jar

.jar

Koalageddon/app/kotlinx-coroutines-slf4j-1.6.4-ee321dc6b1536bf3c2df8b59cb84e8f.jar

.jar

Koalageddon/app/kotlinx-serialization-core-jvm-1.4.1-a97020d828c89c7df2453bdfd1cd403a.jar

.jar

Koalageddon/app/kotlinx-serialization-json-jvm-1.4.1-9cd33c9b12c371a5d8934c97466eb70.jar

.jar

Koalageddon/app/ktor-client-cio-jvm-2.2.3-cd51e71fc629067977f84d156ad776d.jar

.jar

Koalageddon/app/ktor-client-content-negotiation-jvm-2.2.3-4a96a800692683a511d683fd9290.jar

.jar

Koalageddon/app/ktor-client-core-jvm-2.2.3-10983389bcffa69d59376dc1a9121d1.jar

.jar

Koalageddon/app/ktor-events-jvm-2.2.3-735dd3b1c28f8e74b5ca8d7d8be79.jar

.jar

Koalageddon/app/ktor-http-cio-jvm-2.2.3-619ea76ad4acc6f8eb952895cb7d3839.jar

.jar

Koalageddon/app/ktor-http-jvm-2.2.3-15a672e4d075b69214c65d1ffea69e.jar

.jar

Koalageddon/app/ktor-io-jvm-2.2.3-f181111aac9f2f3c61bc8bec63d379.jar

.jar

Koalageddon/app/ktor-network-jvm-2.2.3-df60258bbae0dc697f396d43c0935d70.jar

.jar

Koalageddon/app/ktor-network-tls-jvm-2.2.3-508820c2e5acebb83259e0899f99ed.jar

.jar

Koalageddon/app/ktor-serialization-jvm-2.2.3-c18decefc63735a117973b85c58582.jar

.jar

Koalageddon/app/ktor-serialization-kotlinx-json-jvm-2.2.3-8e107b257e95a49984b893b18e59eb3.jar

.jar

Koalageddon/app/ktor-serialization-kotlinx-jvm-2.2.3-1aecfb974fda437e5d23d62c859f6444.jar

.jar

Koalageddon/app/ktor-utils-jvm-2.2.3-f7b2afb034c4eb3025ba2af8c4737b47.jar

.jar

Koalageddon/app/ktor-websocket-serialization-jvm-2.2.3-4bcc63cb07cb2c13a1775cb4fccf8.jar

.jar

Koalageddon/app/ktor-websockets-jvm-2.2.3-3f5e2b16c8fd664048f4df7641eec6.jar

.jar

Koalageddon/app/material-desktop-1.3.0-805f648b10fd38a6131dee330734127.jar

.jar

Koalageddon/app/material-icons-core-desktop-1.3.0-e4f45f31dec875eeeb6e8e9e8eb2a7f5.jar

.jar

Koalageddon/app/material-icons-extended-desktop-1.3.0-e5efe76264bf6932939e16916c91c8.jar

.jar

Koalageddon/app/material-ripple-desktop-1.3.0-c98fbd81cc22afec5722db468c90bdd2.jar

.jar

Koalageddon/app/runtime-desktop-1.3.0-54ac464446fef98e10ecdf8b20442cc7.jar

.jar

Koalageddon/app/runtime-saveable-desktop-1.3.0-9042e5cee2f7d84106def62343a8877.jar

.jar

Koalageddon/app/skiko-awt-0.7.50-f6f802814e7d5cbaca365b09fcbf7b8.jar

.jar

Koalageddon/app/skiko-awt-runtime-windows-x64-0.7.50-628a10fdba719cf72421ae7a8721fc27.jar

.jar

Koalageddon/app/skiko-windows-x64.dll

.dll windows:6 windows x64

3497416675b3dcc6d3571185a5302dde

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExW

RegQueryValueExW

RegCloseKey

RegEnumKeyExW

RegQueryInfoKeyW

RegGetValueW

gdi32

ChoosePixelFormat

DescribePixelFormat

SetPixelFormat

SwapBuffers

StretchDIBits

CreateRectRgn

DeleteObject

dwmapi

DwmFlush

DwmEnableBlurBehindWindow

opengl32

wglCreateContext

glBindTexture

glClear

glClearColor

glEnable

glFinish

glGetIntegerv

glGetString

glViewport

wglGetCurrentContext

wglMakeCurrent

wglGetProcAddress

wglDeleteContext

user32

GetDC

GetWindowRect

MonitorFromWindow

GetAncestor

EnumDisplayDevicesA

SystemParametersInfoW

ReleaseDC

GetClientRect

kernel32

SetEndOfFile

OutputDebugStringW

GetProcessHeap

SetEnvironmentVariableW

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCommandLineW

GetCommandLineA

FindFirstFileExW

HeapQueryInformation

HeapSize

DeleteFileW

GetFileAttributesExW

CreateDirectoryW

GetFullPathNameW

GetCurrentDirectoryW

SetCurrentDirectoryW

ReadConsoleW

SetFilePointerEx

GetConsoleMode

GetConsoleOutputCP

GetOEMCP

IsValidCodePage

HeapReAlloc

WriteFile

SetConsoleCtrlHandler

CloseHandle

WaitForSingleObjectEx

CreateEventA

GetProcAddress

LoadLibraryA

LoadLibraryW

MapViewOfFile

GetModuleFileNameA

GetModuleHandleA

GetModuleHandleExA

CreateFileMappingA

LocaleNameToLCID

LCIDToLocaleName

GetSystemTimeAsFileTime

GetACP

GetLocaleInfoEx

CreateFileA

GetLastError

CreateFileMappingW

UnmapViewOfFile

GetDynamicTimeZoneInformation

GetGeoInfoW

GetUserGeoID

OutputDebugStringA

FindClose

FindFirstFileW

FindNextFileW

GetFileInformationByHandle

GetFileSizeEx

ReadFile

WaitForSingleObject

ReleaseSemaphore

CreateSemaphoreA

ExitProcess

GetNativeSystemInfo

FreeLibrary

InitializeSRWLock

ReleaseSRWLockExclusive

ReleaseSRWLockShared

AcquireSRWLockExclusive

AcquireSRWLockShared

MultiByteToWideChar

WideCharToMultiByte

GetCurrentProcessId

InitOnceExecuteOnce

CreateFileW

GetFileSize

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

SetEvent

ResetEvent

CreateEventW

GetModuleHandleW

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

IsDebuggerPresent

GetStartupInfoW

QueryPerformanceCounter

GetCurrentThreadId

InitializeSListHead

FormatMessageA

InitOnceBeginInitialize

InitOnceComplete

InitializeCriticalSectionEx

TryEnterCriticalSection

InitializeConditionVariable

WakeConditionVariable

WakeAllConditionVariable

SleepConditionVariableCS

SleepConditionVariableSRW

QueryPerformanceFrequency

Sleep

SwitchToThread

GetExitCodeThread

LocalFree

EncodePointer

DecodePointer

LCMapStringEx

SetFileInformationByHandle

FlsAlloc

FlsGetValue

FlsSetValue

FlsFree

CreateEventExW

CreateSemaphoreExW

FlushProcessWriteBuffers

GetCurrentProcessorNumber

GetTickCount64

FreeLibraryWhenCallbackReturns

CreateThreadpoolWork

SubmitThreadpoolWork

CloseThreadpoolWork

CreateThreadpoolTimer

SetThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

CreateThreadpoolWait

SetThreadpoolWait

CloseThreadpoolWait

GetFileInformationByHandleEx

CreateSymbolicLinkW

GetStringTypeW

CompareStringEx

GetCPInfo

EnumSystemLocalesW

RtlUnwindEx

InterlockedPushEntrySList

InterlockedFlushSList

RtlPcToFileHeader

RaiseException

RtlUnwind

SetLastError

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

SetStdHandle

GetFileType

GetTimeZoneInformation

GetDriveTypeW

PeekNamedPipe

SystemTimeToTzSpecificLocalTime

FileTimeToSystemTime

FlushFileBuffers

CreateThread

ExitThread

ResumeThread

FreeLibraryAndExitThread

GetModuleHandleExW

GetModuleFileNameW

GetCurrentThread

HeapAlloc

HeapFree

GetStdHandle

GetDateFormatW

GetTimeFormatW

CompareStringW

LCMapStringW

GetLocaleInfoW

IsValidLocale

GetUserDefaultLCID

WriteConsoleW

Exports

?Java_org_jetbrains_skiko_NativeApplicationKt_getApplicationWindowCount@@YAJPEAUJNIEnv_@@PEAV_jobject@@@Z

?Java_org_jetbrains_skiko_PlatformOperationsKt_linuxGetDpiScaleNative@@YAMPEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_PlatformOperationsKt_osxDisableTitleBar@@YAXPEAUJNIEnv_@@PEAV_jobject@@1M@Z

?Java_org_jetbrains_skiko_PlatformOperationsKt_osxIsFullscreenNative@@YAEPEAUJNIEnv_@@PEAV_jobject@@1@Z

?Java_org_jetbrains_skiko_PlatformOperationsKt_osxOrderEmojiAndSymbolsPopup@@YAXXZ

?Java_org_jetbrains_skiko_PlatformOperationsKt_osxSetFullscreenNative@@YAXPEAUJNIEnv_@@PEAV_jobject@@1E@Z

?Java_org_jetbrains_skiko_SetupKt_linuxGetSystemDpiScale@@YAMPEAUJNIEnv_@@PEAV_jobject@@@Z

?Java_org_jetbrains_skiko_redrawer_LinuxOpenGLRedrawerKt_createContext@@YA_JPEAUJNIEnv_@@PEAV_jobject@@_JE@Z

?Java_org_jetbrains_skiko_redrawer_LinuxOpenGLRedrawerKt_destroyContext@@YAXPEAUJNIEnv_@@PEAV_jobject@@_J2@Z

?Java_org_jetbrains_skiko_redrawer_LinuxOpenGLRedrawerKt_makeCurrent@@YAXPEAUJNIEnv_@@PEAV_jobject@@_J22@Z

?Java_org_jetbrains_skiko_redrawer_LinuxOpenGLRedrawerKt_setSwapInterval@@YAXPEAUJNIEnv_@@PEAV_jobject@@_J2J@Z

?Java_org_jetbrains_skiko_redrawer_LinuxOpenGLRedrawerKt_swapBuffers@@YAXPEAUJNIEnv_@@PEAV_jobject@@_J2@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_createMetalDevice@@YA_JPEAUJNIEnv_@@PEAV_jobject@@_JEJ2@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_disposeDevice@@YAXPEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_endRendering@@YAXPEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_finishFrame@@YAXPEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_getAdapterMemorySize@@YA_JPEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_getAdapterName@@YAPEAV_jstring@@PEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_isOccluded@@YAEPEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_makeMetalContext@@YA_JPEAUJNIEnv_@@PEAV_jobject@@_J@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_makeMetalRenderTarget@@YA_JPEAUJNIEnv_@@PEAV_jobject@@_JJJ@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_resizeLayers@@YAXPEAUJNIEnv_@@PEAV_jobject@@_JJJJJ@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_setContentScale@@YAXPEAUJNIEnv_@@PEAV_jobject@@_JM@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_setVSyncEnabled@@YAXPEAUJNIEnv_@@PEAV_jobject@@_JE@Z

?Java_org_jetbrains_skiko_redrawer_MetalRedrawer_startRendering@@YA_JPEAUJNIEnv_@@PEAV_jobject@@@Z

JNI_OnLoad

JNI_OnUnload

Java_org_jetbrains_skia_BackendRenderTargetKt_BackendRenderTarget_1nGetFinalizer

Java_org_jetbrains_skia_BackendRenderTargetKt__1nMakeDirect3D

Java_org_jetbrains_skia_BackendRenderTargetKt__1nMakeGL

Java_org_jetbrains_skia_BitmapKt_Bitmap_1nGetColor

Java_org_jetbrains_skia_BitmapKt_Bitmap_1nGetFinalizer

Java_org_jetbrains_skia_BitmapKt__1nAllocPixels

Java_org_jetbrains_skia_BitmapKt__1nAllocPixelsFlags

Java_org_jetbrains_skia_BitmapKt__1nAllocPixelsRowBytes

Java_org_jetbrains_skia_BitmapKt__1nComputeByteSize

Java_org_jetbrains_skia_BitmapKt__1nComputeIsOpaque

Java_org_jetbrains_skia_BitmapKt__1nErase

Java_org_jetbrains_skia_BitmapKt__1nEraseColor

Java_org_jetbrains_skia_BitmapKt__1nExtractAlpha

Java_org_jetbrains_skia_BitmapKt__1nExtractSubset

Java_org_jetbrains_skia_BitmapKt__1nGetAlphaf

Java_org_jetbrains_skia_BitmapKt__1nGetGenerationId

Java_org_jetbrains_skia_BitmapKt__1nGetImageInfo

Java_org_jetbrains_skia_BitmapKt__1nGetPixelRef

Java_org_jetbrains_skia_BitmapKt__1nGetPixelRefOriginX

Java_org_jetbrains_skia_BitmapKt__1nGetPixelRefOriginY

Java_org_jetbrains_skia_BitmapKt__1nGetRowBytes

Java_org_jetbrains_skia_BitmapKt__1nGetRowBytesAsPixels

Java_org_jetbrains_skia_BitmapKt__1nInstallPixels

Java_org_jetbrains_skia_BitmapKt__1nIsImmutable

Java_org_jetbrains_skia_BitmapKt__1nIsNull

Java_org_jetbrains_skia_BitmapKt__1nIsReadyToDraw

Java_org_jetbrains_skia_BitmapKt__1nMake

Java_org_jetbrains_skia_BitmapKt__1nMakeClone

Java_org_jetbrains_skia_BitmapKt__1nMakeShader

Java_org_jetbrains_skia_BitmapKt__1nNotifyPixelsChanged

Java_org_jetbrains_skia_BitmapKt__1nPeekPixels

Java_org_jetbrains_skia_BitmapKt__1nReadPixels

Java_org_jetbrains_skia_BitmapKt__1nReset

Java_org_jetbrains_skia_BitmapKt__1nSetAlphaType

Java_org_jetbrains_skia_BitmapKt__1nSetImageInfo

Java_org_jetbrains_skia_BitmapKt__1nSetImmutable

Java_org_jetbrains_skia_BitmapKt__1nSetPixelRef

Java_org_jetbrains_skia_BitmapKt__1nSwap

Java_org_jetbrains_skia_BreakIteratorKt_BreakIterator_1nGetFinalizer

Java_org_jetbrains_skia_BreakIteratorKt__1nClone

Java_org_jetbrains_skia_BreakIteratorKt__1nCurrent

Java_org_jetbrains_skia_BreakIteratorKt__1nFirst

Java_org_jetbrains_skia_BreakIteratorKt__1nFollowing

Java_org_jetbrains_skia_BreakIteratorKt__1nGetRuleStatus

Java_org_jetbrains_skia_BreakIteratorKt__1nGetRuleStatuses

Java_org_jetbrains_skia_BreakIteratorKt__1nGetRuleStatusesLen

Java_org_jetbrains_skia_BreakIteratorKt__1nIsBoundary

Java_org_jetbrains_skia_BreakIteratorKt__1nLast

Java_org_jetbrains_skia_BreakIteratorKt__1nMake

Java_org_jetbrains_skia_BreakIteratorKt__1nNext

Java_org_jetbrains_skia_BreakIteratorKt__1nPreceding

Java_org_jetbrains_skia_BreakIteratorKt__1nPrevious

Java_org_jetbrains_skia_BreakIteratorKt__1nSetText

Java_org_jetbrains_skia_CanvasKt_Canvas_1nGetFinalizer

Java_org_jetbrains_skia_CanvasKt__1nClear

Java_org_jetbrains_skia_CanvasKt__1nClipPath

Java_org_jetbrains_skia_CanvasKt__1nClipRRect

Java_org_jetbrains_skia_CanvasKt__1nClipRect

Java_org_jetbrains_skia_CanvasKt__1nClipRegion

Java_org_jetbrains_skia_CanvasKt__1nConcat

Java_org_jetbrains_skia_CanvasKt__1nConcat44

Java_org_jetbrains_skia_CanvasKt__1nDrawArc

Java_org_jetbrains_skia_CanvasKt__1nDrawDRRect

Java_org_jetbrains_skia_CanvasKt__1nDrawDrawable

Java_org_jetbrains_skia_CanvasKt__1nDrawImageNine

Java_org_jetbrains_skia_CanvasKt__1nDrawImageRect

Java_org_jetbrains_skia_CanvasKt__1nDrawLine

Java_org_jetbrains_skia_CanvasKt__1nDrawOval

Java_org_jetbrains_skia_CanvasKt__1nDrawPaint

Java_org_jetbrains_skia_CanvasKt__1nDrawPatch

Java_org_jetbrains_skia_CanvasKt__1nDrawPath

Java_org_jetbrains_skia_CanvasKt__1nDrawPicture

Java_org_jetbrains_skia_CanvasKt__1nDrawPoint

Java_org_jetbrains_skia_CanvasKt__1nDrawPoints

Java_org_jetbrains_skia_CanvasKt__1nDrawRRect

Java_org_jetbrains_skia_CanvasKt__1nDrawRect

Java_org_jetbrains_skia_CanvasKt__1nDrawRegion

Java_org_jetbrains_skia_CanvasKt__1nDrawString

Java_org_jetbrains_skia_CanvasKt__1nDrawTextBlob

Java_org_jetbrains_skia_CanvasKt__1nDrawVertices

Java_org_jetbrains_skia_CanvasKt__1nGetLocalToDevice

Java_org_jetbrains_skia_CanvasKt__1nGetSaveCount

Java_org_jetbrains_skia_CanvasKt__1nMakeFromBitmap

Java_org_jetbrains_skia_CanvasKt__1nReadPixels

Java_org_jetbrains_skia_CanvasKt__1nResetMatrix

Java_org_jetbrains_skia_CanvasKt__1nRestore

Java_org_jetbrains_skia_CanvasKt__1nRestoreToCount

Java_org_jetbrains_skia_CanvasKt__1nSave

Java_org_jetbrains_skia_CanvasKt__1nSaveLayer

Java_org_jetbrains_skia_CanvasKt__1nSaveLayerRect

Java_org_jetbrains_skia_CanvasKt__1nSetMatrix

Java_org_jetbrains_skia_CanvasKt__1nWritePixels

Java_org_jetbrains_skia_CodecKt_Codec_1nGetFinalizer

Java_org_jetbrains_skia_CodecKt_Codec_1nGetImageInfo

Java_org_jetbrains_skia_CodecKt_Codec_1nReadPixels

Java_org_jetbrains_skia_CodecKt_FramesInfo_1nDelete

Java_org_jetbrains_skia_CodecKt_FramesInfo_1nGetInfos

Java_org_jetbrains_skia_CodecKt_FramesInfo_1nGetSize

Java_org_jetbrains_skia_CodecKt__1nGetEncodedImageFormat

Java_org_jetbrains_skia_CodecKt__1nGetEncodedOrigin

Java_org_jetbrains_skia_CodecKt__1nGetFrameCount

Java_org_jetbrains_skia_CodecKt__1nGetFrameInfo

Java_org_jetbrains_skia_CodecKt__1nGetFramesInfo

Java_org_jetbrains_skia_CodecKt__1nGetRepetitionCount

Java_org_jetbrains_skia_CodecKt__1nGetSizeHeight

Java_org_jetbrains_skia_CodecKt__1nGetSizeWidth

Java_org_jetbrains_skia_CodecKt__1nMakeFromData

Java_org_jetbrains_skia_ColorFilterKt__1nGetLinearToSRGBGamma

Java_org_jetbrains_skia_ColorFilterKt__1nGetLuma

Java_org_jetbrains_skia_ColorFilterKt__1nGetSRGBToLinearGamma

Java_org_jetbrains_skia_ColorFilterKt__1nMakeBlend

Java_org_jetbrains_skia_ColorFilterKt__1nMakeComposed

Java_org_jetbrains_skia_ColorFilterKt__1nMakeHSLAMatrix

Java_org_jetbrains_skia_ColorFilterKt__1nMakeHighContrast

Java_org_jetbrains_skia_ColorFilterKt__1nMakeLerp

Java_org_jetbrains_skia_ColorFilterKt__1nMakeLighting

Java_org_jetbrains_skia_ColorFilterKt__1nMakeMatrix

Java_org_jetbrains_skia_ColorFilterKt__1nMakeOverdraw

Java_org_jetbrains_skia_ColorFilterKt__1nMakeTable

Java_org_jetbrains_skia_ColorFilterKt__1nMakeTableARGB

Java_org_jetbrains_skia_ColorSpaceKt_ColorSpace_1nGetFinalizer

Java_org_jetbrains_skia_ColorSpaceKt__1nConvert

Java_org_jetbrains_skia_ColorSpaceKt__1nIsGammaCloseToSRGB

Java_org_jetbrains_skia_ColorSpaceKt__1nIsGammaLinear

Java_org_jetbrains_skia_ColorSpaceKt__1nIsSRGB

Java_org_jetbrains_skia_ColorSpaceKt__1nMakeDisplayP3

Java_org_jetbrains_skia_ColorSpaceKt__1nMakeSRGB

Java_org_jetbrains_skia_ColorSpaceKt__1nMakeSRGBLinear

Java_org_jetbrains_skia_ColorTypeKt__1nIsAlwaysOpaque

Java_org_jetbrains_skia_DataKt_Data_1nGetFinalizer

Java_org_jetbrains_skia_DataKt__1nBytes

Java_org_jetbrains_skia_DataKt__1nEquals

Java_org_jetbrains_skia_DataKt__1nMakeEmpty

Java_org_jetbrains_skia_DataKt__1nMakeFromBytes

Java_org_jetbrains_skia_DataKt__1nMakeFromFileName

Java_org_jetbrains_skia_DataKt__1nMakeSubset

Java_org_jetbrains_skia_DataKt__1nMakeUninitialized

Java_org_jetbrains_skia_DataKt__1nMakeWithoutCopy

Java_org_jetbrains_skia_DataKt__1nSize

Java_org_jetbrains_skia_DataKt__1nToByteBuffer

Java_org_jetbrains_skia_DataKt__1nWritableData

Java_org_jetbrains_skia_DirectContextKt_DirectContext_1nFlush

Java_org_jetbrains_skia_DirectContextKt__1nAbandon

Java_org_jetbrains_skia_DirectContextKt__1nMakeDirect3D

Java_org_jetbrains_skia_DirectContextKt__1nMakeGL

Java_org_jetbrains_skia_DirectContextKt__1nReset

Java_org_jetbrains_skia_DirectContextKt__1nSubmit

Java_org_jetbrains_skia_DrawableKt_Drawable_1nGetBounds

Java_org_jetbrains_skia_DrawableKt_Drawable_1nGetFinalizer

Java_org_jetbrains_skia_DrawableKt_Drawable_1nGetGenerationId

Java_org_jetbrains_skia_DrawableKt_Drawable_1nMake

Java_org_jetbrains_skia_DrawableKt__1nDraw

Java_org_jetbrains_skia_DrawableKt__1nMakePictureSnapshot

Java_org_jetbrains_skia_DrawableKt__1nNotifyDrawingChanged

Java_org_jetbrains_skia_Drawable_1jvmKt_Drawable_1nInit

Java_org_jetbrains_skia_FontKt_Font_1nEquals

Java_org_jetbrains_skia_FontKt_Font_1nGetFinalizer

Java_org_jetbrains_skia_FontKt_Font_1nGetSize

Java_org_jetbrains_skia_FontKt_Font_1nMakeClone

Java_org_jetbrains_skia_FontKt__1nAreBitmapsEmbedded

Java_org_jetbrains_skia_FontKt__1nAreMetricsLinear

Java_org_jetbrains_skia_FontKt__1nGetBounds

Java_org_jetbrains_skia_FontKt__1nGetEdging

Java_org_jetbrains_skia_FontKt__1nGetHinting

Java_org_jetbrains_skia_FontKt__1nGetMetrics

Java_org_jetbrains_skia_FontKt__1nGetPath

Java_org_jetbrains_skia_FontKt__1nGetPaths

Java_org_jetbrains_skia_FontKt__1nGetPositions

Java_org_jetbrains_skia_FontKt__1nGetScaleX

Java_org_jetbrains_skia_FontKt__1nGetSkewX

Java_org_jetbrains_skia_FontKt__1nGetSpacing

Java_org_jetbrains_skia_FontKt__1nGetStringGlyphsCount

Java_org_jetbrains_skia_FontKt__1nGetTypeface

Java_org_jetbrains_skia_FontKt__1nGetTypefaceOrDefault

Java_org_jetbrains_skia_FontKt__1nGetUTF32Glyph

Java_org_jetbrains_skia_FontKt__1nGetUTF32Glyphs

Java_org_jetbrains_skia_FontKt__1nGetWidths

Java_org_jetbrains_skia_FontKt__1nGetXPositions

Java_org_jetbrains_skia_FontKt__1nIsAutoHintingForced

Java_org_jetbrains_skia_FontKt__1nIsBaselineSnapped

Java_org_jetbrains_skia_FontKt__1nIsEmboldened

Java_org_jetbrains_skia_FontKt__1nIsSubpixel

Java_org_jetbrains_skia_FontKt__1nMakeDefault

Java_org_jetbrains_skia_FontKt__1nMakeTypeface

Java_org_jetbrains_skia_FontKt__1nMakeTypefaceSize

Java_org_jetbrains_skia_FontKt__1nMakeTypefaceSizeScaleSkew

Java_org_jetbrains_skia_FontKt__1nMeasureText

Java_org_jetbrains_skia_FontKt__1nMeasureTextWidth

Java_org_jetbrains_skia_FontKt__1nSetAutoHintingForced

Java_org_jetbrains_skia_FontKt__1nSetBaselineSnapped

Java_org_jetbrains_skia_FontKt__1nSetBitmapsEmbedded

Java_org_jetbrains_skia_FontKt__1nSetEdging

Java_org_jetbrains_skia_FontKt__1nSetEmboldened

Java_org_jetbrains_skia_FontKt__1nSetHinting

Java_org_jetbrains_skia_FontKt__1nSetMetricsLinear

Java_org_jetbrains_skia_FontKt__1nSetScaleX

Java_org_jetbrains_skia_FontKt__1nSetSize

Java_org_jetbrains_skia_FontKt__1nSetSkewX

Java_org_jetbrains_skia_FontKt__1nSetSubpixel

Java_org_jetbrains_skia_FontKt__1nSetTypeface

Java_org_jetbrains_skia_FontMgrKt__1nDefault

Java_org_jetbrains_skia_FontMgrKt__1nGetFamiliesCount

Java_org_jetbrains_skia_FontMgrKt__1nGetFamilyName

Java_org_jetbrains_skia_FontMgrKt__1nMakeFromData

Java_org_jetbrains_skia_FontMgrKt__1nMakeStyleSet

Java_org_jetbrains_skia_FontMgrKt__1nMatchFamily

Java_org_jetbrains_skia_FontMgrKt__1nMatchFamilyStyle

Java_org_jetbrains_skia_FontMgrKt__1nMatchFamilyStyleCharacter

Java_org_jetbrains_skia_FontStyleSetKt_FontStyleSet_1nMakeEmpty

Java_org_jetbrains_skia_FontStyleSetKt__1nCount

Java_org_jetbrains_skia_FontStyleSetKt__1nGetStyle

Java_org_jetbrains_skia_FontStyleSetKt__1nGetStyleName

Java_org_jetbrains_skia_FontStyleSetKt__1nGetTypeface

Java_org_jetbrains_skia_FontStyleSetKt__1nMatchStyle

Java_org_jetbrains_skia_GraphicsKt__1nGetFontCacheCountLimit

Java_org_jetbrains_skia_GraphicsKt__1nGetFontCacheCountUsed

Java_org_jetbrains_skia_GraphicsKt__1nGetFontCacheLimit

Java_org_jetbrains_skia_GraphicsKt__1nGetFontCacheUsed

Java_org_jetbrains_skia_GraphicsKt__1nGetResourceCacheSingleAllocationByteLimit

Java_org_jetbrains_skia_GraphicsKt__1nGetResourceCacheTotalByteLimit

Java_org_jetbrains_skia_GraphicsKt__1nGetResourceCacheTotalBytesUsed

Java_org_jetbrains_skia_GraphicsKt__1nPurgeAllCaches

Java_org_jetbrains_skia_GraphicsKt__1nPurgeFontCache

Java_org_jetbrains_skia_GraphicsKt__1nPurgeResourceCache

Java_org_jetbrains_skia_GraphicsKt__1nSetFontCacheCountLimit

Java_org_jetbrains_skia_GraphicsKt__1nSetFontCacheLimit

Java_org_jetbrains_skia_GraphicsKt__1nSetResourceCacheSingleAllocationByteLimit

Java_org_jetbrains_skia_GraphicsKt__1nSetResourceCacheTotalByteLimit

Java_org_jetbrains_skia_ImageFilterKt__1nMakeAlphaThreshold

Java_org_jetbrains_skia_ImageFilterKt__1nMakeArithmetic

Java_org_jetbrains_skia_ImageFilterKt__1nMakeBlend

Java_org_jetbrains_skia_ImageFilterKt__1nMakeBlur

Java_org_jetbrains_skia_ImageFilterKt__1nMakeColorFilter

Java_org_jetbrains_skia_ImageFilterKt__1nMakeCompose

Java_org_jetbrains_skia_ImageFilterKt__1nMakeDilate

Java_org_jetbrains_skia_ImageFilterKt__1nMakeDisplacementMap

Java_org_jetbrains_skia_ImageFilterKt__1nMakeDistantLitDiffuse

Java_org_jetbrains_skia_ImageFilterKt__1nMakeDistantLitSpecular

Java_org_jetbrains_skia_ImageFilterKt__1nMakeDropShadow

Java_org_jetbrains_skia_ImageFilterKt__1nMakeDropShadowOnly

Java_org_jetbrains_skia_ImageFilterKt__1nMakeErode

Java_org_jetbrains_skia_ImageFilterKt__1nMakeImage

Java_org_jetbrains_skia_ImageFilterKt__1nMakeMagnifier

Java_org_jetbrains_skia_ImageFilterKt__1nMakeMatrixConvolution

Java_org_jetbrains_skia_ImageFilterKt__1nMakeMatrixTransform

Java_org_jetbrains_skia_ImageFilterKt__1nMakeMerge

Java_org_jetbrains_skia_ImageFilterKt__1nMakeOffset

Java_org_jetbrains_skia_ImageFilterKt__1nMakePaint

Java_org_jetbrains_skia_ImageFilterKt__1nMakePicture

Java_org_jetbrains_skia_ImageFilterKt__1nMakePointLitDiffuse

Java_org_jetbrains_skia_ImageFilterKt__1nMakePointLitSpecular

Java_org_jetbrains_skia_ImageFilterKt__1nMakeRuntimeShader

Java_org_jetbrains_skia_ImageFilterKt__1nMakeRuntimeShaderFromArray

Java_org_jetbrains_skia_ImageFilterKt__1nMakeSpotLitDiffuse

Java_org_jetbrains_skia_ImageFilterKt__1nMakeSpotLitSpecular

Java_org_jetbrains_skia_ImageFilterKt__1nMakeTile

Java_org_jetbrains_skia_ImageKt_Image_1nGetImageInfo

Java_org_jetbrains_skia_ImageKt_Image_1nMakeShader

Java_org_jetbrains_skia_ImageKt_Image_1nPeekPixels

Java_org_jetbrains_skia_ImageKt__1nEncodeToData

Java_org_jetbrains_skia_ImageKt__1nMakeFromBitmap

Java_org_jetbrains_skia_ImageKt__1nMakeFromEncoded

Java_org_jetbrains_skia_ImageKt__1nMakeFromPixmap

Java_org_jetbrains_skia_ImageKt__1nMakeRaster

Java_org_jetbrains_skia_ImageKt__1nMakeRasterData

Java_org_jetbrains_skia_ImageKt__1nPeekPixelsToPixmap

Java_org_jetbrains_skia_ImageKt__1nReadPixelsBitmap

Java_org_jetbrains_skia_ImageKt__1nReadPixelsPixmap

Java_org_jetbrains_skia_ImageKt__1nScalePixels

Java_org_jetbrains_skia_ManagedStringKt_ManagedString_1nGetFinalizer

Java_org_jetbrains_skia_ManagedStringKt__1nAppend

Java_org_jetbrains_skia_ManagedStringKt__1nInsert

Java_org_jetbrains_skia_ManagedStringKt__1nMake

Java_org_jetbrains_skia_ManagedStringKt__1nRemove

Java_org_jetbrains_skia_ManagedStringKt__1nRemoveSuffix

Java_org_jetbrains_skia_ManagedStringKt__1nStringData

Java_org_jetbrains_skia_ManagedStringKt__1nStringSize

Java_org_jetbrains_skia_MaskFilterKt_MaskFilter_1nMakeTable

Java_org_jetbrains_skia_MaskFilterKt__1nMakeBlur

Java_org_jetbrains_skia_MaskFilterKt__1nMakeClip

Java_org_jetbrains_skia_MaskFilterKt__1nMakeGamma

Java_org_jetbrains_skia_MaskFilterKt__1nMakeShader

Java_org_jetbrains_skia_OutputWStreamKt_OutputWStream_1nGetFinalizer

Java_org_jetbrains_skia_OutputWStreamKt__1nMake

Java_org_jetbrains_skia_PaintFilterCanvasKt_PaintFilterCanvas_1nMake

Java_org_jetbrains_skia_PaintFilterCanvas_1jvmKt_PaintFilterCanvas_1nInit

Java_org_jetbrains_skia_PaintKt_Paint_1nEquals

Java_org_jetbrains_skia_PaintKt_Paint_1nGetColor

Java_org_jetbrains_skia_PaintKt_Paint_1nGetFinalizer

Java_org_jetbrains_skia_PaintKt_Paint_1nMake

Java_org_jetbrains_skia_PaintKt_Paint_1nMakeClone

Java_org_jetbrains_skia_PaintKt_Paint_1nReset

Java_org_jetbrains_skia_PaintKt__1nGetBlendMode

Java_org_jetbrains_skia_PaintKt__1nGetColor4f

Java_org_jetbrains_skia_PaintKt__1nGetColorFilter

Java_org_jetbrains_skia_PaintKt__1nGetFillPath

Java_org_jetbrains_skia_PaintKt__1nGetFillPathCull

Java_org_jetbrains_skia_PaintKt__1nGetImageFilter

Java_org_jetbrains_skia_PaintKt__1nGetMaskFilter

Java_org_jetbrains_skia_PaintKt__1nGetMode

Java_org_jetbrains_skia_PaintKt__1nGetPathEffect

Java_org_jetbrains_skia_PaintKt__1nGetShader

Java_org_jetbrains_skia_PaintKt__1nGetStrokeCap

Java_org_jetbrains_skia_PaintKt__1nGetStrokeJoin

Java_org_jetbrains_skia_PaintKt__1nGetStrokeMiter

Java_org_jetbrains_skia_PaintKt__1nGetStrokeWidth

Java_org_jetbrains_skia_PaintKt__1nHasNothingToDraw

Java_org_jetbrains_skia_PaintKt__1nIsAntiAlias

Java_org_jetbrains_skia_PaintKt__1nIsDither

Java_org_jetbrains_skia_PaintKt__1nSetAntiAlias

Java_org_jetbrains_skia_PaintKt__1nSetBlendMode

Java_org_jetbrains_skia_PaintKt__1nSetColor

Java_org_jetbrains_skia_PaintKt__1nSetColor4f

Java_org_jetbrains_skia_PaintKt__1nSetColorFilter

Java_org_jetbrains_skia_PaintKt__1nSetDither

Java_org_jetbrains_skia_PaintKt__1nSetImageFilter

Java_org_jetbrains_skia_PaintKt__1nSetMaskFilter

Java_org_jetbrains_skia_PaintKt__1nSetMode

Java_org_jetbrains_skia_PaintKt__1nSetPathEffect

Java_org_jetbrains_skia_PaintKt__1nSetShader

Java_org_jetbrains_skia_PaintKt__1nSetStrokeCap

Java_org_jetbrains_skia_PaintKt__1nSetStrokeJoin

Java_org_jetbrains_skia_PaintKt__1nSetStrokeMiter

Java_org_jetbrains_skia_PaintKt__1nSetStrokeWidth

Java_org_jetbrains_skia_PathEffectKt_PathEffect_1nMakeCompose

Java_org_jetbrains_skia_PathEffectKt__1nMakeCorner

Java_org_jetbrains_skia_PathEffectKt__1nMakeDash

Java_org_jetbrains_skia_PathEffectKt__1nMakeDiscrete

Java_org_jetbrains_skia_PathEffectKt__1nMakeLine2D

Java_org_jetbrains_skia_PathEffectKt__1nMakePath1D

Java_org_jetbrains_skia_PathEffectKt__1nMakePath2D

Java_org_jetbrains_skia_PathEffectKt__1nMakeSum

Java_org_jetbrains_skia_PathKt_Path_1nEquals

Java_org_jetbrains_skia_PathKt_Path_1nGetFinalizer

Java_org_jetbrains_skia_PathKt_Path_1nGetGenerationId

Java_org_jetbrains_skia_PathKt_Path_1nIsVolatile

Java_org_jetbrains_skia_PathKt_Path_1nMake

Java_org_jetbrains_skia_PathKt_Path_1nReset

Java_org_jetbrains_skia_PathKt_Path_1nSetVolatile

Java_org_jetbrains_skia_PathKt_Path_1nSwap

Java_org_jetbrains_skia_PathKt__1nAddArc

Java_org_jetbrains_skia_PathKt__1nAddCircle

Java_org_jetbrains_skia_PathKt__1nAddOval

Java_org_jetbrains_skia_PathKt__1nAddPath

Java_org_jetbrains_skia_PathKt__1nAddPathOffset

Java_org_jetbrains_skia_PathKt__1nAddPathTransform

Java_org_jetbrains_skia_PathKt__1nAddPoly

Java_org_jetbrains_skia_PathKt__1nAddRRect

Java_org_jetbrains_skia_PathKt__1nAddRect

Java_org_jetbrains_skia_PathKt__1nApproximateBytesUsed

Java_org_jetbrains_skia_PathKt__1nArcTo

Java_org_jetbrains_skia_PathKt__1nClosePath

Java_org_jetbrains_skia_PathKt__1nComputeTightBounds

Java_org_jetbrains_skia_PathKt__1nConicTo

Java_org_jetbrains_skia_PathKt__1nConservativelyContainsRect

Java_org_jetbrains_skia_PathKt__1nContains

Java_org_jetbrains_skia_PathKt__1nConvertConicToQuads

Java_org_jetbrains_skia_PathKt__1nCountVerbs

Java_org_jetbrains_skia_PathKt__1nCubicTo

Java_org_jetbrains_skia_PathKt__1nDump

Java_org_jetbrains_skia_PathKt__1nDumpHex

Java_org_jetbrains_skia_PathKt__1nEllipticalArcTo

Java_org_jetbrains_skia_PathKt__1nGetBounds

Java_org_jetbrains_skia_PathKt__1nGetFillMode

Java_org_jetbrains_skia_PathKt__1nGetLastPt

Java_org_jetbrains_skia_PathKt__1nGetPoint

Java_org_jetbrains_skia_PathKt__1nGetPoints

Java_org_jetbrains_skia_PathKt__1nGetPointsCount

Java_org_jetbrains_skia_PathKt__1nGetSegmentMasks

Java_org_jetbrains_skia_PathKt__1nGetVerbs

Java_org_jetbrains_skia_PathKt__1nIncReserve

Java_org_jetbrains_skia_PathKt__1nIsConvex

Java_org_jetbrains_skia_PathKt__1nIsCubicDegenerate

Java_org_jetbrains_skia_PathKt__1nIsEmpty

Java_org_jetbrains_skia_PathKt__1nIsFinite

Java_org_jetbrains_skia_PathKt__1nIsInterpolatable

Java_org_jetbrains_skia_PathKt__1nIsLastContourClosed

Java_org_jetbrains_skia_PathKt__1nIsLineDegenerate

Java_org_jetbrains_skia_PathKt__1nIsOval

Java_org_jetbrains_skia_PathKt__1nIsQuadDegenerate

Java_org_jetbrains_skia_PathKt__1nIsRRect

Java_org_jetbrains_skia_PathKt__1nIsRect

Java_org_jetbrains_skia_PathKt__1nIsValid

Java_org_jetbrains_skia_PathKt__1nLineTo

Java_org_jetbrains_skia_PathKt__1nMakeCombining

Java_org_jetbrains_skia_PathKt__1nMakeFromBytes

Java_org_jetbrains_skia_PathKt__1nMakeFromSVGString

Java_org_jetbrains_skia_PathKt__1nMakeLerp

Java_org_jetbrains_skia_PathKt__1nMaybeGetAsLine

Java_org_jetbrains_skia_PathKt__1nMoveTo

Java_org_jetbrains_skia_PathKt__1nOffset

Java_org_jetbrains_skia_PathKt__1nQuadTo

Java_org_jetbrains_skia_PathKt__1nRConicTo

Java_org_jetbrains_skia_PathKt__1nRCubicTo

Java_org_jetbrains_skia_PathKt__1nREllipticalArcTo

Java_org_jetbrains_skia_PathKt__1nRLineTo

Java_org_jetbrains_skia_PathKt__1nRMoveTo

Java_org_jetbrains_skia_PathKt__1nRQuadTo

Java_org_jetbrains_skia_PathKt__1nReverseAddPath

Java_org_jetbrains_skia_PathKt__1nRewind

Java_org_jetbrains_skia_PathKt__1nSerializeToBytes

Java_org_jetbrains_skia_PathKt__1nSetFillMode

Java_org_jetbrains_skia_PathKt__1nSetLastPt

Java_org_jetbrains_skia_PathKt__1nTangentArcTo

Java_org_jetbrains_skia_PathKt__1nTransform

Java_org_jetbrains_skia_PathKt__1nUpdateBoundsCache

Java_org_jetbrains_skia_PathMeasureKt_PathMeasure_1nGetFinalizer

Java_org_jetbrains_skia_PathMeasureKt_PathMeasure_1nMake

Java_org_jetbrains_skia_PathMeasureKt__1nGetLength

Java_org_jetbrains_skia_PathMeasureKt__1nGetMatrix

Java_org_jetbrains_skia_PathMeasureKt__1nGetPosition

Java_org_jetbrains_skia_PathMeasureKt__1nGetRSXform

Java_org_jetbrains_skia_PathMeasureKt__1nGetSegment

Java_org_jetbrains_skia_PathMeasureKt__1nGetTangent

Java_org_jetbrains_skia_PathMeasureKt__1nIsClosed

Java_org_jetbrains_skia_PathMeasureKt__1nMakePath

Java_org_jetbrains_skia_PathMeasureKt__1nNextContour

Java_org_jetbrains_skia_PathMeasureKt__1nSetPath

Java_org_jetbrains_skia_PathSegmentIteratorKt_PathSegmentIterator_1nGetFinalizer

Java_org_jetbrains_skia_PathSegmentIteratorKt_PathSegmentIterator_1nNext

Java_org_jetbrains_skia_PathSegmentIteratorKt__1nMake

Java_org_jetbrains_skia_PictureKt_Picture_1nMakeFromData

Java_org_jetbrains_skia_PictureKt__1nGetApproximateBytesUsed

Java_org_jetbrains_skia_PictureKt__1nGetApproximateOpCount

Java_org_jetbrains_skia_PictureKt__1nGetCullRect

Java_org_jetbrains_skia_PictureKt__1nGetUniqueId

Java_org_jetbrains_skia_PictureKt__1nMakePlaceholder

Java_org_jetbrains_skia_PictureKt__1nMakeShader

Java_org_jetbrains_skia_PictureKt__1nPlayback

Java_org_jetbrains_skia_PictureKt__1nSerializeToData

Java_org_jetbrains_skia_PictureRecorderKt_PictureRecorder_1nGetFinalizer

Java_org_jetbrains_skia_PictureRecorderKt_PictureRecorder_1nMake

Java_org_jetbrains_skia_PictureRecorderKt__1nBeginRecording

Java_org_jetbrains_skia_PictureRecorderKt__1nFinishRecordingAsDrawable

Java_org_jetbrains_skia_PictureRecorderKt__1nFinishRecordingAsPicture

Java_org_jetbrains_skia_PictureRecorderKt__1nFinishRecordingAsPictureWithCull

Java_org_jetbrains_skia_PictureRecorderKt__1nGetRecordingCanvas

Java_org_jetbrains_skia_PixelRefKt_PixelRef_1nGetGenerationId

Java_org_jetbrains_skia_PixelRefKt_PixelRef_1nGetRowBytes

Java_org_jetbrains_skia_PixelRefKt_PixelRef_1nIsImmutable

Java_org_jetbrains_skia_PixelRefKt_PixelRef_1nNotifyPixelsChanged

Java_org_jetbrains_skia_PixelRefKt_PixelRef_1nSetImmutable

Java_org_jetbrains_skia_PixelRefKt__1nGetHeight

Java_org_jetbrains_skia_PixelRefKt__1nGetWidth

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nComputeByteSize

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nComputeIsOpaque

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nExtractSubset

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nGetColor

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nGetFinalizer

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nGetRowBytes

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nGetRowBytesAsPixels

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nMake

Java_org_jetbrains_skia_PixmapKt_Pixmap_1nReset

Java_org_jetbrains_skia_PixmapKt__1nErase

Java_org_jetbrains_skia_PixmapKt__1nEraseSubset

Java_org_jetbrains_skia_PixmapKt__1nGetAddr

Java_org_jetbrains_skia_PixmapKt__1nGetAddrAt

Java_org_jetbrains_skia_PixmapKt__1nGetAlphaF

Java_org_jetbrains_skia_PixmapKt__1nGetInfo

Java_org_jetbrains_skia_PixmapKt__1nMakeNull

Java_org_jetbrains_skia_PixmapKt__1nReadPixels

Java_org_jetbrains_skia_PixmapKt__1nReadPixelsFromPoint

Java_org_jetbrains_skia_PixmapKt__1nReadPixelsToPixmap

Java_org_jetbrains_skia_PixmapKt__1nReadPixelsToPixmapFromPoint

Java_org_jetbrains_skia_PixmapKt__1nResetWithInfo

Java_org_jetbrains_skia_PixmapKt__1nScalePixels

Java_org_jetbrains_skia_PixmapKt__1nSetColorSpace

Java_org_jetbrains_skia_RegionKt_Region_1nComputeRegionComplexity

Java_org_jetbrains_skia_RegionKt_Region_1nContainsIPoint

Java_org_jetbrains_skia_RegionKt_Region_1nContainsIRect

Java_org_jetbrains_skia_RegionKt_Region_1nContainsRegion

Java_org_jetbrains_skia_RegionKt_Region_1nGetBoundaryPath

Java_org_jetbrains_skia_RegionKt_Region_1nGetBounds

Sections

.text
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 849B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/app/skiko-windows-x64.dll.sha256

Koalageddon/app/slf4j-api-2.0.6-dd65c386e8c5f4e6e14de3f7a7ae60.jar

.jar

Koalageddon/app/slf4j-tinylog-2.6.0-35bff464825962b65395fa6967573078.jar

.jar

Koalageddon/app/sshj-0.30.0-58d41cd494d63c6d437a8f27b938f0.jar

.jar

Koalageddon/app/tinylog-api-2.6.0-8aeb70ae2327e4f767fa3d8d23fc41a7.jar

.jar

Koalageddon/app/tinylog-impl-2.6.0-8726c27d582d10eb1d365cdeb0c5524.jar

.jar

Koalageddon/app/ui-desktop-1.3.0-a7e94e2d777927f3ad9a25ad39acfba2.jar

.jar

Koalageddon/app/ui-geometry-desktop-1.3.0-a0d6ff9ba67c3f65211665b139bcf5c.jar

.jar

Koalageddon/app/ui-graphics-desktop-1.3.0-59b535876d1f4c2a8ec6f15bf7e16c47.jar

.jar

Koalageddon/app/ui-text-desktop-1.3.0-66c6ff6b69306fe56b8e9748469ef7ab.jar

.jar

Koalageddon/app/ui-tooling-preview-desktop-1.3.0-587b31f02a71b323d3a32a2991cb4b35.jar

.jar

Koalageddon/app/ui-unit-desktop-1.3.0-fa0f4cc64687b48417c78a5bf14718.jar

.jar

Koalageddon/app/ui-util-desktop-1.3.0-8493905dc83f28d88ab0bc5efc673cb.jar

.jar

Koalageddon/app/xz-1.9-57c2fbfeb55e307ccae52e532282e2.jar

.jar

Koalageddon/runtime/bin/api-ms-win-core-console-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

9a:21:b0:8b:85:a9:de:1f:d9:4f:fe:56:97:d3:7b:37:3d:86:6f:aa:be:dd:dc:05:03:e3:b6:57:a0:0f:c9:53
Signer

Actual PE Digest

9a:21:b0:8b:85:a9:de:1f:d9:4f:fe:56:97:d3:7b:37:3d:86:6f:aa:be:dd:dc:05:03:e3:b6:57:a0:0f:c9:53

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

AllocConsole

GetConsoleCP

GetConsoleMode

GetConsoleOutputCP

GetNumberOfConsoleInputEvents

PeekConsoleInputA

ReadConsoleA

ReadConsoleInputA

ReadConsoleInputW

ReadConsoleW

SetConsoleCtrlHandler

SetConsoleMode

WriteConsoleA

WriteConsoleW

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-console-l1-2-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

10:a4:b7:d1:65:d5:bc:cf:9e:2c:dc:b7:61:13:97:0c:5a:4a:25:b4:e9:74:66:0a:a2:cc:88:c1:1b:f7:26:c7
Signer

Actual PE Digest

10:a4:b7:d1:65:d5:bc:cf:9e:2c:dc:b7:61:13:97:0c:5a:4a:25:b4:e9:74:66:0a:a2:cc:88:c1:1b:f7:26:c7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

AllocConsole

AttachConsole

FreeConsole

GetConsoleCP

GetConsoleMode

GetConsoleOutputCP

GetNumberOfConsoleInputEvents

PeekConsoleInputA

PeekConsoleInputW

ReadConsoleA

ReadConsoleInputA

ReadConsoleInputW

ReadConsoleW

SetConsoleCtrlHandler

SetConsoleMode

WriteConsoleA

WriteConsoleW

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-datetime-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

29:8c:72:37:c7:ec:6f:9a:e3:b3:d0:6f:37:88:23:05:94:c6:24:84:37:0a:be:d7:8c:6c:4b:84:3c:e9:91:15
Signer

Actual PE Digest

29:8c:72:37:c7:ec:6f:9a:e3:b3:d0:6f:37:88:23:05:94:c6:24:84:37:0a:be:d7:8c:6c:4b:84:3c:e9:91:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetDateFormatA

GetDateFormatW

GetTimeFormatA

GetTimeFormatW

Sections

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-debug-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

39:b9:fd:ac:5b:dc:e8:1e:8f:2d:e8:ee:54:da:31:11:3e:3c:73:70:81:d0:4c:16:a0:a4:c0:b2:28:d9:9d:33
Signer

Actual PE Digest

39:b9:fd:ac:5b:dc:e8:1e:8f:2d:e8:ee:54:da:31:11:3e:3c:73:70:81:d0:4c:16:a0:a4:c0:b2:28:d9:9d:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

DebugBreak

IsDebuggerPresent

OutputDebugStringA

OutputDebugStringW

Sections

.rdata
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-errorhandling-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

38:c7:b6:7e:d3:49:27:25:36:5f:9c:fc:32:93:06:e7:d4:59:b3:98:d6:44:e0:e1:df:74:fc:11:88:2a:76:2e
Signer

Actual PE Digest

38:c7:b6:7e:d3:49:27:25:36:5f:9c:fc:32:93:06:e7:d4:59:b3:98:d6:44:e0:e1:df:74:fc:11:88:2a:76:2e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetErrorMode

GetLastError

RaiseException

SetErrorMode

SetLastError

SetUnhandledExceptionFilter

UnhandledExceptionFilter

Sections

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-file-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

73:6f:69:75:0f:67:32:4b:fb:6f:48:bb:b3:bf:f0:1d:9f:13:4e:c8:03:5e:3a:64:44:91:63:65:78:e2:f6:56
Signer

Actual PE Digest

73:6f:69:75:0f:67:32:4b:fb:6f:48:bb:b3:bf:f0:1d:9f:13:4e:c8:03:5e:3a:64:44:91:63:65:78:e2:f6:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CompareFileTime

CreateDirectoryA

CreateDirectoryW

CreateFileA

CreateFileW

DefineDosDeviceW

DeleteFileA

DeleteFileW

DeleteVolumeMountPointW

FileTimeToLocalFileTime

FindClose

FindCloseChangeNotification

FindFirstChangeNotificationA

FindFirstChangeNotificationW

FindFirstFileA

FindFirstFileExA

FindFirstFileExW

FindFirstFileW

FindFirstVolumeW

FindNextChangeNotification

FindNextFileA

FindNextFileW

FindNextVolumeW

FindVolumeClose

FlushFileBuffers

GetDiskFreeSpaceA

GetDiskFreeSpaceExA

GetDiskFreeSpaceExW

GetDiskFreeSpaceW

GetDriveTypeA

GetDriveTypeW

GetFileAttributesA

GetFileAttributesExA

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileSize

GetFileSizeEx

GetFileTime

GetFileType

GetFinalPathNameByHandleA

GetFinalPathNameByHandleW

GetFullPathNameA

GetFullPathNameW

GetLogicalDriveStringsW

GetLogicalDrives

GetLongPathNameA

GetLongPathNameW

GetShortPathNameW

GetTempFileNameW

GetVolumeInformationByHandleW

GetVolumeInformationW

GetVolumePathNameW

LocalFileTimeToFileTime

LockFile

LockFileEx

QueryDosDeviceW

ReadFile

ReadFileEx

ReadFileScatter

RemoveDirectoryA

RemoveDirectoryW

SetEndOfFile

SetFileAttributesA

SetFileAttributesW

SetFileInformationByHandle

SetFilePointer

SetFilePointerEx

SetFileTime

SetFileValidData

UnlockFile

UnlockFileEx

WriteFile

WriteFileEx

WriteFileGather

Sections

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-file-l1-2-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a6:49:26:84:e3:13:01:27:f8:8e:a6:8c:bb:14:73:f6:bd:5c:f3:a6:4d:07:65:93:4b:75:2b:a5:11:0d:b3:a3
Signer

Actual PE Digest

a6:49:26:84:e3:13:01:27:f8:8e:a6:8c:bb:14:73:f6:bd:5c:f3:a6:4d:07:65:93:4b:75:2b:a5:11:0d:b3:a3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CreateFile2

GetTempPathW

GetVolumeNameForVolumeMountPointW

GetVolumePathNamesForVolumeNameW

Sections

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-file-l2-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8f:84:7a:72:4f:97:ae:8a:73:6f:56:ae:84:c4:4e:1f:36:11:20:32:46:16:4e:50:68:b9:5f:14:5a:0f:2a:61
Signer

Actual PE Digest

8f:84:7a:72:4f:97:ae:8a:73:6f:56:ae:84:c4:4e:1f:36:11:20:32:46:16:4e:50:68:b9:5f:14:5a:0f:2a:61

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CopyFile2

CopyFileExW

CreateDirectoryExW

CreateHardLinkW

CreateSymbolicLinkW

GetFileInformationByHandleEx

MoveFileExW

MoveFileWithProgressW

ReOpenFile

ReadDirectoryChangesW

ReplaceFileW

Sections

.rdata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-handle-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

97:33:0d:58:6e:31:17:79:5b:77:9d:fb:14:b4:ba:03:51:4a:e4:86:99:aa:43:ce:4d:57:5a:b5:8c:1a:e7:1b
Signer

Actual PE Digest

97:33:0d:58:6e:31:17:79:5b:77:9d:fb:14:b4:ba:03:51:4a:e4:86:99:aa:43:ce:4d:57:5a:b5:8c:1a:e7:1b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CloseHandle

CompareObjectHandles

DuplicateHandle

GetHandleInformation

SetHandleInformation

Sections

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-heap-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8d:c1:dc:51:8f:ed:e4:c0:51:8a:9a:09:38:47:61:4e:40:c5:f7:3d:f6:0a:a2:71:99:59:fe:80:07:86:ff:9a
Signer

Actual PE Digest

8d:c1:dc:51:8f:ed:e4:c0:51:8a:9a:09:38:47:61:4e:40:c5:f7:3d:f6:0a:a2:71:99:59:fe:80:07:86:ff:9a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetProcessHeap

GetProcessHeaps

HeapAlloc

HeapCompact

HeapCreate

HeapDestroy

HeapFree

HeapLock

HeapQueryInformation

HeapReAlloc

HeapSetInformation

HeapSize

HeapSummary

HeapUnlock

HeapValidate

HeapWalk

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-interlocked-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a7:61:3e:3a:f8:e6:bc:36:b5:c6:dd:88:44:05:3a:cd:00:e8:03:e3:6f:a3:7e:11:54:ac:bf:4d:c8:5a:0d:a3
Signer

Actual PE Digest

a7:61:3e:3a:f8:e6:bc:36:b5:c6:dd:88:44:05:3a:cd:00:e8:03:e3:6f:a3:7e:11:54:ac:bf:4d:c8:5a:0d:a3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

InitializeSListHead

InterlockedFlushSList

InterlockedPopEntrySList

InterlockedPushEntrySList

InterlockedPushListSList

QueryDepthSList

Sections

.rdata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-libraryloader-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

6f:15:91:7e:6a:2d:30:3d:be:80:51:68:51:26:3a:6f:0d:ca:72:17:ee:ba:f9:33:63:f7:76:ed:89:48:32:05
Signer

Actual PE Digest

6f:15:91:7e:6a:2d:30:3d:be:80:51:68:51:26:3a:6f:0d:ca:72:17:ee:ba:f9:33:63:f7:76:ed:89:48:32:05

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

AddDllDirectory

DisableThreadLibraryCalls

FindResourceExW

FindStringOrdinal

FreeLibrary

FreeLibraryAndExitThread

FreeResource

GetModuleFileNameA

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExA

GetModuleHandleExW

GetModuleHandleW

GetProcAddress

LoadLibraryExA

LoadLibraryExW

LoadResource

LoadStringA

LoadStringW

LockResource

RemoveDllDirectory

SetDefaultDllDirectories

SizeofResource

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-localization-l1-2-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f5:69:af:08:5e:4f:96:78:41:63:67:62:7f:aa:e1:b7:ef:02:f7:e0:1f:2b:4b:4c:a8:34:16:3d:44:0a:40:42
Signer

Actual PE Digest

f5:69:af:08:5e:4f:96:78:41:63:67:62:7f:aa:e1:b7:ef:02:f7:e0:1f:2b:4b:4c:a8:34:16:3d:44:0a:40:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

ConvertDefaultLocale

EnumSystemGeoID

EnumSystemLocalesA

EnumSystemLocalesW

FindNLSString

FindNLSStringEx

FormatMessageA

FormatMessageW

GetACP

GetCPInfo

GetCPInfoExW

GetCalendarInfoEx

GetCalendarInfoW

GetFileMUIInfo

GetFileMUIPath

GetGeoInfoW

GetLocaleInfoA

GetLocaleInfoEx

GetLocaleInfoW

GetNLSVersion

GetNLSVersionEx

GetOEMCP

GetProcessPreferredUILanguages

GetSystemDefaultLCID

GetSystemDefaultLangID

GetSystemPreferredUILanguages

GetThreadLocale

GetThreadPreferredUILanguages

GetThreadUILanguage

GetUILanguageInfo

GetUserDefaultLCID

GetUserDefaultLangID

GetUserDefaultLocaleName

GetUserGeoID

GetUserPreferredUILanguages

IdnToAscii

IdnToUnicode

IsDBCSLeadByte

IsDBCSLeadByteEx

IsNLSDefinedString

IsValidCodePage

IsValidLanguageGroup

IsValidLocale

IsValidLocaleName

IsValidNLSVersion

LCMapStringA

LCMapStringEx

LCMapStringW

LocaleNameToLCID

ResolveLocaleName

SetCalendarInfoW

SetLocaleInfoW

SetProcessPreferredUILanguages

SetThreadLocale

SetThreadPreferredUILanguages

SetThreadUILanguage

SetUserGeoID

VerLanguageNameA

VerLanguageNameW

Sections

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-memory-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

02:39:ec:92:4c:b0:dc:b8:75:90:05:f9:11:43:08:12:eb:d9:8b:75:36:c7:1c:2e:1d:36:07:16:58:7a:6e:78
Signer

Actual PE Digest

02:39:ec:92:4c:b0:dc:b8:75:90:05:f9:11:43:08:12:eb:d9:8b:75:36:c7:1c:2e:1d:36:07:16:58:7a:6e:78

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CreateFileMappingW

FlushViewOfFile

MapViewOfFile

MapViewOfFileEx

OpenFileMappingW

ReadProcessMemory

UnmapViewOfFile

VirtualAlloc

VirtualAllocEx

VirtualFree

VirtualFreeEx

VirtualProtect

VirtualProtectEx

VirtualQuery

VirtualQueryEx

WriteProcessMemory

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-namedpipe-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

36:0b:f1:4e:1a:55:55:57:d9:b3:67:d8:d3:f8:13:7b:e1:51:39:7d:6b:19:5f:a1:e2:22:dd:25:06:1e:ca:33
Signer

Actual PE Digest

36:0b:f1:4e:1a:55:55:57:d9:b3:67:d8:d3:f8:13:7b:e1:51:39:7d:6b:19:5f:a1:e2:22:dd:25:06:1e:ca:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

ConnectNamedPipe

CreateNamedPipeW

CreatePipe

DisconnectNamedPipe

GetNamedPipeClientComputerNameW

ImpersonateNamedPipeClient

PeekNamedPipe

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

Sections

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-processenvironment-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5a:69:b2:24:c4:45:ef:64:a3:50:c7:0b:fa:32:3e:d4:ad:57:88:0d:ae:b3:ad:09:88:cd:70:ed:31:f6:aa:c4
Signer

Actual PE Digest

5a:69:b2:24:c4:45:ef:64:a3:50:c7:0b:fa:32:3e:d4:ad:57:88:0d:ae:b3:ad:09:88:cd:70:ed:31:f6:aa:c4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

ExpandEnvironmentStringsA

ExpandEnvironmentStringsW

FreeEnvironmentStringsA

FreeEnvironmentStringsW

GetCommandLineA

GetCommandLineW

GetCurrentDirectoryA

GetCurrentDirectoryW

GetEnvironmentStrings

GetEnvironmentStringsW

GetEnvironmentVariableA

GetEnvironmentVariableW

GetStdHandle

SearchPathW

SetCurrentDirectoryA

SetCurrentDirectoryW

SetEnvironmentStringsW

SetEnvironmentVariableA

SetEnvironmentVariableW

SetStdHandle

SetStdHandleEx

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-processthreads-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

89:60:95:ee:d1:89:4a:71:e9:0b:72:83:76:ab:99:b5:33:c9:ad:c4:82:da:2e:f2:e7:c2:cc:ff:60:15:d3:a2
Signer

Actual PE Digest

89:60:95:ee:d1:89:4a:71:e9:0b:72:83:76:ab:99:b5:33:c9:ad:c4:82:da:2e:f2:e7:c2:cc:ff:60:15:d3:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CreateProcessA

CreateProcessAsUserW

CreateProcessW

CreateRemoteThread

CreateRemoteThreadEx

CreateThread

DeleteProcThreadAttributeList

ExitProcess

ExitThread

FlushProcessWriteBuffers

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetExitCodeProcess

GetExitCodeThread

GetPriorityClass

GetProcessId

GetProcessIdOfThread

GetProcessTimes

GetProcessVersion

GetStartupInfoW

GetThreadId

GetThreadPriority

GetThreadPriorityBoost

InitializeProcThreadAttributeList

OpenProcessToken

OpenThread

OpenThreadToken

ProcessIdToSessionId

QueryProcessAffinityUpdateMode

QueueUserAPC

ResumeThread

SetPriorityClass

SetProcessAffinityUpdateMode

SetProcessShutdownParameters

SetThreadPriority

SetThreadPriorityBoost

SetThreadStackGuarantee

SetThreadToken

SuspendThread

SwitchToThread

TerminateProcess

TerminateThread

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UpdateProcThreadAttribute

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-processthreads-l1-1-1.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1f:2c:05:2f:23:c7:b5:cb:ab:e7:e7:b5:10:11:09:fb:1d:ae:bd:8b:e2:06:6b:b9:3f:c9:0e:0f:79:ae:91:9b
Signer

Actual PE Digest

1f:2c:05:2f:23:c7:b5:cb:ab:e7:e7:b5:10:11:09:fb:1d:ae:bd:8b:e2:06:6b:b9:3f:c9:0e:0f:79:ae:91:9b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

FlushInstructionCache

GetCurrentProcessorNumber

GetCurrentProcessorNumberEx

GetCurrentThreadStackLimits

GetProcessHandleCount

GetProcessMitigationPolicy

GetThreadContext

GetThreadIdealProcessorEx

GetThreadTimes

IsProcessorFeaturePresent

OpenProcess

SetProcessMitigationPolicy

SetThreadContext

SetThreadIdealProcessorEx

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-profile-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d6:cb:43:ca:0b:6b:66:8d:af:48:cf:42:ed:3c:78:d0:4d:19:c9:d0:51:9f:14:ea:59:67:eb:83:98:e0:18:02
Signer

Actual PE Digest

d6:cb:43:ca:0b:6b:66:8d:af:48:cf:42:ed:3c:78:d0:4d:19:c9:d0:51:9f:14:ea:59:67:eb:83:98:e0:18:02

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

QueryPerformanceCounter

QueryPerformanceFrequency

Sections

.rdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-rtlsupport-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a2:4f:f4:be:16:db:3b:f4:f4:72:a1:62:16:8e:8d:d7:8b:f9:0e:9c:58:9c:c2:37:07:4d:c2:35:68:53:34:9b
Signer

Actual PE Digest

a2:4f:f4:be:16:db:3b:f4:f4:72:a1:62:16:8e:8d:d7:8b:f9:0e:9c:58:9c:c2:37:07:4d:c2:35:68:53:34:9b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

RtlAddFunctionTable

RtlCaptureContext

RtlCaptureStackBackTrace

RtlCompareMemory

RtlDeleteFunctionTable

RtlInstallFunctionTableCallback

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlRaiseException

RtlRestoreContext

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-string-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

59:33:ef:74:7e:cd:84:4a:50:41:dc:e8:bb:81:bf:3c:d7:0c:d4:6c:2d:67:d9:a6:0e:15:22:ce:4a:f9:2a:21
Signer

Actual PE Digest

59:33:ef:74:7e:cd:84:4a:50:41:dc:e8:bb:81:bf:3c:d7:0c:d4:6c:2d:67:d9:a6:0e:15:22:ce:4a:f9:2a:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CompareStringEx

CompareStringOrdinal

CompareStringW

FoldStringW

GetStringTypeExW

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

Sections

.rdata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-synch-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8c:5c:a9:6d:67:a8:2a:0d:05:92:40:7f:de:cd:93:12:bc:7a:2e:b4:49:f3:14:77:99:8f:ac:79:78:83:0c:af
Signer

Actual PE Digest

8c:5c:a9:6d:67:a8:2a:0d:05:92:40:7f:de:cd:93:12:bc:7a:2e:b4:49:f3:14:77:99:8f:ac:79:78:83:0c:af

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

AcquireSRWLockExclusive

AcquireSRWLockShared

CancelWaitableTimer

CreateEventA

CreateEventExA

CreateEventExW

CreateEventW

CreateMutexA

CreateMutexExA

CreateMutexExW

CreateMutexW

CreateSemaphoreExW

CreateWaitableTimerExW

DeleteCriticalSection

EnterCriticalSection

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSRWLock

LeaveCriticalSection

OpenEventA

OpenEventW

OpenMutexW

OpenSemaphoreW

OpenWaitableTimerW

ReleaseMutex

ReleaseSRWLockExclusive

ReleaseSRWLockShared

ReleaseSemaphore

ResetEvent

SetCriticalSectionSpinCount

SetEvent

SetWaitableTimer

SetWaitableTimerEx

SleepEx

TryAcquireSRWLockExclusive

TryAcquireSRWLockShared

TryEnterCriticalSection

WaitForMultipleObjectsEx

WaitForSingleObject

WaitForSingleObjectEx

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-synch-l1-2-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

67:be:a8:c4:d7:a1:32:52:b1:2c:33:14:01:f8:51:a1:d7:9f:2d:1b:e8:d7:1b:56:77:24:ed:70:68:fc:ad:38
Signer

Actual PE Digest

67:be:a8:c4:d7:a1:32:52:b1:2c:33:14:01:f8:51:a1:d7:9f:2d:1b:e8:d7:1b:56:77:24:ed:70:68:fc:ad:38

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

DeleteSynchronizationBarrier

EnterSynchronizationBarrier

InitOnceBeginInitialize

InitOnceComplete

InitOnceExecuteOnce

InitOnceInitialize

InitializeConditionVariable

InitializeSynchronizationBarrier

SignalObjectAndWait

Sleep

SleepConditionVariableCS

SleepConditionVariableSRW

WaitOnAddress

WakeAllConditionVariable

WakeByAddressAll

WakeByAddressSingle

WakeConditionVariable

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-sysinfo-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

cc:2e:cb:89:b9:14:b9:65:90:79:ec:3a:12:58:e7:c6:ed:48:1d:17:8b:d6:d3:66:71:d9:29:fe:99:85:56:9c
Signer

Actual PE Digest

cc:2e:cb:89:b9:14:b9:65:90:79:ec:3a:12:58:e7:c6:ed:48:1d:17:8b:d6:d3:66:71:d9:29:fe:99:85:56:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetComputerNameExA

GetComputerNameExW

GetLocalTime

GetLogicalProcessorInformation

GetLogicalProcessorInformationEx

GetSystemDirectoryA

GetSystemDirectoryW

GetSystemInfo

GetSystemTime

GetSystemTimeAdjustment

GetSystemTimeAsFileTime

GetSystemWindowsDirectoryA

GetSystemWindowsDirectoryW

GetTickCount

GetTickCount64

GetVersion

GetVersionExA

GetVersionExW

GetWindowsDirectoryA

GetWindowsDirectoryW

GlobalMemoryStatusEx

SetLocalTime

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-timezone-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

78:4c:6f:99:c2:05:c7:f3:53:93:23:bd:09:52:75:d3:98:9b:87:68:f9:f8:e7:bc:9f:0a:9e:75:a4:ee:3a:b9
Signer

Actual PE Digest

78:4c:6f:99:c2:05:c7:f3:53:93:23:bd:09:52:75:d3:98:9b:87:68:f9:f8:e7:bc:9f:0a:9e:75:a4:ee:3a:b9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

EnumDynamicTimeZoneInformation

FileTimeToSystemTime

GetDynamicTimeZoneInformation

GetDynamicTimeZoneInformationEffectiveYears

GetTimeZoneInformation

GetTimeZoneInformationForYear

SetDynamicTimeZoneInformation

SetTimeZoneInformation

SystemTimeToFileTime

SystemTimeToTzSpecificLocalTime

SystemTimeToTzSpecificLocalTimeEx

TzSpecificLocalTimeToSystemTime

TzSpecificLocalTimeToSystemTimeEx

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-core-util-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ea:3a:dd:89:19:d5:35:79:fd:06:0e:c9:52:2a:3a:87:a6:56:fc:69:c6:a6:30:e9:bf:59:b5:71:1d:43:dc:49
Signer

Actual PE Digest

ea:3a:dd:89:19:d5:35:79:fd:06:0e:c9:52:2a:3a:87:a6:56:fc:69:c6:a6:30:e9:bf:59:b5:71:1d:43:dc:49

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

Beep

DecodePointer

DecodeSystemPointer

EncodePointer

EncodeSystemPointer

Sections

.rdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-conio-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7f:c4:bc:06:a1:27:e4:af:0f:05:e1:69:23:40:a0:29:02:17:12:d3:53:9f:bc:26:8e:5a:de:88:c8:7b:dd:77
Signer

Actual PE Digest

7f:c4:bc:06:a1:27:e4:af:0f:05:e1:69:23:40:a0:29:02:17:12:d3:53:9f:bc:26:8e:5a:de:88:c8:7b:dd:77

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__conio_common_vcprintf

__conio_common_vcprintf_p

__conio_common_vcprintf_s

__conio_common_vcscanf

__conio_common_vcwprintf

__conio_common_vcwprintf_p

__conio_common_vcwprintf_s

__conio_common_vcwscanf

_cgets

_cgets_s

_cgetws

_cgetws_s

_cputs

_cputws

_getch

_getch_nolock

_getche

_getche_nolock

_getwch

_getwch_nolock

_getwche

_getwche_nolock

_putch

_putch_nolock

_putwch

_putwch_nolock

_ungetch

_ungetch_nolock

_ungetwch

_ungetwch_nolock

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-convert-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

11:70:1c:dc:fc:48:4f:d4:94:d0:b4:0a:86:0b:e3:f3:30:37:94:f3:4d:48:64:48:e6:82:6a:21:64:36:37:76
Signer

Actual PE Digest

11:70:1c:dc:fc:48:4f:d4:94:d0:b4:0a:86:0b:e3:f3:30:37:94:f3:4d:48:64:48:e6:82:6a:21:64:36:37:76

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__toascii

_atodbl

_atodbl_l

_atof_l

_atoflt

_atoflt_l

_atoi64

_atoi64_l

_atoi_l

_atol_l

_atoldbl

_atoldbl_l

_atoll_l

_ecvt

_ecvt_s

_fcvt

_fcvt_s

_gcvt

_gcvt_s

_i64toa

_i64toa_s

_i64tow

_i64tow_s

_itoa

_itoa_s

_itow

_itow_s

_ltoa

_ltoa_s

_ltow

_ltow_s

_strtod_l

_strtof_l

_strtoi64

_strtoi64_l

_strtoimax_l

_strtol_l

_strtold_l

_strtoll_l

_strtoui64

_strtoui64_l

_strtoul_l

_strtoull_l

_strtoumax_l

_ui64toa

_ui64toa_s

_ui64tow

_ui64tow_s

_ultoa

_ultoa_s

_ultow

_ultow_s

_wcstod_l

_wcstof_l

_wcstoi64

_wcstoi64_l

_wcstoimax_l

_wcstol_l

_wcstold_l

_wcstoll_l

_wcstombs_l

_wcstombs_s_l

_wcstoui64

_wcstoui64_l

_wcstoul_l

_wcstoull_l

_wcstoumax_l

_wctomb_l

_wctomb_s_l

_wtof

_wtof_l

_wtoi

_wtoi64

_wtoi64_l

_wtoi_l

_wtol

_wtol_l

_wtoll

_wtoll_l

atof

atoi

atol

atoll

btowc

c16rtomb

c32rtomb

mbrtoc16

mbrtoc32

mbrtowc

mbsrtowcs

mbsrtowcs_s

mbstowcs

mbstowcs_s

mbtowc

strtod

strtof

strtoimax

strtol

strtold

strtoll

strtoul

strtoull

strtoumax

wcrtomb

wcrtomb_s

wcsrtombs

wcsrtombs_s

wcstod

wcstof

wcstoimax

wcstol

wcstold

wcstoll

wcstombs

wcstombs_s

wcstoul

wcstoull

wcstoumax

wctob

wctomb

wctomb_s

wctrans

Sections

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-environment-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ca:05:94:9b:7e:3b:46:a7:3d:9f:d3:6a:8c:33:12:40:55:6c:06:5b:65:cc:f8:32:e5:2f:b4:c6:17:97:49:d4
Signer

Actual PE Digest

ca:05:94:9b:7e:3b:46:a7:3d:9f:d3:6a:8c:33:12:40:55:6c:06:5b:65:cc:f8:32:e5:2f:b4:c6:17:97:49:d4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__p__environ

__p__wenviron

_dupenv_s

_putenv

_putenv_s

_searchenv

_searchenv_s

_wdupenv_s

_wgetcwd

_wgetdcwd

_wgetenv

_wgetenv_s

_wputenv

_wputenv_s

_wsearchenv

_wsearchenv_s

getenv

getenv_s

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-filesystem-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e7:62:9f:f3:5d:82:9e:32:0f:c1:53:1f:c7:ad:d4:82:2f:e2:21:34:e0:e1:11:27:0b:5a:56:21:eb:b4:54:13
Signer

Actual PE Digest

e7:62:9f:f3:5d:82:9e:32:0f:c1:53:1f:c7:ad:d4:82:2f:e2:21:34:e0:e1:11:27:0b:5a:56:21:eb:b4:54:13

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_access

_access_s

_chdir

_chdrive

_chmod

_findclose

_findfirst32

_findfirst32i64

_findfirst64

_findfirst64i32

_findnext32

_findnext32i64

_findnext64

_findnext64i32

_fstat32

_fstat32i64

_fstat64

_fstat64i32

_fullpath

_getdiskfree

_getdrive

_getdrives

_lock_file

_makepath

_makepath_s

_mkdir

_rmdir

_splitpath

_splitpath_s

_stat32

_stat32i64

_stat64

_stat64i32

_umask

_umask_s

_unlink

_unlock_file

_waccess

_waccess_s

_wchdir

_wchmod

_wfindfirst32

_wfindfirst32i64

_wfindfirst64

_wfindfirst64i32

_wfindnext32

_wfindnext32i64

_wfindnext64

_wfindnext64i32

_wfullpath

_wmakepath

_wmakepath_s

_wmkdir

_wremove

_wrename

_wrmdir

_wsplitpath

_wsplitpath_s

_wstat32

_wstat32i64

_wstat64

_wstat64i32

_wunlink

remove

rename

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-heap-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a7:00:04:99:2f:7c:e6:46:fd:e2:e1:af:5f:4d:79:b8:86:e6:35:7b:53:6c:44:1f:c7:2b:c8:a1:c7:1f:88:3e
Signer

Actual PE Digest

a7:00:04:99:2f:7c:e6:46:fd:e2:e1:af:5f:4d:79:b8:86:e6:35:7b:53:6c:44:1f:c7:2b:c8:a1:c7:1f:88:3e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_aligned_free

_aligned_malloc

_aligned_msize

_aligned_offset_malloc

_aligned_offset_realloc

_aligned_offset_recalloc

_aligned_realloc

_aligned_recalloc

_callnewh

_calloc_base

_expand

_free_base

_get_heap_handle

_heapchk

_heapmin

_heapwalk

_malloc_base

_msize

_query_new_handler

_query_new_mode

_realloc_base

_recalloc

_set_new_mode

calloc

free

malloc

realloc

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-locale-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a8:50:43:72:83:2b:15:35:cc:f3:f7:71:eb:51:c8:d4:b8:62:01:1b:fa:b7:40:fc:25:96:4b:57:e7:7a:06:b9
Signer

Actual PE Digest

a8:50:43:72:83:2b:15:35:cc:f3:f7:71:eb:51:c8:d4:b8:62:01:1b:fa:b7:40:fc:25:96:4b:57:e7:7a:06:b9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

___lc_codepage_func

___lc_collate_cp_func

___lc_locale_name_func

___mb_cur_max_func

___mb_cur_max_l_func

__initialize_lconv_for_unsigned_char

__pctype_func

__pwctype_func

_configthreadlocale

_create_locale

_free_locale

_get_current_locale

_getmbcp

_lock_locales

_setmbcp

_unlock_locales

_wcreate_locale

_wsetlocale

localeconv

setlocale

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-math-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:e4:73:61:28:5d:4d:09:7d:a5:80:d5:c1:84:d3:94:3e:3a:65:b4:1a:6a:89:dd:cd:29:2c:9f:44:f0:6e:43
Signer

Actual PE Digest

2e:e4:73:61:28:5d:4d:09:7d:a5:80:d5:c1:84:d3:94:3e:3a:65:b4:1a:6a:89:dd:cd:29:2c:9f:44:f0:6e:43

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_Cbuild

_Cmulcc

_Cmulcr

_FCbuild

_FCmulcc

_FCmulcr

_LCbuild

_LCmulcc

_LCmulcr

__setusermatherr

_cabs

_chgsign

_chgsignf

_copysign

_copysignf

_d_int

_dclass

_dexp

_dlog

_dnorm

_dpcomp

_dpoly

_dscale

_dsign

_dsin

_dtest

_dunscale

_except1

_fd_int

_fdclass

_fdexp

_fdlog

_fdnorm

_fdopen

_fdpcomp

_fdpoly

_fdscale

_fdsign

_fdsin

_fdtest

_fdunscale

_finite

_finitef

_fpclass

_fpclassf

_get_FMA3_enable

_hypot

_hypotf

_isnan

_isnanf

_j0

_j1

_jn

_ld_int

_ldclass

_ldexp

_ldlog

_ldpcomp

_ldpoly

_ldscale

_ldsign

_ldsin

_ldtest

_ldunscale

_logb

_logbf

_nextafter

_nextafterf

_scalb

_scalbf

_set_FMA3_enable

_y0

_y1

_yn

acos

acosf

acosh

acoshf

acoshl

asin

asinf

asinh

asinhf

asinhl

atan

atan2

atan2f

atanf

atanh

atanhf

atanhl

cabs

cabsf

cabsl

cacos

cacosf

cacosh

cacoshf

cacoshl

cacosl

carg

cargf

cargl

casin

casinf

casinh

casinhf

casinhl

casinl

catan

catanf

catanh

catanhf

catanhl

catanl

cbrt

cbrtf

cbrtl

ccos

ccosf

ccosh

ccoshf

ccoshl

ccosl

ceil

ceilf

cexp

cexpf

cexpl

cimag

cimagf

cimagl

clog

clog10

clog10f

clog10l

clogf

clogl

conj

conjf

conjl

copysign

copysignf

copysignl

cos

cosf

cosh

coshf

cpow

cpowf

cpowl

cproj

cprojf

cprojl

creal

crealf

creall

csin

csinf

csinh

csinhf

csinhl

csinl

csqrt

csqrtf

csqrtl

ctan

ctanf

ctanh

ctanhf

ctanhl

ctanl

erf

erfc

erfcf

erfcl

erff

erfl

exp

exp2

exp2f

exp2l

expf

expm1

expm1f

expm1l

fabs

fdim

fdimf

fdiml

floor

floorf

fma

fmaf

fmal

fmax

fmaxf

fmaxl

fmin

fminf

fminl

fmod

fmodf

frexp

hypot

ilogb

ilogbf

ilogbl

ldexp

lgamma

lgammaf

lgammal

llrint

llrintf

llrintl

llround

llroundf

llroundl

log

log10

log10f

log1p

log1pf

log1pl

log2

log2f

log2l

logb

logbf

logbl

logf

lrint

lrintf

lrintl

lround

lroundf

lroundl

modf

modff

nan

nanf

nanl

nearbyint

nearbyintf

nearbyintl

nextafter

nextafterf

nextafterl

nexttoward

nexttowardf

nexttowardl

norm

normf

norml

pow

powf

remainder

remainderf

remainderl

remquo

remquof

remquol

rint

rintf

rintl

round

roundf

roundl

scalbln

scalblnf

scalblnl

scalbn

scalbnf

scalbnl

sin

sinf

sinh

sinhf

sqrt

sqrtf

tan

tanf

tanh

tanhf

tgamma

tgammaf

tgammal

trunc

truncf

truncl

Sections

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-multibyte-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ea:06:4f:f0:2a:66:44:2c:c8:d0:c6:74:a9:fe:b3:9d:59:96:af:b0:dd:16:fe:e9:9c:ee:bf:cd:59:08:21:da
Signer

Actual PE Digest

ea:06:4f:f0:2a:66:44:2c:c8:d0:c6:74:a9:fe:b3:9d:59:96:af:b0:dd:16:fe:e9:9c:ee:bf:cd:59:08:21:da

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__p__mbcasemap

__p__mbctype

_ismbbalnum

_ismbbalnum_l

_ismbbalpha

_ismbbalpha_l

_ismbbblank

_ismbbblank_l

_ismbbgraph

_ismbbgraph_l

_ismbbkalnum

_ismbbkalnum_l

_ismbbkana

_ismbbkana_l

_ismbbkprint

_ismbbkprint_l

_ismbbkpunct

_ismbbkpunct_l

_ismbblead

_ismbblead_l

_ismbbprint

_ismbbprint_l

_ismbbpunct

_ismbbpunct_l

_ismbbtrail

_ismbbtrail_l

_ismbcalnum

_ismbcalnum_l

_ismbcalpha

_ismbcalpha_l

_ismbcblank

_ismbcblank_l

_ismbcdigit

_ismbcdigit_l

_ismbcgraph

_ismbcgraph_l

_ismbchira

_ismbchira_l

_ismbckata

_ismbckata_l

_ismbcl0

_ismbcl0_l

_ismbcl1

_ismbcl1_l

_ismbcl2

_ismbcl2_l

_ismbclegal

_ismbclegal_l

_ismbclower

_ismbclower_l

_ismbcprint

_ismbcprint_l

_ismbcpunct

_ismbcpunct_l

_ismbcspace

_ismbcspace_l

_ismbcsymbol

_ismbcsymbol_l

_ismbcupper

_ismbcupper_l

_ismbslead

_ismbslead_l

_ismbstrail

_ismbstrail_l

_mbbtombc

_mbbtombc_l

_mbbtype

_mbbtype_l

_mbcasemap

_mbccpy

_mbccpy_l

_mbccpy_s

_mbccpy_s_l

_mbcjistojms

_mbcjistojms_l

_mbcjmstojis

_mbcjmstojis_l

_mbclen

_mbclen_l

_mbctohira

_mbctohira_l

_mbctokata

_mbctokata_l

_mbctolower

_mbctolower_l

_mbctombb

_mbctombb_l

_mbctoupper

_mbctoupper_l

_mblen_l

_mbsbtype

_mbsbtype_l

_mbscat_s

_mbscat_s_l

_mbschr

_mbschr_l

_mbscmp

_mbscmp_l

_mbscoll

_mbscoll_l

_mbscpy_s

_mbscpy_s_l

_mbscspn

_mbscspn_l

_mbsdec

_mbsdec_l

_mbsdup

_mbsicmp

_mbsicmp_l

_mbsicoll

_mbsicoll_l

_mbsinc

_mbsinc_l

_mbslen

_mbslen_l

_mbslwr

_mbslwr_l

_mbslwr_s

_mbslwr_s_l

_mbsnbcat

_mbsnbcat_l

_mbsnbcat_s

_mbsnbcat_s_l

_mbsnbcmp

_mbsnbcmp_l

_mbsnbcnt

_mbsnbcnt_l

_mbsnbcoll

_mbsnbcoll_l

_mbsnbcpy

_mbsnbcpy_l

_mbsnbcpy_s

_mbsnbcpy_s_l

_mbsnbicmp

_mbsnbicmp_l

_mbsnbicoll

_mbsnbicoll_l

_mbsnbset

_mbsnbset_l

_mbsnbset_s

_mbsnbset_s_l

_mbsncat

_mbsncat_l

_mbsncat_s

_mbsncat_s_l

_mbsnccnt

_mbsnccnt_l

_mbsncmp

_mbsncmp_l

_mbsncoll

_mbsncoll_l

_mbsncpy

_mbsncpy_l

_mbsncpy_s

_mbsncpy_s_l

_mbsnextc

_mbsnextc_l

_mbsnicmp

_mbsnicmp_l

_mbsnicoll

_mbsnicoll_l

_mbsninc

_mbsninc_l

_mbsnlen

_mbsnlen_l

_mbsnset

_mbsnset_l

_mbsnset_s

_mbsnset_s_l

_mbspbrk

_mbspbrk_l

_mbsrchr

_mbsrchr_l

_mbsrev

_mbsrev_l

_mbsset

_mbsset_l

_mbsset_s

_mbsset_s_l

_mbsspn

_mbsspn_l

_mbsspnp

_mbsspnp_l

_mbsstr

_mbsstr_l

_mbstok

_mbstok_l

_mbstok_s

_mbstok_s_l

_mbstowcs_l

_mbstowcs_s_l

_mbstrlen

_mbstrlen_l

_mbstrnlen

_mbstrnlen_l

_mbsupr

_mbsupr_l

_mbsupr_s

_mbsupr_s_l

_mbtowc_l

Sections

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-private-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

56:9a:11:13:75:72:4a:94:11:6d:e7:dc:88:94:a4:a9:b8:bb:e1:a4:c7:bf:40:70:c2:de:7c:d6:32:81:24:26
Signer

Actual PE Digest

56:9a:11:13:75:72:4a:94:11:6d:e7:dc:88:94:a4:a9:b8:bb:e1:a4:c7:bf:40:70:c2:de:7c:d6:32:81:24:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_CreateFrameInfo

_CxxThrowException

_FindAndUnlinkFrame

_GetImageBase

_GetThrowImageBase

_IsExceptionObjectToBeDestroyed

_SetImageBase

_SetThrowImageBase

_SetWinRTOutOfMemoryExceptionCallback

__AdjustPointer

__BuildCatchObject

__BuildCatchObjectHelper

__C_specific_handler

__C_specific_handler_noexcept

__CxxDetectRethrow

__CxxExceptionFilter

__CxxFrameHandler

__CxxFrameHandler2

__CxxFrameHandler3

__CxxFrameHandler4

__CxxQueryExceptionSize

__CxxRegisterExceptionObject

__CxxUnregisterExceptionObject

__DestructExceptionObject

__FrameUnwindFilter

__GetPlatformExceptionInfo

__NLG_Dispatch2

__NLG_Return2

__RTCastToVoid

__RTDynamicCast

__RTtypeid

__TypeMatch

__current_exception

__current_exception_context

__dcrt_get_wide_environment_from_os

__dcrt_initial_narrow_environment

__intrinsic_setjmp

__intrinsic_setjmpex

__processing_throw

__report_gsfailure

__std_exception_copy

__std_exception_destroy

__std_terminate

__std_type_info_compare

__std_type_info_destroy_list

__std_type_info_hash

__std_type_info_name

__unDName

__unDNameEx

__uncaught_exception

__uncaught_exceptions

_get_purecall_handler

_get_unexpected

_is_exception_typeof

_local_unwind

_o__Getdays

_o__Getmonths

_o__Gettnames

_o__Strftime

_o__W_Getdays

_o__W_Getmonths

_o__W_Gettnames

_o__Wcsftime

_o____lc_codepage_func

_o____lc_collate_cp_func

_o____lc_locale_name_func

_o____mb_cur_max_func

_o___acrt_iob_func

_o___conio_common_vcprintf

_o___conio_common_vcprintf_p

_o___conio_common_vcprintf_s

_o___conio_common_vcscanf

_o___conio_common_vcwprintf

_o___conio_common_vcwprintf_p

_o___conio_common_vcwprintf_s

_o___conio_common_vcwscanf

_o___daylight

_o___dstbias

_o___fpe_flt_rounds

_o___p___argc

_o___p___argv

_o___p___wargv

_o___p__acmdln

_o___p__commode

_o___p__environ

_o___p__fmode

_o___p__mbcasemap

_o___p__mbctype

_o___p__pgmptr

_o___p__wcmdln

_o___p__wenviron

_o___p__wpgmptr

_o___pctype_func

_o___pwctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___std_type_info_name

_o___stdio_common_vfprintf

_o___stdio_common_vfprintf_p

_o___stdio_common_vfprintf_s

_o___stdio_common_vfscanf

_o___stdio_common_vfwprintf

_o___stdio_common_vfwprintf_p

_o___stdio_common_vfwprintf_s

_o___stdio_common_vfwscanf

_o___stdio_common_vsnprintf_s

_o___stdio_common_vsnwprintf_s

_o___stdio_common_vsprintf

_o___stdio_common_vsprintf_p

_o___stdio_common_vsprintf_s

_o___stdio_common_vsscanf

_o___stdio_common_vswprintf

_o___stdio_common_vswprintf_p

_o___stdio_common_vswprintf_s

_o___stdio_common_vswscanf

_o___timezone

_o___tzname

_o___wcserror

_o__access

_o__access_s

_o__aligned_free

_o__aligned_malloc

_o__aligned_msize

_o__aligned_offset_malloc

_o__aligned_offset_realloc

_o__aligned_offset_recalloc

_o__aligned_realloc

_o__aligned_recalloc

_o__atodbl

_o__atodbl_l

_o__atof_l

_o__atoflt

_o__atoflt_l

_o__atoi64

_o__atoi64_l

_o__atoi_l

_o__atol_l

_o__atoldbl

_o__atoldbl_l

_o__atoll_l

_o__beep

_o__beginthread

_o__beginthreadex

_o__cabs

_o__callnewh

_o__calloc_base

_o__cexit

_o__cgets

_o__cgets_s

_o__cgetws

_o__cgetws_s

_o__chdir

_o__chdrive

_o__chmod

_o__chsize

_o__chsize_s

_o__close

_o__commit

_o__configthreadlocale

_o__configure_narrow_argv

_o__configure_wide_argv

_o__controlfp_s

_o__cputs

_o__cputws

_o__creat

_o__create_locale

_o__crt_atexit

_o__ctime32_s

_o__ctime64_s

_o__cwait

_o__d_int

_o__dclass

_o__difftime32

_o__difftime64

_o__dlog

_o__dnorm

_o__dpcomp

_o__dpoly

_o__dscale

_o__dsign

_o__dsin

_o__dtest

_o__dunscale

_o__dup

_o__dup2

_o__dupenv_s

_o__ecvt

_o__ecvt_s

_o__endthread

_o__endthreadex

_o__eof

_o__errno

_o__except1

_o__execute_onexit_table

_o__execv

_o__execve

_o__execvp

_o__execvpe

_o__exit

_o__expand

_o__fclose_nolock

_o__fcloseall

_o__fcvt

_o__fcvt_s

_o__fd_int

_o__fdclass

_o__fdexp

_o__fdlog

_o__fdopen

_o__fdpcomp

_o__fdpoly

_o__fdscale

_o__fdsign

_o__fdsin

_o__fflush_nolock

_o__fgetc_nolock

_o__fgetchar

_o__fgetwc_nolock

_o__fgetwchar

_o__filelength

_o__filelengthi64

_o__fileno

_o__findclose

_o__findfirst32

_o__findfirst32i64

_o__findfirst64

_o__findfirst64i32

_o__findnext32

_o__findnext32i64

_o__findnext64

_o__findnext64i32

_o__flushall

_o__fpclass

_o__fpclassf

_o__fputc_nolock

_o__fputchar

_o__fputwc_nolock

_o__fputwchar

_o__fread_nolock

_o__fread_nolock_s

_o__free_base

_o__free_locale

_o__fseek_nolock

_o__fseeki64

_o__fseeki64_nolock

_o__fsopen

_o__fstat32

_o__fstat32i64

_o__fstat64

_o__fstat64i32

_o__ftell_nolock

_o__ftelli64

_o__ftelli64_nolock

_o__ftime32

_o__ftime32_s

_o__ftime64

_o__ftime64_s

_o__fullpath

_o__futime32

_o__futime64

_o__fwrite_nolock

_o__gcvt

_o__gcvt_s

_o__get_daylight

_o__get_doserrno

_o__get_dstbias

_o__get_errno

_o__get_fmode

_o__get_heap_handle

_o__get_initial_narrow_environment

_o__get_initial_wide_environment

_o__get_invalid_parameter_handler

_o__get_narrow_winmain_command_line

_o__get_osfhandle

_o__get_pgmptr

_o__get_stream_buffer_pointers

_o__get_terminate

_o__get_thread_local_invalid_parameter_handler

_o__get_timezone

_o__get_tzname

_o__get_wide_winmain_command_line

_o__get_wpgmptr

_o__getc_nolock

_o__getch

_o__getch_nolock

_o__getche

_o__getche_nolock

_o__getcwd

_o__getdcwd

_o__getdiskfree

_o__getdllprocaddr

_o__getdrive

_o__getdrives

_o__getmbcp

_o__getsystime

_o__getw

_o__getwc_nolock

_o__getwch

_o__getwch_nolock

_o__getwche

_o__getwche_nolock

_o__getws

_o__getws_s

_o__gmtime32

_o__gmtime32_s

_o__gmtime64

_o__gmtime64_s

_o__heapchk

_o__heapmin

_o__hypot

_o__hypotf

_o__i64toa

_o__i64toa_s

_o__i64tow

_o__i64tow_s

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__initialize_wide_environment

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__isatty

_o__isctype

_o__isctype_l

_o__isleadbyte_l

_o__ismbbalnum

_o__ismbbalnum_l

_o__ismbbalpha

_o__ismbbalpha_l

_o__ismbbblank

_o__ismbbblank_l

_o__ismbbgraph

_o__ismbbgraph_l

_o__ismbbkalnum

_o__ismbbkalnum_l

_o__ismbbkana

_o__ismbbkana_l

_o__ismbbkprint

_o__ismbbkprint_l

_o__ismbbkpunct

_o__ismbbkpunct_l

_o__ismbblead

_o__ismbblead_l

_o__ismbbprint

_o__ismbbprint_l

_o__ismbbpunct

_o__ismbbpunct_l

_o__ismbbtrail

_o__ismbbtrail_l

_o__ismbcalnum

_o__ismbcalnum_l

_o__ismbcalpha

_o__ismbcalpha_l

_o__ismbcblank

_o__ismbcblank_l

_o__ismbcdigit

_o__ismbcdigit_l

_o__ismbcgraph

_o__ismbcgraph_l

_o__ismbchira

_o__ismbchira_l

_o__ismbckata

_o__ismbckata_l

_o__ismbcl0

_o__ismbcl0_l

_o__ismbcl1

_o__ismbcl1_l

_o__ismbcl2

_o__ismbcl2_l

_o__ismbclegal

_o__ismbclegal_l

_o__ismbclower

_o__ismbclower_l

_o__ismbcprint

_o__ismbcprint_l

_o__ismbcpunct

_o__ismbcpunct_l

_o__ismbcspace

_o__ismbcspace_l

_o__ismbcsymbol

_o__ismbcsymbol_l

_o__ismbcupper

_o__ismbcupper_l

_o__ismbslead

_o__ismbslead_l

_o__ismbstrail

_o__ismbstrail_l

_o__iswctype_l

_o__itoa

_o__itoa_s

_o__itow

_o__itow_s

_o__j0

_o__j1

_o__jn

_o__kbhit

_o__ld_int

_o__ldclass

_o__ldexp

_o__ldlog

_o__ldpcomp

_o__ldpoly

_o__ldscale

_o__ldsign

_o__ldsin

_o__ldtest

_o__ldunscale

_o__lfind

_o__lfind_s

_o__loaddll

_o__localtime32

_o__localtime32_s

_o__localtime64

_o__localtime64_s

_o__lock_file

_o__locking

_o__logb

_o__logbf

_o__lsearch

_o__lsearch_s

_o__lseek

_o__lseeki64

_o__ltoa

_o__ltoa_s

_o__ltow

_o__ltow_s

_o__makepath

_o__makepath_s

_o__malloc_base

_o__mbbtombc

_o__mbbtombc_l

_o__mbbtype

_o__mbbtype_l

_o__mbccpy

_o__mbccpy_l

_o__mbccpy_s

_o__mbccpy_s_l

_o__mbcjistojms

_o__mbcjistojms_l

_o__mbcjmstojis

_o__mbcjmstojis_l

_o__mbclen

_o__mbclen_l

_o__mbctohira

_o__mbctohira_l

_o__mbctokata

_o__mbctokata_l

_o__mbctolower

_o__mbctolower_l

_o__mbctombb

_o__mbctombb_l

_o__mbctoupper

_o__mbctoupper_l

_o__mblen_l

_o__mbsbtype

_o__mbsbtype_l

_o__mbscat_s

_o__mbscat_s_l

_o__mbschr

_o__mbschr_l

_o__mbscmp

_o__mbscmp_l

_o__mbscoll

_o__mbscoll_l

_o__mbscpy_s

_o__mbscpy_s_l

_o__mbscspn

_o__mbscspn_l

_o__mbsdec

_o__mbsdec_l

_o__mbsicmp

_o__mbsicmp_l

_o__mbsicoll

_o__mbsicoll_l

_o__mbsinc

_o__mbsinc_l

_o__mbslen

_o__mbslen_l

_o__mbslwr

_o__mbslwr_l

_o__mbslwr_s

_o__mbslwr_s_l

_o__mbsnbcat

_o__mbsnbcat_l

_o__mbsnbcat_s

_o__mbsnbcat_s_l

_o__mbsnbcmp

_o__mbsnbcmp_l

_o__mbsnbcnt

_o__mbsnbcnt_l

_o__mbsnbcoll

_o__mbsnbcoll_l

_o__mbsnbcpy

_o__mbsnbcpy_l

_o__mbsnbcpy_s

_o__mbsnbcpy_s_l

_o__mbsnbicmp

_o__mbsnbicmp_l

_o__mbsnbicoll

_o__mbsnbicoll_l

Sections

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-process-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f7:d0:05:2c:d7:24:6d:c6:af:9d:9d:db:89:12:8f:a0:ca:1c:ea:2d:57:a9:e9:ae:44:3f:b2:6d:29:62:46:c0
Signer

Actual PE Digest

f7:d0:05:2c:d7:24:6d:c6:af:9d:9d:db:89:12:8f:a0:ca:1c:ea:2d:57:a9:e9:ae:44:3f:b2:6d:29:62:46:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_beep

_cwait

_execl

_execle

_execlp

_execlpe

_execv

_execve

_execvp

_execvpe

_loaddll

_spawnl

_spawnle

_spawnlp

_spawnlpe

_spawnv

_spawnve

_spawnvp

_spawnvpe

_unloaddll

_wexecl

_wexecle

_wexeclp

_wexeclpe

_wexecv

_wexecve

_wexecvp

_wexecvpe

_wspawnl

_wspawnle

_wspawnlp

_wspawnlpe

_wspawnv

_wspawnve

_wspawnvp

_wspawnvpe

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-runtime-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

20:fc:50:cb:59:16:c1:43:b3:c0:c4:28:9c:53:56:2e:1d:50:b4:4c:72:07:e1:41:12:c1:a6:b2:22:86:1a:10
Signer

Actual PE Digest

20:fc:50:cb:59:16:c1:43:b3:c0:c4:28:9c:53:56:2e:1d:50:b4:4c:72:07:e1:41:12:c1:a6:b2:22:86:1a:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_Exit

__doserrno

__fpe_flt_rounds

__fpecode

__p___argc

__p___argv

__p___wargv

__p__acmdln

__p__pgmptr

__p__wcmdln

__p__wpgmptr

__pxcptinfoptrs

__sys_errlist

__sys_nerr

__threadhandle

__threadid

__wcserror

__wcserror_s

_assert

_beginthread

_beginthreadex

_c_exit

_cexit

_clearfp

_configure_narrow_argv

_configure_wide_argv

_control87

_controlfp

_controlfp_s

_crt_at_quick_exit

_crt_atexit

_endthread

_endthreadex

_errno

_execute_onexit_table

_exit

_fpieee_flt

_fpreset

_get_doserrno

_get_errno

_get_initial_narrow_environment

_get_initial_wide_environment

_get_invalid_parameter_handler

_get_narrow_winmain_command_line

_get_pgmptr

_get_terminate

_get_thread_local_invalid_parameter_handler

_get_wide_winmain_command_line

_get_wpgmptr

_getdllprocaddr

_getpid

_initialize_narrow_environment

_initialize_onexit_table

_initialize_wide_environment

_initterm

_initterm_e

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

_invoke_watson

_query_app_type

_register_onexit_function

_register_thread_local_exe_atexit_callback

_resetstkoflw

_seh_filter_dll

_seh_filter_exe

_set_abort_behavior

_set_app_type

_set_controlfp

_set_doserrno

_set_errno

_set_error_mode

_set_invalid_parameter_handler

_set_new_handler

_set_thread_local_invalid_parameter_handler

_seterrormode

_sleep

_statusfp

_strerror

_strerror_s

_wassert

_wcserror

_wcserror_s

_wperror

_wsystem

abort

exit

feclearexcept

fegetenv

fegetexceptflag

fegetround

feholdexcept

fesetenv

fesetexceptflag

fesetround

fetestexcept

perror

quick_exit

raise

set_terminate

signal

strerror

strerror_s

system

terminate

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-stdio-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

00:43:f2:ac:36:51:c7:c4:77:4b:9b:bd:85:93:41:7b:bd:d0:c4:f5:03:2d:c3:4c:4d:77:e8:43:91:5e:cc:1b
Signer

Actual PE Digest

00:43:f2:ac:36:51:c7:c4:77:4b:9b:bd:85:93:41:7b:bd:d0:c4:f5:03:2d:c3:4c:4d:77:e8:43:91:5e:cc:1b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__acrt_iob_func

__p__commode

__p__fmode

__stdio_common_vfprintf

__stdio_common_vfprintf_p

__stdio_common_vfprintf_s

__stdio_common_vfscanf

__stdio_common_vfwprintf

__stdio_common_vfwprintf_p

__stdio_common_vfwprintf_s

__stdio_common_vfwscanf

__stdio_common_vsnprintf_s

__stdio_common_vsnwprintf_s

__stdio_common_vsprintf

__stdio_common_vsprintf_p

__stdio_common_vsprintf_s

__stdio_common_vsscanf

__stdio_common_vswprintf

__stdio_common_vswprintf_p

__stdio_common_vswprintf_s

__stdio_common_vswscanf

_chsize

_chsize_s

_close

_commit

_creat

_dup

_dup2

_eof

_fclose_nolock

_fcloseall

_fflush_nolock

_fgetc_nolock

_fgetchar

_fgetwc_nolock

_fgetwchar

_filelength

_filelengthi64

_fileno

_flushall

_fputc_nolock

_fputchar

_fputwc_nolock

_fputwchar

_fread_nolock

_fread_nolock_s

_fseek_nolock

_fseeki64

_fseeki64_nolock

_fsopen

_ftell_nolock

_ftelli64

_ftelli64_nolock

_fwrite_nolock

_get_fmode

_get_osfhandle

_get_printf_count_output

_get_stream_buffer_pointers

_getc_nolock

_getcwd

_getdcwd

_getmaxstdio

_getw

_getwc_nolock

_getws

_getws_s

_isatty

_kbhit

_locking

_lseek

_lseeki64

_mktemp

_mktemp_s

_open

_open_osfhandle

_pclose

_pipe

_popen

_putc_nolock

_putw

_putwc_nolock

_putws

_read

_rmtmp

_set_fmode

_set_printf_count_output

_setmaxstdio

_setmode

_sopen

_sopen_dispatch

_sopen_s

_tell

_telli64

_tempnam

_ungetc_nolock

_ungetwc_nolock

_wcreat

_wfdopen

_wfopen

_wfopen_s

_wfreopen

_wfreopen_s

_wfsopen

_wmktemp

_wmktemp_s

_wopen

_wpopen

_write

_wsopen

_wsopen_dispatch

_wsopen_s

_wtempnam

_wtmpnam

_wtmpnam_s

clearerr

clearerr_s

fclose

feof

ferror

fflush

fgetc

fgetpos

fgets

fgetwc

fgetws

fopen

fopen_s

fputc

fputs

fputwc

fputws

fread

fread_s

freopen

freopen_s

fseek

fsetpos

ftell

fwrite

getc

getchar

gets

gets_s

getwc

getwchar

putc

putchar

puts

putwc

putwchar

rewind

setbuf

setvbuf

tmpfile

tmpfile_s

tmpnam

tmpnam_s

ungetc

ungetwc

Sections

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-string-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

19:69:cb:7b:91:a3:b1:a8:93:fa:0a:ea:60:88:f9:32:1e:56:f5:8a:11:10:ff:0c:31:be:39:fe:b4:af:2b:34
Signer

Actual PE Digest

19:69:cb:7b:91:a3:b1:a8:93:fa:0a:ea:60:88:f9:32:1e:56:f5:8a:11:10:ff:0c:31:be:39:fe:b4:af:2b:34

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__isascii

__iscsym

__iscsymf

__iswcsym

__iswcsymf

__strncnt

__wcsncnt

_isalnum_l

_isalpha_l

_isblank_l

_iscntrl_l

_isctype

_isctype_l

_isdigit_l

_isgraph_l

_isleadbyte_l

_islower_l

_isprint_l

_ispunct_l

_isspace_l

_isupper_l

_iswalnum_l

_iswalpha_l

_iswblank_l

_iswcntrl_l

_iswcsym_l

_iswcsymf_l

_iswctype_l

_iswdigit_l

_iswgraph_l

_iswlower_l

_iswprint_l

_iswpunct_l

_iswspace_l

_iswupper_l

_iswxdigit_l

_isxdigit_l

_memccpy

_memicmp

_memicmp_l

_strcoll_l

_strdup

_stricmp

_stricmp_l

_stricoll

_stricoll_l

_strlwr

_strlwr_l

_strlwr_s

_strlwr_s_l

_strncoll

_strncoll_l

_strnicmp

_strnicmp_l

_strnicoll

_strnicoll_l

_strnset

_strnset_s

_strrev

_strset

_strset_s

_strupr

_strupr_l

_strupr_s

_strupr_s_l

_strxfrm_l

_tolower

_tolower_l

_toupper

_toupper_l

_towlower_l

_towupper_l

_wcscoll_l

_wcsdup

_wcsicmp

_wcsicmp_l

_wcsicoll

_wcsicoll_l

_wcslwr

_wcslwr_l

_wcslwr_s

_wcslwr_s_l

_wcsncoll

_wcsncoll_l

_wcsnicmp

_wcsnicmp_l

_wcsnicoll

_wcsnicoll_l

_wcsnset

_wcsnset_s

_wcsrev

_wcsset

_wcsset_s

_wcsupr

_wcsupr_l

_wcsupr_s

_wcsupr_s_l

_wcsxfrm_l

_wctype

is_wctype

isalnum

isalpha

isblank

iscntrl

isdigit

isgraph

isleadbyte

islower

isprint

ispunct

isspace

isupper

iswalnum

iswalpha

iswascii

iswblank

iswcntrl

iswctype

iswdigit

iswgraph

iswlower

iswprint

iswpunct

iswspace

iswupper

iswxdigit

isxdigit

mblen

mbrlen

memcpy_s

memmove_s

memset

strcat

strcat_s

strcmp

strcoll

strcpy

strcpy_s

strcspn

strlen

strncat

strncat_s

strncmp

strncpy

strncpy_s

strnlen

strpbrk

strspn

strtok

strtok_s

strxfrm

tolower

toupper

towctrans

towlower

towupper

wcscat

wcscat_s

wcscmp

wcscoll

wcscpy

wcscpy_s

wcscspn

wcslen

wcsncat

wcsncat_s

wcsncmp

wcsncpy

wcsncpy_s

wcsnlen

wcspbrk

wcsspn

wcstok

wcstok_s

wcsxfrm

wctype

wmemcpy_s

wmemmove_s

Sections

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-time-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:fa:1a:fc:b0:e3:97:b8:8e:09:6c:34:28:0f:c8:a6:95:ea:a1:d6:ed:97:82:a3:7d:9b:c8:ff:55:ab:34:a3
Signer

Actual PE Digest

16:fa:1a:fc:b0:e3:97:b8:8e:09:6c:34:28:0f:c8:a6:95:ea:a1:d6:ed:97:82:a3:7d:9b:c8:ff:55:ab:34:a3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_Getdays

_Getmonths

_Gettnames

_Strftime

_W_Getdays

_W_Getmonths

_W_Gettnames

_Wcsftime

__daylight

__dstbias

__timezone

__tzname

_ctime32

_ctime32_s

_ctime64

_ctime64_s

_difftime32

_difftime64

_ftime32

_ftime32_s

_ftime64

_ftime64_s

_futime32

_futime64

_get_daylight

_get_dstbias

_get_timezone

_get_tzname

_getsystime

_gmtime32

_gmtime32_s

_gmtime64

_gmtime64_s

_localtime32

_localtime32_s

_localtime64

_localtime64_s

_mkgmtime32

_mkgmtime64

_mktime32

_mktime64

_setsystime

_strdate

_strdate_s

_strftime_l

_strtime

_strtime_s

_time32

_time64

_timespec32_get

_timespec64_get

_tzset

_utime32

_utime64

_wasctime

_wasctime_s

_wcsftime_l

_wctime32

_wctime32_s

_wctime64

_wctime64_s

_wstrdate

_wstrdate_s

_wstrtime

_wstrtime_s

_wutime32

_wutime64

asctime

asctime_s

clock

strftime

wcsftime

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/api-ms-win-crt-utility-l1-1-0.dll

.dll windows:10 windows x64

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

cf:4f:6c:3e:d6:66:5c:65:97:01:b7:87:1d:a7:7d:ad:6f:f3:a9:63:9c:f4:f5:51:3f:09:26:76:ea:6c:3a:79
Signer

Actual PE Digest

cf:4f:6c:3e:d6:66:5c:65:97:01:b7:87:1d:a7:7d:ad:6f:f3:a9:63:9c:f4:f5:51:3f:09:26:76:ea:6c:3a:79

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_abs64

_byteswap_uint64

_byteswap_ulong

_byteswap_ushort

_lfind

_lfind_s

_lrotl

_lrotr

_lsearch

_lsearch_s

_rotl

_rotl64

_rotr

_rotr64

_swab

abs

bsearch

bsearch_s

div

imaxabs

imaxdiv

labs

ldiv

llabs

lldiv

qsort

qsort_s

rand

rand_s

srand

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/awt.dll

.dll windows:6 windows x64

eb4df3a145e0d9119dcc30bb7c231ebd

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ba:e3:93:a7:45:00:31:b9:d5:40:7f:46:4b:a4:b4:9d:81:9c:b3:8b:07:94:41:5c:a3:ab:1f:fc:ad:88:8f:b5
Signer

Actual PE Digest

ba:e3:93:a7:45:00:31:b9:d5:40:7f:46:4b:a4:b4:9d:81:9c:b3:8b:07:94:41:5c:a3:ab:1f:fc:ad:88:8f:b5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

kernel32

GetTickCount

GetVersionExW

FreeLibrary

GetModuleHandleW

GetProcAddress

GetCurrentThreadId

TlsAlloc

TlsGetValue

TlsSetValue

MultiByteToWideChar

GetLastError

WaitForSingleObject

GlobalAlloc

GlobalFree

lstrcpynW

lstrlenW

GetProfileStringW

SetLastError

GlobalSize

GlobalUnlock

GlobalLock

LocalFree

FormatMessageW

GetACP

GetLocaleInfoW

ExpandEnvironmentStringsW

lstrcpyW

CloseHandle

ReleaseMutex

CreateMutexW

LocalAlloc

SetCurrentDirectoryW

GetCurrentDirectoryW

GetVersion

ReadFile

SetFilePointer

WideCharToMultiByte

GetCurrentProcessId

LCMapStringW

GetEnvironmentVariableW

GetFileAttributesW

SetEvent

ResetEvent

CreateEventW

LoadLibraryW

lstrcmpW

GetWindowsDirectoryW

GetSystemDefaultLangID

GetSystemTimeAsFileTime

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

WaitForSingleObjectEx

InitializeCriticalSectionAndSpinCount

LoadLibraryExA

VirtualQuery

VirtualProtect

GetSystemInfo

RaiseException

InitializeSListHead

Sleep

DeleteCriticalSection

TryEnterCriticalSection

LeaveCriticalSection

EnterCriticalSection

CreateFileW

InitializeCriticalSection

jvm

jio_snprintf

JVM_CurrentTimeMillis

JVM_RaiseSignal

java

JNU_ThrowIllegalArgumentException

JNU_NewObjectByName

JNU_GetFieldByName

JNU_CallMethodByNameV

getEncodingFromLangID

getJavaIDFromLangID

JNU_ClassString

JNU_ThrowByName

JNU_ThrowIOException

JNU_GetStaticFieldByName

JNU_NewStringPlatform

JNU_ThrowArrayIndexOutOfBoundsException

JNU_SetFieldByName

JNU_CallStaticMethodByName

JNU_ThrowInternalError

JNU_GetEnv

JDK_LoadSystemLibrary

JNU_CallMethodByName

JNU_ThrowOutOfMemoryError

JNU_ThrowNullPointerException

JNU_IsInstanceOfByName

advapi32

RegCloseKey

RegOpenKeyExW

RegQueryValueExW

RegOpenKeyExA

RegQueryValueExA

RegNotifyChangeKeyValue

oleaut32

SysAllocString

SysFreeString

SysAllocStringByteLen

SysStringLen

VariantClear

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

wcsstr

__current_exception

wcschr

__current_exception_context

__C_specific_handler

memmove

memset

memcpy

__std_terminate

_CxxThrowException

strchr

_purecall

strstr

memcmp

__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

_set_new_mode

free

malloc

realloc

calloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

fopen

__stdio_common_vfprintf

__stdio_common_vsscanf

__acrt_iob_func

__stdio_common_vsprintf

fflush

__stdio_common_vswprintf_s

__stdio_common_vswscanf

api-ms-win-crt-string-l1-1-0

_wcsicmp

strncmp

wcsncmp

wcscpy_s

strcspn

wcsncpy

tolower

_strupr_s

_wcsdup

wcsncpy_s

iswspace

wcstok

strcmp

api-ms-win-crt-environment-l1-1-0

getenv

_wgetenv

api-ms-win-crt-math-l1-1-0

cos

sin

ceil

sqrt

pow

floor

round

api-ms-win-crt-utility-l1-1-0

bsearch

qsort

api-ms-win-crt-runtime-l1-1-0

_crt_atexit

_execute_onexit_table

_initterm_e

_initialize_onexit_table

_initialize_narrow_environment

_control87

_configure_narrow_argv

_seh_filter_dll

terminate

_cexit

_invalid_parameter_noinfo

_errno

_register_onexit_function

_beginthreadex

_initterm

_set_new_handler

api-ms-win-crt-convert-l1-1-0

_i64tow

strtod

wcstoul

_wtoi

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-filesystem-l1-1-0

_wfullpath

api-ms-win-crt-time-l1-1-0

_localtime64

_ftime64

wcsftime

Exports

??0D3DContext@@AEAA@PEAUIDirect3D9@@I@Z

??0D3DContext@@QEAA@AEBV0@@Z

??0D3DPipelineManager@@AEAA@XZ

??0D3DVertexCacher@@AEAA@XZ

??1D3DContext@@UEAA@XZ

??1D3DPipelineManager@@AEAA@XZ

??1D3DVertexCacher@@QEAA@XZ

??4D3DContext@@QEAAAEAV0@AEBV0@@Z

??4D3DPipelineManager@@QEAAAEAV0@AEBV0@@Z

??4D3DVertexCacher@@QEAAAEAV0@AEBV0@@Z

??_7D3DContext@@6B@

?BeginScene@D3DContext@@QEAAJC@Z

?BeginShapeClip@D3DContext@@QEAAJXZ

?CheckAdaptersInfo@D3DPipelineManager@@AEAAJXZ

?CheckAndResetDevice@D3DContext@@QEAAJXZ

?CheckDeviceCaps@D3DPipelineManager@@AEAAJI@Z

?CheckForBadHardware@D3DPipelineManager@@CAJKK_J@Z

?CheckOSVersion@D3DPipelineManager@@CAJXZ

?ConfigureContext@D3DContext@@QEAAJPEAU_D3DPRESENT_PARAMETERS_@@@Z

?CreateDefaultFocusWindow@D3DPipelineManager@@AEAAPEAUHWND__@@XZ

?CreateFragmentProgram@D3DContext@@AEAAPEAUIDirect3DPixelShader9@@PEAPEAKPEAUShaderList@@J@Z

?CreateInstance@D3DContext@@SAJPEAUIDirect3D9@@IPEAPEAV1@@Z

?CreateInstance@D3DPipelineManager@@CAPEAV1@XZ

?CreateInstance@D3DVertexCacher@@SAJPEAVD3DContext@@PEAPEAV1@@Z

?D3DBL_CopyImageToIntXrgbSurface@@YAJPEAUSurfaceDataRasInfo@@HPEAVD3DResource@@JJJJJJ@Z

?D3DBL_CopySurfaceToIntArgbImage@@YAJPEAUIDirect3DSurface9@@PEAUSurfaceDataRasInfo@@JJJJJJ@Z

?D3DBlitLoops_IsoBlit@@YAJPEAUJNIEnv_@@PEAVD3DContext@@_J2EJEEJJJJNNNN@Z

?D3DBlitToSurfaceViaTexture@@YAJPEAVD3DContext@@PEAUSurfaceDataRasInfo@@HPEAU_D3DSDOps@@EJJJJJNNNN@Z

?D3DEnabledOnAdapter@D3DPipelineManager@@AEAAJI@Z

?D3DRenderer_DrawAAParallelogram@@YAJPEAVD3DContext@@MMMMMMMM@Z

?D3DRenderer_DrawLine@@YAJPEAVD3DContext@@JJJJ@Z

?D3DRenderer_DrawParallelogram@@YAJPEAVD3DContext@@MMMMMMMM@Z

?D3DRenderer_DrawPoly@@YAJPEAVD3DContext@@JEJJPEAJ1@Z

?D3DRenderer_DrawRect@@YAJPEAVD3DContext@@JJJJ@Z

?D3DRenderer_DrawScanlines@@YAJPEAVD3DContext@@JPEAJ@Z

?D3DRenderer_FillAAParallelogram@@YAJPEAVD3DContext@@MMMMMM@Z

?D3DRenderer_FillParallelogram@@YAJPEAVD3DContext@@MMMMMM@Z

?D3DRenderer_FillRect@@YAJPEAVD3DContext@@JJJJ@Z

?D3DRenderer_FillSpans@@YAJPEAVD3DContext@@JPEAJ@Z

?DeleteInstance@D3DPipelineManager@@CAXXZ

?DisableAAParallelogramProgram@D3DContext@@QEAAJXZ

?DrawLine@D3DVertexCacher@@QEAAJHHHH@Z

?DrawParallelogramAA@D3DVertexCacher@@QEAAJMMMMMMMMMMMM@Z

?DrawPoly@D3DVertexCacher@@QEAAJJEJJPEAJ0@Z

?DrawRect@D3DVertexCacher@@QEAAJHHHH@Z

?DrawScanlines@D3DVertexCacher@@QEAAJJPEAJ@Z

?DrawTexture@D3DVertexCacher@@QEAAJMMMMMMMM@Z

?DrawTexture@D3DVertexCacher@@QEAAJMMMMMMMMMMMM@Z

?EnableAAParallelogramProgram@D3DContext@@QEAAJXZ

?EnableBasicGradientProgram@D3DContext@@QEAAJJ@Z

?EnableConvolveProgram@D3DContext@@QEAAJJ@Z

?EnableFragmentProgram@D3DContext@@AEAAJPEAPEAKPEAUShaderList@@J@Z

?EnableLCDTextProgram@D3DContext@@QEAAJXZ

?EnableLinearGradientProgram@D3DContext@@QEAAJJ@Z

?EnableLookupProgram@D3DContext@@QEAAJJ@Z

?EnableRadialGradientProgram@D3DContext@@QEAAJJ@Z

?EnableRescaleProgram@D3DContext@@QEAAJJ@Z

?EndScene@D3DContext@@QEAAJXZ

?EndShapeClip@D3DContext@@QEAAJXZ

?EnsureCapacity@D3DVertexCacher@@AEAAJW4_D3DPRIMITIVETYPE@@I@Z

?FillParallelogram@D3DVertexCacher@@QEAAJMMMMMM@Z

?FillParallelogramAA@D3DVertexCacher@@QEAAJMMMMMM@Z

?FillRect@D3DVertexCacher@@QEAAJHHHH@Z

?FillSpans@D3DVertexCacher@@QEAAJJPEAJ@Z

?FlushVertexQueue@D3DContext@@QEAAJXZ

?GDICheckForBadHardware@D3DPipelineManager@@CAJXZ

?Get3DDevice@D3DContext@@QEAAPEAUIDirect3DDevice9@@XZ

?Get3DObject@D3DContext@@QEAAPEAUIDirect3D9@@XZ

?GetAdapterOrdinalByHmon@D3DPipelineManager@@AEAAIPEAUHMONITOR__@@@Z

?GetAdapterOrdinalForScreen@D3DPipelineManager@@QEAAIJ@Z

?GetClipType@D3DContext@@QEAA?AW4ClipType@@XZ

?GetColor@D3DVertexCacher@@QEAAJXZ

?GetContextCaps@D3DContext@@QEAAHXZ

?GetCurrentFocusWindow@D3DPipelineManager@@QEAAPEAUHWND__@@XZ

?GetD3DContext@D3DPipelineManager@@QEAAJIPEAPEAVD3DContext@@@Z

?GetD3DObject@D3DPipelineManager@@QEAAPEAUIDirect3D9@@XZ

?GetDeviceCaps@D3DContext@@QEAAPEAU_D3DCAPS9@@XZ

?GetDeviceType@D3DPipelineManager@@QEAA?AW4_D3DDEVTYPE@@XZ

?GetFreeVertices@D3DVertexCacher@@QEAAIXZ

?GetGrayscaleGlyphCache@D3DContext@@QEAAPEAVD3DGlyphCache@@XZ

?GetInstance@D3DPipelineManager@@SAPEAV1@XZ

?GetLCDGlyphCache@D3DContext@@QEAAPEAVD3DGlyphCache@@XZ

?GetMaskCache@D3DContext@@QEAAPEAVD3DMaskCache@@XZ

?GetMatchingDepthStencilFormat@D3DPipelineManager@@QEAA?AW4_D3DFORMAT@@IW42@0@Z

?GetPaintState@D3DContext@@QEAAJXZ

?GetPresentationParams@D3DContext@@QEAAPEAU_D3DPRESENT_PARAMETERS_@@XZ

?GetResourceManager@D3DContext@@QEAAPEAVD3DResourceManager@@XZ

?HandleAdaptersChange@D3DPipelineManager@@SAJPEAPEAUHMONITOR__@@I@Z

?HandleLostDevices@D3DPipelineManager@@QEAAJXZ

?Init@D3DVertexCacher@@QEAAJPEAVD3DContext@@@Z

?InitAdapters@D3DPipelineManager@@AEAAJXZ

?InitContext@D3DContext@@QEAAJXZ

?InitContextCaps@D3DContext@@AEAAJXZ

?InitD3D@D3DPipelineManager@@AEAAJXZ

?InitDepthStencilBuffer@D3DContext@@AEAAJPEAU_D3DSURFACE_DESC@@@Z

?InitDevice@D3DContext@@AEAAJPEAUIDirect3DDevice9@@@Z

?InitGrayscaleGlyphCache@D3DContext@@QEAAJXZ

?InitLCDGlyphCache@D3DContext@@QEAAJXZ

?IsAlphaRTSurfaceSupported@D3DContext@@QEAAHXZ

?IsAlphaRTTSupported@D3DContext@@QEAAHXZ

?IsDepthStencilBufferOk@D3DContext@@AEAAHPEAU_D3DSURFACE_DESC@@@Z

?IsDynamicTextureSupported@D3DContext@@QEAAHXZ

?IsGradientInstructionExtensionSupported@D3DContext@@QEAAHXZ

?IsHWRasterizer@D3DContext@@QEAAHXZ

?IsIdentityTx@D3DContext@@QEAAHXZ

?IsImmediateIntervalSupported@D3DContext@@QEAAHXZ

?IsMultiTexturingSupported@D3DContext@@QEAAHXZ

?IsOpaqueRTTSupported@D3DContext@@QEAAHXZ

?IsPixelShader20Supported@D3DContext@@QEAAHXZ

?IsPixelShader30Supported@D3DContext@@QEAAHXZ

?IsPow2TexturesOnly@D3DContext@@QEAAHXZ

?IsSquareTexturesOnly@D3DContext@@QEAAHXZ

?IsStretchRectFilteringSupported@D3DContext@@QEAAHW4_D3DTEXTUREFILTERTYPE@@@Z

?IsTextureFilteringSupported@D3DContext@@QEAAHW4_D3DTEXTUREFILTERTYPE@@@Z

?IsTextureFormatSupported@D3DContext@@QEAAHW4_D3DFORMAT@@K@Z

?ReleaseAdapters@D3DPipelineManager@@AEAAJXZ

?ReleaseContextResources@D3DContext@@QEAAXXZ

?ReleaseD3D@D3DPipelineManager@@AEAAJXZ

?ReleaseDefPoolResources@D3DContext@@QEAAXXZ

?ReleaseDefPoolResources@D3DVertexCacher@@QEAAXXZ

?Render@D3DVertexCacher@@QEAAJH@Z

?ResetClip@D3DContext@@QEAAJXZ

?ResetComposite@D3DContext@@QEAAJXZ

?ResetContext@D3DContext@@QEAAJXZ

?ResetTransform@D3DContext@@QEAAJXZ

?SelectDeviceType@D3DPipelineManager@@AEAA?AW4_D3DDEVTYPE@@XZ

?SetAlphaComposite@D3DContext@@QEAAJJMJ@Z

?SetColor@D3DVertexCacher@@QEAAXJ@Z

?SetFSFocusWindow@D3DPipelineManager@@QEAAPEAUHWND__@@IPEAU2@@Z

?SetPaintState@D3DContext@@QEAAXJ@Z

?SetRectClip@D3DContext@@QEAAJHHHH@Z

?SetRenderTarget@D3DContext@@QEAAJPEAUIDirect3DSurface9@@@Z

?SetTexture@D3DContext@@QEAAJPEAUIDirect3DTexture9@@K@Z

?SetTransform@D3DContext@@QEAAJNNNNNN@Z

?Sync@D3DContext@@QEAAJXZ

?UpdateState@D3DContext@@QEAAJC@Z

?UpdateTextureColorState@D3DContext@@QEAAJKK@Z

?UploadTileToTexture@D3DContext@@QEAAJPEAVD3DResource@@PEAXJJJJJJJW4TileFormat@@PEAJ3@Z

?pMgr@D3DPipelineManager@@0PEAV1@EA

AWTIsHeadless

AccelGlyphCache_RemoveAllCellInfos

DSFreeDrawingSurface

DSGetComponent

DSGetDrawingSurface

DSLockAWT

DSUnlockAWT

Disposer_AddRecord

GDIWinSD_InitDC

GDIWindowSurfaceData_GetComp

GDIWindowSurfaceData_GetOps

GDIWindowSurfaceData_GetOpsNoSetup

GDIWindowSurfaceData_GetWindow

GetNativePrim

GrPrim_CompGetAlphaInfo

GrPrim_CompGetXorColor

GrPrim_CompGetXorInfo

GrPrim_Sg2dGetClip

GrPrim_Sg2dGetCompInfo

GrPrim_Sg2dGetEaRGB

GrPrim_Sg2dGetLCDTextContrast

GrPrim_Sg2dGetPixel

J2dTraceImpl

J2dTraceInit

JNI_OnLoad

Java_java_awt_AWTEvent_initIDs

Java_java_awt_AWTEvent_nativeSetSource

Java_java_awt_Button_initIDs

Java_java_awt_CheckboxMenuItem_initIDs

Java_java_awt_Checkbox_initIDs

Java_java_awt_Choice_initIDs

Java_java_awt_Color_initIDs

Java_java_awt_Component_initIDs

Java_java_awt_Container_initIDs

Java_java_awt_Cursor_finalizeImpl

Java_java_awt_Cursor_initIDs

Java_java_awt_Dialog_initIDs

Java_java_awt_Dimension_initIDs

Java_java_awt_Event_initIDs

Java_java_awt_FileDialog_initIDs

Java_java_awt_FontMetrics_initIDs

Java_java_awt_Font_initIDs

Java_java_awt_Frame_initIDs

Java_java_awt_Insets_initIDs

Java_java_awt_KeyboardFocusManager_initIDs

Java_java_awt_Label_initIDs

Java_java_awt_MenuBar_initIDs

Java_java_awt_MenuComponent_initIDs

Java_java_awt_MenuItem_initIDs

Java_java_awt_Menu_initIDs

Java_java_awt_Rectangle_initIDs

Java_java_awt_ScrollPaneAdjustable_initIDs

Java_java_awt_ScrollPane_initIDs

Java_java_awt_Scrollbar_initIDs

Java_java_awt_TextArea_initIDs

Java_java_awt_TextField_initIDs

Java_java_awt_Toolkit_initIDs

Java_java_awt_TrayIcon_initIDs

Java_java_awt_Window_initIDs

Java_java_awt_event_InputEvent_initIDs

Java_java_awt_event_KeyEvent_initIDs

Java_java_awt_event_MouseEvent_initIDs

Java_java_awt_image_BufferedImage_initIDs

Java_java_awt_image_ColorModel_initIDs

Java_java_awt_image_IndexColorModel_initIDs

Java_java_awt_image_Kernel_initIDs

Java_java_awt_image_Raster_initIDs

Java_java_awt_image_SampleModel_initIDs

Java_java_awt_image_SinglePixelPackedSampleModel_initIDs

Java_sun_awt_DebugSettings_setCTracingOn__Z

Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2

Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2I

Java_sun_awt_FontDescriptor_initIDs

Java_sun_awt_PlatformFont_initIDs

Java_sun_awt_SunToolkit_closeSplashScreen

Java_sun_awt_Win32FontManager_deRegisterFontWithPlatform

Java_sun_awt_Win32FontManager_getEUDCFontFile

Java_sun_awt_Win32FontManager_registerFontWithPlatform

Java_sun_awt_Win32GraphicsConfig_getBounds

Java_sun_awt_Win32GraphicsConfig_initIDs

Java_sun_awt_Win32GraphicsDevice_configDisplayMode

Java_sun_awt_Win32GraphicsDevice_enterFullScreenExclusive

Java_sun_awt_Win32GraphicsDevice_enumDisplayModes

Java_sun_awt_Win32GraphicsDevice_exitFullScreenExclusive

Java_sun_awt_Win32GraphicsDevice_getCurrentDisplayMode

Java_sun_awt_Win32GraphicsDevice_getDefaultPixIDImpl

Java_sun_awt_Win32GraphicsDevice_getMaxConfigsImpl

Java_sun_awt_Win32GraphicsDevice_getNativeScaleX

Java_sun_awt_Win32GraphicsDevice_getNativeScaleY

Java_sun_awt_Win32GraphicsDevice_initDevice

Java_sun_awt_Win32GraphicsDevice_initIDs

Java_sun_awt_Win32GraphicsDevice_initNativeScale

Java_sun_awt_Win32GraphicsDevice_isPixFmtSupported

Java_sun_awt_Win32GraphicsDevice_makeColorModel

Java_sun_awt_Win32GraphicsDevice_setNativeScale

Java_sun_awt_Win32GraphicsEnvironment_getDefaultScreen

Java_sun_awt_Win32GraphicsEnvironment_getNumScreens

Java_sun_awt_Win32GraphicsEnvironment_getXResolution

Java_sun_awt_Win32GraphicsEnvironment_getYResolution

Java_sun_awt_Win32GraphicsEnvironment_initDisplay

Java_sun_awt_Win32GraphicsEnvironment_isVistaOS

Java_sun_awt_image_BufImgSurfaceData_initIDs

Java_sun_awt_image_BufImgSurfaceData_initRaster

Java_sun_awt_image_ByteComponentRaster_initIDs

Java_sun_awt_image_BytePackedRaster_initIDs

Java_sun_awt_image_DataBufferNative_getElem

Java_sun_awt_image_DataBufferNative_setElem

Java_sun_awt_image_GifImageDecoder_initIDs

Java_sun_awt_image_GifImageDecoder_parseImage

Java_sun_awt_image_ImageRepresentation_initIDs

Java_sun_awt_image_ImageRepresentation_setDiffICM

Java_sun_awt_image_ImageRepresentation_setICMpixels

Java_sun_awt_image_ImagingLib_convolveBI

Java_sun_awt_image_ImagingLib_convolveRaster

Java_sun_awt_image_ImagingLib_init

Java_sun_awt_image_ImagingLib_lookupByteBI

Java_sun_awt_image_ImagingLib_lookupByteRaster

Java_sun_awt_image_ImagingLib_transformBI

Java_sun_awt_image_ImagingLib_transformRaster

Java_sun_awt_image_IntegerComponentRaster_initIDs

Java_sun_awt_image_ShortComponentRaster_initIDs

Java_sun_awt_shell_Win32ShellFolder2_bindToObject

Java_sun_awt_shell_Win32ShellFolder2_combinePIDLs

Java_sun_awt_shell_Win32ShellFolder2_compareIDs

Java_sun_awt_shell_Win32ShellFolder2_compareIDsByColumn

Java_sun_awt_shell_Win32ShellFolder2_copyFirstPIDLEntry

Java_sun_awt_shell_Win32ShellFolder2_disposeIcon

Java_sun_awt_shell_Win32ShellFolder2_doGetColumnInfo

Java_sun_awt_shell_Win32ShellFolder2_doGetColumnValue

Java_sun_awt_shell_Win32ShellFolder2_extractIcon

Java_sun_awt_shell_Win32ShellFolder2_getAttributes0

Java_sun_awt_shell_Win32ShellFolder2_getDisplayNameOf

Java_sun_awt_shell_Win32ShellFolder2_getEnumObjects

Java_sun_awt_shell_Win32ShellFolder2_getExecutableType

Java_sun_awt_shell_Win32ShellFolder2_getFileSystemPath0

Java_sun_awt_shell_Win32ShellFolder2_getFolderType

Java_sun_awt_shell_Win32ShellFolder2_getIShellIcon

Java_sun_awt_shell_Win32ShellFolder2_getIcon

Java_sun_awt_shell_Win32ShellFolder2_getIconBits

Java_sun_awt_shell_Win32ShellFolder2_getIconIndex

Java_sun_awt_shell_Win32ShellFolder2_getIconResource

Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation

Java_sun_awt_shell_Win32ShellFolder2_getNextChild

Java_sun_awt_shell_Win32ShellFolder2_getNextPIDLEntry

Java_sun_awt_shell_Win32ShellFolder2_getStandardViewButton0

Java_sun_awt_shell_Win32ShellFolder2_getSystemIcon

Java_sun_awt_shell_Win32ShellFolder2_hiResIconAvailable

Java_sun_awt_shell_Win32ShellFolder2_initDesktop

Java_sun_awt_shell_Win32ShellFolder2_initIDs

Java_sun_awt_shell_Win32ShellFolder2_initSpecial

Java_sun_awt_shell_Win32ShellFolder2_loadKnownFolders

Java_sun_awt_shell_Win32ShellFolder2_parseDisplayName0

Java_sun_awt_shell_Win32ShellFolder2_releaseEnumObjects

Java_sun_awt_shell_Win32ShellFolder2_releaseIShellFolder

Java_sun_awt_shell_Win32ShellFolder2_releasePIDL

Java_sun_awt_shell_Win32ShellFolderManager2_initializeCom

Java_sun_awt_shell_Win32ShellFolderManager2_uninitializeCom

Java_sun_awt_windows_ThemeReader_closeTheme

Java_sun_awt_windows_ThemeReader_getBoolean

Java_sun_awt_windows_ThemeReader_getColor

Java_sun_awt_windows_ThemeReader_getEnum

Java_sun_awt_windows_ThemeReader_getInt

Java_sun_awt_windows_ThemeReader_getPartSize

Java_sun_awt_windows_ThemeReader_getPoint

Java_sun_awt_windows_ThemeReader_getPosition

Java_sun_awt_windows_ThemeReader_getSysBoolean

Java_sun_awt_windows_ThemeReader_getThemeBackgroundContentMargins

Java_sun_awt_windows_ThemeReader_getThemeMargins

Java_sun_awt_windows_ThemeReader_getThemeTransitionDuration

Java_sun_awt_windows_ThemeReader_initThemes

Java_sun_awt_windows_ThemeReader_isThemePartDefined

Java_sun_awt_windows_ThemeReader_openTheme

Java_sun_awt_windows_ThemeReader_paintBackground

Java_sun_awt_windows_ThemeReader_setWindowTheme

Java_sun_awt_windows_WButtonPeer_create

Java_sun_awt_windows_WButtonPeer_initIDs

Java_sun_awt_windows_WButtonPeer_setLabel

Java_sun_awt_windows_WCanvasPeer_create

Java_sun_awt_windows_WCanvasPeer_setNativeBackgroundErase

Java_sun_awt_windows_WCheckboxMenuItemPeer_setState

Java_sun_awt_windows_WCheckboxPeer_create

Java_sun_awt_windows_WCheckboxPeer_getCheckMarkSize

Java_sun_awt_windows_WCheckboxPeer_setCheckboxGroup

Java_sun_awt_windows_WCheckboxPeer_setLabel

Java_sun_awt_windows_WCheckboxPeer_setState

Java_sun_awt_windows_WChoicePeer_addItems

Java_sun_awt_windows_WChoicePeer_closeList

Java_sun_awt_windows_WChoicePeer_create

Java_sun_awt_windows_WChoicePeer_remove

Java_sun_awt_windows_WChoicePeer_removeAll

Java_sun_awt_windows_WChoicePeer_reshape

Java_sun_awt_windows_WChoicePeer_select

Java_sun_awt_windows_WClipboard_closeClipboard

Java_sun_awt_windows_WClipboard_getClipboardData

Java_sun_awt_windows_WClipboard_getClipboardFormats

Java_sun_awt_windows_WClipboard_init

Java_sun_awt_windows_WClipboard_openClipboard

Java_sun_awt_windows_WClipboard_publishClipboardData

Java_sun_awt_windows_WClipboard_registerClipboardViewer

Java_sun_awt_windows_WComponentPeer__1dispose

Java_sun_awt_windows_WComponentPeer__1setBackground

Java_sun_awt_windows_WComponentPeer__1setFont

Java_sun_awt_windows_WComponentPeer__1setForeground

Java_sun_awt_windows_WComponentPeer_addNativeDropTarget

Java_sun_awt_windows_WComponentPeer_beginValidate

Java_sun_awt_windows_WComponentPeer_createPrintedPixels

Java_sun_awt_windows_WComponentPeer_disable

Java_sun_awt_windows_WComponentPeer_enable

Java_sun_awt_windows_WComponentPeer_endValidate

Java_sun_awt_windows_WComponentPeer_getLocationOnScreen

Java_sun_awt_windows_WComponentPeer_getTargetGC

Java_sun_awt_windows_WComponentPeer_hide

Java_sun_awt_windows_WComponentPeer_isObscured

Java_sun_awt_windows_WComponentPeer_nativeHandleEvent

Java_sun_awt_windows_WComponentPeer_nativeHandlesWheelScrolling

Java_sun_awt_windows_WComponentPeer_pSetParent

Java_sun_awt_windows_WComponentPeer_pShow

Java_sun_awt_windows_WComponentPeer_removeNativeDropTarget

Java_sun_awt_windows_WComponentPeer_reshape

Java_sun_awt_windows_WComponentPeer_reshapeNoCheck

Java_sun_awt_windows_WComponentPeer_setFocus

Java_sun_awt_windows_WComponentPeer_setRectangularShape

Java_sun_awt_windows_WComponentPeer_setZOrder

Java_sun_awt_windows_WComponentPeer_start

Java_sun_awt_windows_WComponentPeer_updateWindow

Java_sun_awt_windows_WCustomCursor_createCursorIndirect

Java_sun_awt_windows_WCustomCursor_getCursorHeight

Java_sun_awt_windows_WCustomCursor_getCursorWidth

Java_sun_awt_windows_WDataTransferer_dragQueryFile

Java_sun_awt_windows_WDataTransferer_getClipboardFormatName

Java_sun_awt_windows_WDataTransferer_imageDataToPlatformImageBytes

Java_sun_awt_windows_WDataTransferer_platformImageBytesToImageData

Java_sun_awt_windows_WDataTransferer_registerClipboardFormat

Java_sun_awt_windows_WDefaultFontCharset_canConvert

Java_sun_awt_windows_WDefaultFontCharset_initIDs

Java_sun_awt_windows_WDesktopPeer_ShellExecute

Java_sun_awt_windows_WDesktopPeer_init

Java_sun_awt_windows_WDesktopPeer_moveToTrash

Java_sun_awt_windows_WDesktopPeer_setSuddenTerminationEnabled

Java_sun_awt_windows_WDesktopProperties_getWindowsParameters

Java_sun_awt_windows_WDesktopProperties_init

Java_sun_awt_windows_WDesktopProperties_initIDs

Java_sun_awt_windows_WDesktopProperties_playWindowsSound

Java_sun_awt_windows_WDialogPeer_createAwtDialog

Java_sun_awt_windows_WDialogPeer_endModal

Java_sun_awt_windows_WDialogPeer_pSetIMMOption

Java_sun_awt_windows_WDialogPeer_showModal

Java_sun_awt_windows_WDragSourceContextPeer_createDragSource

Java_sun_awt_windows_WDragSourceContextPeer_doDragDrop

Java_sun_awt_windows_WDragSourceContextPeer_setNativeCursor

Java_sun_awt_windows_WDropTargetContextPeerFileStream_freeStgMedium

Java_sun_awt_windows_WDropTargetContextPeerIStream_Available

Java_sun_awt_windows_WDropTargetContextPeerIStream_Close

Java_sun_awt_windows_WDropTargetContextPeerIStream_Read

Java_sun_awt_windows_WDropTargetContextPeerIStream_ReadBytes

Java_sun_awt_windows_WDropTargetContextPeer_dropDone

Java_sun_awt_windows_WDropTargetContextPeer_getData

Java_sun_awt_windows_WEmbeddedFramePeer_create

Java_sun_awt_windows_WEmbeddedFramePeer_getBoundsPrivate

Java_sun_awt_windows_WEmbeddedFrame_initIDs

Java_sun_awt_windows_WEmbeddedFrame_isPrinterDC

Java_sun_awt_windows_WEmbeddedFrame_notifyModalBlockedImpl

Java_sun_awt_windows_WEmbeddedFrame_printBand

Java_sun_awt_windows_WFileDialogPeer__1dispose

Java_sun_awt_windows_WFileDialogPeer__1hide

Java_sun_awt_windows_WFileDialogPeer__1show

Java_sun_awt_windows_WFileDialogPeer_getLocationOnScreen

Java_sun_awt_windows_WFileDialogPeer_initIDs

Java_sun_awt_windows_WFileDialogPeer_setFilterString

Java_sun_awt_windows_WFileDialogPeer_toBack

Java_sun_awt_windows_WFileDialogPeer_toFront

Java_sun_awt_windows_WFontMetrics_bytesWidth

Java_sun_awt_windows_WFontMetrics_charsWidth

Java_sun_awt_windows_WFontMetrics_init

Java_sun_awt_windows_WFontMetrics_initIDs

Java_sun_awt_windows_WFontMetrics_stringWidth

Java_sun_awt_windows_WFontPeer_initIDs

Java_sun_awt_windows_WFramePeer_clearMaximizedBounds

Java_sun_awt_windows_WFramePeer_createAwtFrame

Java_sun_awt_windows_WFramePeer_getState

Java_sun_awt_windows_WFramePeer_getSysMenuHeight

Java_sun_awt_windows_WFramePeer_initIDs

Java_sun_awt_windows_WFramePeer_pSetIMMOption

Java_sun_awt_windows_WFramePeer_setMaximizedBounds

Java_sun_awt_windows_WFramePeer_setMenuBar0

Java_sun_awt_windows_WFramePeer_setState

Java_sun_awt_windows_WFramePeer_synthesizeWmActivate

Java_sun_awt_windows_WGlobalCursorManager_findHeavyweightUnderCursor

Java_sun_awt_windows_WGlobalCursorManager_getCursorPos

Java_sun_awt_windows_WGlobalCursorManager_getLocationOnScreen

Java_sun_awt_windows_WGlobalCursorManager_setCursor

Java_sun_awt_windows_WInputMethodDescriptor_getNativeAvailableLocales

Java_sun_awt_windows_WInputMethod_createNativeContext

Java_sun_awt_windows_WInputMethod_destroyNativeContext

Java_sun_awt_windows_WInputMethod_disableNativeIME

Java_sun_awt_windows_WInputMethod_enableNativeIME

Java_sun_awt_windows_WInputMethod_endCompositionNative

Java_sun_awt_windows_WInputMethod_getConversionStatus

Java_sun_awt_windows_WInputMethod_getNativeIMMDescription

Java_sun_awt_windows_WInputMethod_getNativeLocale

Java_sun_awt_windows_WInputMethod_getOpenStatus

Java_sun_awt_windows_WInputMethod_handleNativeIMEEvent

Java_sun_awt_windows_WInputMethod_isCompositionStringAvailable

Java_sun_awt_windows_WInputMethod_openCandidateWindow

Java_sun_awt_windows_WInputMethod_setConversionStatus

Java_sun_awt_windows_WInputMethod_setNativeLocale

Java_sun_awt_windows_WInputMethod_setOpenStatus

Java_sun_awt_windows_WInputMethod_setStatusWindowVisible

Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusOwner

Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusedWindow

Java_sun_awt_windows_WKeyboardFocusManagerPeer_setNativeFocusOwner

Java_sun_awt_windows_WLabelPeer_create

Java_sun_awt_windows_WLabelPeer_lazyPaint

Java_sun_awt_windows_WLabelPeer_setAlignment

Java_sun_awt_windows_WLabelPeer_setText

Java_sun_awt_windows_WLightweightFramePeer_overrideNativeHandle

Java_sun_awt_windows_WListPeer_addItems

Java_sun_awt_windows_WListPeer_create

Java_sun_awt_windows_WListPeer_delItems

Java_sun_awt_windows_WListPeer_deselect

Java_sun_awt_windows_WListPeer_getMaxWidth

Java_sun_awt_windows_WListPeer_isSelected

Java_sun_awt_windows_WListPeer_makeVisible

Java_sun_awt_windows_WListPeer_select

Java_sun_awt_windows_WListPeer_setMultipleSelections

Java_sun_awt_windows_WListPeer_updateMaxItemWidth

Java_sun_awt_windows_WMenuBarPeer_addMenu

Java_sun_awt_windows_WMenuBarPeer_create

Java_sun_awt_windows_WMenuBarPeer_delMenu

Java_sun_awt_windows_WMenuItemPeer__1dispose

Java_sun_awt_windows_WMenuItemPeer__1setFont

Java_sun_awt_windows_WMenuItemPeer__1setLabel

Java_sun_awt_windows_WMenuItemPeer_create

Java_sun_awt_windows_WMenuItemPeer_enable

Java_sun_awt_windows_WMenuItemPeer_initIDs

Java_sun_awt_windows_WMenuPeer_createMenu

Java_sun_awt_windows_WMenuPeer_createSubMenu

Java_sun_awt_windows_WMenuPeer_delItem

Java_sun_awt_windows_WMouseInfoPeer_fillPointWithCoords

Java_sun_awt_windows_WMouseInfoPeer_isWindowUnderMouse

Java_sun_awt_windows_WObjectPeer_initIDs

Java_sun_awt_windows_WPageDialogPeer__1show

Java_sun_awt_windows_WPageDialog_initIDs

Java_sun_awt_windows_WPanelPeer_initIDs

Java_sun_awt_windows_WPopupMenuPeer__1show

Java_sun_awt_windows_WPopupMenuPeer_createMenu

Java_sun_awt_windows_WPrintDialogPeer__1show

Java_sun_awt_windows_WPrintDialogPeer_initIDs

Java_sun_awt_windows_WPrintDialogPeer_toBack

Java_sun_awt_windows_WPrintDialogPeer_toFront

Java_sun_awt_windows_WPrintDialog_initIDs

Java_sun_awt_windows_WPrinterJob__1startDoc

Java_sun_awt_windows_WPrinterJob_abortDoc

Java_sun_awt_windows_WPrinterJob_beginPath

Java_sun_awt_windows_WPrinterJob_closeFigure

Java_sun_awt_windows_WPrinterJob_deleteDC

Java_sun_awt_windows_WPrinterJob_deviceEndPage

Java_sun_awt_windows_WPrinterJob_deviceStartPage

Java_sun_awt_windows_WPrinterJob_drawDIBImage

Java_sun_awt_windows_WPrinterJob_endDoc

Java_sun_awt_windows_WPrinterJob_endPath

Sections

.text
Size: 953KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/fontmanager.dll

.dll windows:6 windows x64

acddcaa6833802c5a06e68265f234109

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e2:57:d6:9f:b5:03:b6:96:04:e0:73:f4:ee:19:0d:cf:db:23:ae:40:1c:c3:b8:07:bc:57:04:d7:ab:2d:c4:8c
Signer

Actual PE Digest

e2:57:d6:9f:b5:03:b6:96:04:e0:73:f4:ee:19:0d:cf:db:23:ae:40:1c:c3:b8:07:bc:57:04:d7:ab:2d:c4:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

freetype

FT_Render_Glyph

FT_Property_Set

FT_Done_FreeType

FT_Library_SetLcdFilter

FT_Outline_Embolden

FT_Outline_Translate

FT_Outline_Get_CBox

FT_Outline_Decompose

FT_Activate_Size

FT_Outline_Get_BBox

FT_Matrix_Multiply

FT_MulFix

FT_Get_Char_Index

FT_Init_FreeType

FT_Set_Transform

FT_Load_Glyph

FT_Set_Char_Size

FT_New_Memory_Face

FT_Open_Face

FT_Done_Face

java

JNU_ThrowOutOfMemoryError

JNU_NewStringPlatform

JNU_ThrowInternalError

JNU_ThrowArrayIndexOutOfBoundsException

advapi32

RegCloseKey

RegOpenKeyExA

RegQueryInfoKeyW

RegEnumValueW

user32

GetDesktopWindow

FillRect

GetDC

ReleaseDC

GetWindowDC

SystemParametersInfoA

gdi32

GetFontData

GetDIBits

GetDeviceCaps

DeleteObject

GetStockObject

CreateCompatibleDC

CreateCompatibleBitmap

EnumFontFamiliesExW

SetTextColor

GetTextMetricsA

GetGlyphOutlineA

SelectObject

SetBkColor

CreateFontIndirectW

ExtTextOutW

SetMapMode

awt

SurfaceData_IntersectBounds

SurfaceData_InitOps

GetNativePrim

GrPrim_Sg2dGetCompInfo

SurfaceData_GetOps

GrPrim_Sg2dGetPixel

GrPrim_Sg2dGetEaRGB

GrPrim_Sg2dGetLCDTextContrast

AccelGlyphCache_RemoveAllCellInfos

GrPrim_Sg2dGetClip

kernel32

EnterCriticalSection

DeleteCriticalSection

RtlCaptureContext

RtlVirtualUnwind

GetWindowsDirectoryA

GetSystemDirectoryA

LeaveCriticalSection

RtlLookupFunctionEntry

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

IsDebuggerPresent

vcruntime140

strstr

wcsstr

memcpy

strrchr

__std_type_info_destroy_list

memmove

strchr

memcmp

memset

wcsrchr

__C_specific_handler

api-ms-win-crt-heap-l1-1-0

malloc

realloc

free

calloc

api-ms-win-crt-math-l1-1-0

floor

ceilf

sqrt

floorf

pow

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

__stdio_common_vfprintf

__acrt_iob_func

api-ms-win-crt-string-l1-1-0

_wcsicmp

strncmp

_stricmp

strncpy

strcmp

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll

_initterm_e

_cexit

_configure_narrow_argv

_execute_onexit_table

_initialize_onexit_table

_initialize_narrow_environment

_errno

_initterm

Exports

Java_sun_awt_Win32FontManager_getFontPath

Java_sun_awt_Win32FontManager_populateFontFileNameMap0

Java_sun_font_ColorGlyphSurfaceData_initOps

Java_sun_font_ColorGlyphSurfaceData_setCurrentGlyph

Java_sun_font_FileFontStrike__1getGlyphImageFromWindows

Java_sun_font_FileFontStrike_initNative

Java_sun_font_FreetypeFontScaler_createScalerContextNative

Java_sun_font_FreetypeFontScaler_disposeNativeScaler

Java_sun_font_FreetypeFontScaler_getFontMetricsNative

Java_sun_font_FreetypeFontScaler_getGlyphAdvanceNative

Java_sun_font_FreetypeFontScaler_getGlyphCodeNative

Java_sun_font_FreetypeFontScaler_getGlyphImageNative

Java_sun_font_FreetypeFontScaler_getGlyphMetricsNative

Java_sun_font_FreetypeFontScaler_getGlyphOutlineBoundsNative

Java_sun_font_FreetypeFontScaler_getGlyphOutlineNative

Java_sun_font_FreetypeFontScaler_getGlyphPointNative

Java_sun_font_FreetypeFontScaler_getGlyphVectorOutlineNative

Java_sun_font_FreetypeFontScaler_getMissingGlyphCodeNative

Java_sun_font_FreetypeFontScaler_getNumGlyphsNative

Java_sun_font_FreetypeFontScaler_getUnitsPerEMNative

Java_sun_font_FreetypeFontScaler_initIDs

Java_sun_font_FreetypeFontScaler_initNativeScaler

Java_sun_font_NullFontScaler_getGlyphImage

Java_sun_font_NullFontScaler_getNullScalerContext

Java_sun_font_StrikeCache_freeIntMemory

Java_sun_font_StrikeCache_freeIntPointer

Java_sun_font_StrikeCache_freeLongMemory

Java_sun_font_StrikeCache_freeLongPointer

Java_sun_font_StrikeCache_getGlyphCacheDescription

Java_sun_font_SunFontManager_initIDs

Java_sun_font_SunLayoutEngine_createFace

Java_sun_font_SunLayoutEngine_disposeFace

Java_sun_font_SunLayoutEngine_shape

Java_sun_java2d_loops_DrawGlyphListAA_DrawGlyphListAA

Java_sun_java2d_loops_DrawGlyphListLCD_DrawGlyphListLCD

Java_sun_java2d_loops_DrawGlyphList_DrawGlyphList

getSunFontIDs

isNullScalerContext

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/freetype.dll

.dll windows:6 windows x64

1d0701f397473e809596b2f46cd100dc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

20:bf:99:8a:31:29:01:cb:42:ec:aa:19:b6:ec:f8:a7:b1:a4:17:ae:66:5a:48:62:f3:dd:47:a2:22:9e:95:ed
Signer

Actual PE Digest

20:bf:99:8a:31:29:01:cb:42:ec:aa:19:b6:ec:f8:a7:b1:a4:17:ae:66:5a:48:62:f3:dd:47:a2:22:9e:95:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

kernel32

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

IsDebuggerPresent

vcruntime140

memset

memcpy

strstr

memcmp

memmove

longjmp

strrchr

memchr

__intrinsic_setjmp

__C_specific_handler

__std_type_info_destroy_list

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-string-l1-1-0

strncmp

strcmp

strncpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

ftell

fseek

fread

fopen

fclose

api-ms-win-crt-heap-l1-1-0

malloc

free

realloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_configure_narrow_argv

_cexit

_initterm

_initterm_e

_seh_filter_dll

_initialize_onexit_table

_initialize_narrow_environment

Exports

FT_Activate_Size

FT_Add_Default_Modules

FT_Add_Module

FT_Angle_Diff

FT_Atan2

FT_Attach_File

FT_Attach_Stream

FT_Bitmap_Blend

FT_Bitmap_Convert

FT_Bitmap_Copy

FT_Bitmap_Done

FT_Bitmap_Embolden

FT_Bitmap_Init

FT_Bitmap_New

FT_CeilFix

FT_Cos

FT_DivFix

FT_Done_Face

FT_Done_FreeType

FT_Done_Glyph

FT_Done_Library

FT_Done_MM_Var

FT_Done_Size

FT_Face_CheckTrueTypePatents

FT_Face_GetCharVariantIndex

FT_Face_GetCharVariantIsDefault

FT_Face_GetCharsOfVariant

FT_Face_GetVariantSelectors

FT_Face_GetVariantsOfChar

FT_Face_Properties

FT_Face_SetUnpatentedHinting

FT_FloorFix

FT_Get_Advance

FT_Get_Advances

FT_Get_CID_From_Glyph_Index

FT_Get_CID_Is_Internally_CID_Keyed

FT_Get_CID_Registry_Ordering_Supplement

FT_Get_CMap_Format

FT_Get_CMap_Language_ID

FT_Get_Char_Index

FT_Get_Charmap_Index

FT_Get_Color_Glyph_ClipBox

FT_Get_Color_Glyph_Layer

FT_Get_Color_Glyph_Paint

FT_Get_Colorline_Stops

FT_Get_FSType_Flags

FT_Get_First_Char

FT_Get_Font_Format

FT_Get_Gasp

FT_Get_Glyph

FT_Get_Glyph_Name

FT_Get_Kerning

FT_Get_MM_Blend_Coordinates

FT_Get_MM_Var

FT_Get_MM_WeightVector

FT_Get_Module

FT_Get_Multi_Master

FT_Get_Name_Index

FT_Get_Next_Char

FT_Get_PS_Font_Info

FT_Get_PS_Font_Private

FT_Get_PS_Font_Value

FT_Get_Paint

FT_Get_Paint_Layers

FT_Get_Postscript_Name

FT_Get_Renderer

FT_Get_Sfnt_LangTag

FT_Get_Sfnt_Name

FT_Get_Sfnt_Name_Count

FT_Get_Sfnt_Table

FT_Get_SubGlyph_Info

FT_Get_Track_Kerning

FT_Get_Transform

FT_Get_TrueType_Engine_Type

FT_Get_Var_Axis_Flags

FT_Get_Var_Blend_Coordinates

FT_Get_Var_Design_Coordinates

FT_Get_X11_Font_Format

FT_GlyphSlot_Embolden

FT_GlyphSlot_Oblique

FT_GlyphSlot_Own_Bitmap

FT_Glyph_Copy

FT_Glyph_Get_CBox

FT_Glyph_Stroke

FT_Glyph_StrokeBorder

FT_Glyph_To_Bitmap

FT_Glyph_Transform

FT_Has_PS_Glyph_Names

FT_Init_FreeType

FT_Library_SetLcdFilter

FT_Library_SetLcdFilterWeights

FT_Library_SetLcdGeometry

FT_Library_Version

FT_List_Add

FT_List_Finalize

FT_List_Find

FT_List_Insert

FT_List_Iterate

FT_List_Remove

FT_List_Up

FT_Load_Char

FT_Load_Glyph

FT_Load_Sfnt_Table

FT_Matrix_Invert

FT_Matrix_Multiply

FT_MulDiv

FT_MulFix

FT_New_Face

FT_New_Glyph

FT_New_Library

FT_New_Memory_Face

FT_New_Size

FT_Open_Face

FT_Outline_Check

FT_Outline_Copy

FT_Outline_Decompose

FT_Outline_Done

FT_Outline_Embolden

FT_Outline_EmboldenXY

FT_Outline_GetInsideBorder

FT_Outline_GetOutsideBorder

FT_Outline_Get_BBox

FT_Outline_Get_Bitmap

FT_Outline_Get_CBox

FT_Outline_Get_Orientation

FT_Outline_New

FT_Outline_Render

FT_Outline_Reverse

FT_Outline_Transform

FT_Outline_Translate

FT_Property_Get

FT_Property_Set

FT_Reference_Face

FT_Reference_Library

FT_Remove_Module

FT_Render_Glyph

FT_Request_Size

FT_RoundFix

FT_Select_Charmap

FT_Select_Size

FT_Set_Char_Size

FT_Set_Charmap

FT_Set_Debug_Hook

FT_Set_Default_Log_Handler

FT_Set_Default_Properties

FT_Set_Log_Handler

FT_Set_MM_Blend_Coordinates

FT_Set_MM_Design_Coordinates

FT_Set_MM_WeightVector

FT_Set_Named_Instance

FT_Set_Pixel_Sizes

FT_Set_Renderer

FT_Set_Transform

FT_Set_Var_Blend_Coordinates

FT_Set_Var_Design_Coordinates

FT_Sfnt_Table_Info

FT_Sin

FT_Stroker_BeginSubPath

FT_Stroker_ConicTo

FT_Stroker_CubicTo

FT_Stroker_Done

FT_Stroker_EndSubPath

FT_Stroker_Export

FT_Stroker_ExportBorder

FT_Stroker_GetBorderCounts

FT_Stroker_GetCounts

FT_Stroker_LineTo

FT_Stroker_New

FT_Stroker_ParseOutline

FT_Stroker_Rewind

FT_Stroker_Set

FT_Tan

FT_Trace_Set_Default_Level

FT_Trace_Set_Level

FT_Vector_From_Polar

FT_Vector_Length

FT_Vector_Polarize

FT_Vector_Rotate

FT_Vector_Transform

FT_Vector_Unit

TT_New_Context

TT_RunIns

Sections

.text
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/instrument.dll

.dll windows:6 windows x64

eab6d3c185c000b807c2cc89514ab40c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7a:3f:46:36:2b:86:76:91:7a:d9:97:00:67:41:64:b2:1e:bc:55:fe:e7:95:08:51:e2:d1:63:58:de:ba:6b:3b
Signer

Actual PE Digest

7a:3f:46:36:2b:86:76:91:7a:d9:97:00:67:41:64:b2:1e:bc:55:fe:e7:95:08:51:e2:d1:63:58:de:ba:6b:3b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

java

JDK_Canonicalize

jli

JLI_ManifestIterate

kernel32

SetUnhandledExceptionFilter

IsDebuggerPresent

InitializeSListHead

MultiByteToWideChar

WideCharToMultiByte

GetACP

GetLocaleInfoA

GetUserDefaultLCID

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

vcruntime140

__C_specific_handler

__std_type_info_destroy_list

memcpy

strchr

memset

strrchr

api-ms-win-crt-heap-l1-1-0

realloc

calloc

free

malloc

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

strlen

strcpy

strncpy

_strdup

_stricmp

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_initialize_narrow_environment

_cexit

_initterm

_initterm_e

_seh_filter_dll

_configure_narrow_argv

_initialize_onexit_table

Exports

Agent_OnAttach

Agent_OnLoad

Agent_OnUnload

Java_sun_instrument_InstrumentationImpl_appendToClassLoaderSearch0

Java_sun_instrument_InstrumentationImpl_getAllLoadedClasses0

Java_sun_instrument_InstrumentationImpl_getInitiatedClasses0

Java_sun_instrument_InstrumentationImpl_getObjectSize0

Java_sun_instrument_InstrumentationImpl_isModifiableClass0

Java_sun_instrument_InstrumentationImpl_isRetransformClassesSupported0

Java_sun_instrument_InstrumentationImpl_loadAgent0

Java_sun_instrument_InstrumentationImpl_redefineClasses0

Java_sun_instrument_InstrumentationImpl_retransformClasses0

Java_sun_instrument_InstrumentationImpl_setHasRetransformableTransformers

Java_sun_instrument_InstrumentationImpl_setHasTransformers

Java_sun_instrument_InstrumentationImpl_setNativeMethodPrefixes

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/java.dll

.dll windows:6 windows x64

3b75873232ea0137acf4066f1685eedd

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a5:45:78:11:5e:bc:cd:56:12:0e:e7:b2:e4:90:07:14:fe:7e:db:30:64:16:24:bd:e4:78:70:33:58:c6:ae:96
Signer

Actual PE Digest

a5:45:78:11:5e:bc:cd:56:12:0e:e7:b2:e4:90:07:14:fe:7e:db:30:64:16:24:bd:e4:78:70:33:58:c6:ae:96

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

jvm

JVM_WaitForReferencePendingList

JVM_HasReferencePendingList

JVM_GetAndClearReferencePendingList

JVM_GetThreadInterruptEvent

JVM_PhantomReferenceRefersTo

JVM_GetExtendedNPEMessage

JVM_IsSupportedJNIVersion

JVM_FindLibraryEntry

JVM_UnloadLibrary

JVM_LoadLibrary

JVM_NewInstanceFromConstructor

JVM_InvokeMethod

JVM_AddReadsModule

JVM_AddModuleExportsToAll

JVM_AddModuleExportsToAllUnnamed

JVM_AddModuleExports

JVM_DefineModule

JVM_LookupLambdaProxyClassFromArchive

JVM_RegisterLambdaProxyClassForArchiving

JVM_GetFieldTypeAnnotations

JVM_GetMethodParameters

JVM_GetMethodTypeAnnotations

JVM_ConstantPoolGetTagAt

JVM_ConstantPoolGetUTF8At

JVM_ConstantPoolGetStringAt

JVM_ConstantPoolGetDoubleAt

JVM_ConstantPoolGetFloatAt

JVM_ConstantPoolGetLongAt

JVM_ConstantPoolGetIntAt

JVM_ConstantPoolGetNameAndTypeRefInfoAt

JVM_ConstantPoolGetNameAndTypeRefIndexAt

JVM_ConstantPoolGetMemberRefInfoAt

JVM_ConstantPoolGetFieldAtIfLoaded

JVM_ConstantPoolGetFieldAt

JVM_ConstantPoolGetMethodAtIfLoaded

JVM_ConstantPoolGetMethodAt

JVM_ConstantPoolGetClassRefIndexAt

JVM_ConstantPoolGetClassAtIfLoaded

JVM_ConstantPoolGetClassAt

JVM_ConstantPoolGetSize

JVM_LookupDefineClass

JVM_DefineClassWithSource

JVM_FindLoadedClass

JVM_FindClassFromBootLoader

JVM_AssertionStatusDirectives

JVM_FindClassFromCaller

JVM_FindPrimitiveClass

JVM_StartThread

JVM_GetProtectionDomain

JVM_GetRecordComponents

JVM_IsRecord

JVM_GetNestMembers

JVM_GetNestHost

JVM_GetClassDeclaredConstructors

JVM_GetClassDeclaredFields

JVM_GetClassDeclaredMethods

JVM_GetClassTypeAnnotations

JVM_ReferenceRefersTo

JVM_GetClassSignature

JVM_GetSimpleBinaryName

JVM_GetDeclaringClass

JVM_GetDeclaredClasses

JVM_GetClassModifiers

JVM_IsHiddenClass

JVM_IsPrimitiveClass

JVM_IsArrayClass

JVM_SetClassSigners

JVM_GetClassSigners

JVM_IsInterface

JVM_GetClassInterfaces

JVM_InitClassName

JVM_GetEnclosingMethodInfo

JVM_DesiredAssertionStatus

JVM_DefineArchivedModules

JVM_DumpDynamicArchive

JVM_DumpClassListToFile

JVM_LogLambdaFormInvoker

JVM_GetRandomSeedForDumping

JVM_IsDumpingClassList

JVM_IsSharingEnabled

JVM_IsCDSDumpingEnabled

JVM_InitializeFromArchive

JVM_SetBootLoaderUnnamedModule

JVM_GetSystemPackages

JVM_GetSystemPackage

JVM_SupportsCX8

JVM_NewMultiArray

JVM_NewArray

JVM_StopThread

JVM_IsThreadAlive

JVM_ReferenceClear

JVM_GetCallerClass

JVM_GetClassAccessFlags

JVM_AreNestMates

JVM_GC

JVM_TotalMemory

JVM_FreeMemory

JVM_MaxMemory

JVM_ActiveProcessorCount

JVM_GetClassContext

JVM_BeforeHalt

JVM_Halt

JVM_RegisterSignal

JVM_RaiseSignal

JVM_FindSignal

JVM_CallStackWalk

JVM_MoreStackWalk

JVM_SetPrimitiveArrayElement

JVM_SuspendThread

JVM_ResumeThread

JVM_InitStackTraceElementArray

JVM_InitStackTraceElement

JVM_InternString

JVM_SetThreadPriority

JVM_Yield

JVM_CurrentTimeMillis

JVM_Sleep

JVM_SetArrayElement

JVM_GetPrimitiveArrayElement

JVM_NanoTime

JVM_ArrayCopy

JVM_GetArrayElement

JVM_GetArrayLength

JVM_GetStackAccessControlContext

JVM_CurrentThread

JVM_IHashCode

JVM_Interrupt

JVM_HoldsLock

JVM_GetAllThreads

JVM_SetNativeThreadName

JVM_DumpThreads

JVM_FillInStackTrace

JVM_GetNanoTimeAdjustment

JVM_GetVmArguments

JVM_LatestUserDefinedLoader

JVM_InitAgentProperties

JVM_GetTemporaryDirectory

jio_vsnprintf

jio_vfprintf

JVM_GetClassAnnotations

JVM_GetProperties

JVM_GetInheritedAccessControlContext

JVM_GetClassConstantPool

JVM_GetPermittedSubclasses

advapi32

RegCloseKey

ConvertSidToStringSidW

LookupAccountSidW

GetTokenInformation

OpenProcessToken

RegEnumKeyExA

RegOpenKeyExA

RegOpenKeyExW

RegQueryInfoKeyA

RegQueryValueExA

RegQueryValueExW

CryptAcquireContextA

CryptReleaseContext

CryptGenRandom

GetUserNameW

version

GetFileVersionInfoW

VerQueryValueW

GetFileVersionInfoSizeW

kernel32

GetStdHandle

GetFileType

GetConsoleCP

GetConsoleMode

SetConsoleMode

IsDebuggerPresent

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

QueryPerformanceCounter

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

LoadLibraryExA

GetModuleHandleW

FreeLibrary

VirtualQuery

VirtualProtect

RaiseException

FormatMessageA

LoadLibraryA

GetSystemDirectoryA

GetACP

IsValidCodePage

GetNativeSystemInfo

GetVersionExA

GetWindowsDirectoryA

GetSystemDirectoryW

GetSystemInfo

IsProcessorFeaturePresent

GetTempPathW

GetCurrentDirectoryW

PeekConsoleInputA

GetNumberOfConsoleInputEvents

PeekNamedPipe

WriteFile

SetFilePointerEx

SetFileInformationByHandle

ReadFile

GetFileSizeEx

GetDriveTypeW

FlushFileBuffers

GetModuleHandleExW

DeviceIoControl

SetLastError

SetFileTime

SetFileAttributesW

RemoveDirectoryW

GetVolumePathNameW

GetVolumeInformationW

GetLogicalDrives

GetFullPathNameW

GetFileTime

GetFileInformationByHandle

GetFileAttributesExW

GetFileAttributesW

GetDiskFreeSpaceExW

FindNextFileW

FindFirstFileW

FindClose

DeleteFileW

CreateDirectoryW

SetErrorMode

GetUserGeoID

GetGeoInfoA

GetLocaleInfoA

MultiByteToWideChar

GetDynamicTimeZoneInformation

GetTimeZoneInformation

ResetEvent

GetConsoleWindow

WideCharToMultiByte

FormatMessageW

GetProcessId

CreateProcessW

CreatePipe

SetHandleInformation

GetHandleInformation

CreateFileW

Process32Next

Process32First

CreateToolhelp32Snapshot

QueryFullProcessImageNameW

LocalFree

OpenProcess

GetExitCodeProcess

TerminateProcess

GetCurrentProcessId

GetProcessTimes

WaitForMultipleObjects

GetLastError

FreeEnvironmentStringsW

FreeEnvironmentStringsA

GetEnvironmentStringsW

GetEnvironmentStrings

GetUserDefaultLCID

GetUserDefaultUILanguage

GetProcAddress

GetEnvironmentVariableA

CloseHandle

GetModuleHandleA

vcruntime140

memset

memcmp

memmove

wcsrchr

memcpy

__std_type_info_destroy_list

wcschr

strrchr

__C_specific_handler

api-ms-win-crt-heap-l1-1-0

realloc

malloc

free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

fopen

__stdio_common_vsscanf

__acrt_iob_func

fclose

fgets

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

iswctype

wcsncmp

_wcsupr

towupper

wcsncat

strcmp

strcat

strncpy

wcscat

strlen

strcpy

wcslen

wcscpy

wcscmp

_wcsdup

wcscat_s

_strdup

api-ms-win-crt-convert-l1-1-0

atoi

_itoa_s

wcstombs

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table

_initialize_narrow_environment

_configure_narrow_argv

_execute_onexit_table

_initterm_e

_initterm

strerror_s

_cexit

_errno

_seh_filter_dll

api-ms-win-crt-filesystem-l1-1-0

_wfullpath

_wrename

api-ms-win-crt-environment-l1-1-0

_wgetdcwd

_wgetcwd

_wgetenv

Exports

GetStringPlatformChars

InitializeEncoding

JDK_Canonicalize

JDK_LoadSystemLibrary

JNI_OnLoad

JNU_CallMethodByName

JNU_CallMethodByNameV

JNU_CallStaticMethodByName

JNU_ClassString

JNU_CopyObjectArray

JNU_GetEnv

JNU_GetFieldByName

JNU_GetStaticFieldByName

JNU_GetStringPlatformChars

JNU_IsInstanceOfByName

JNU_NewObjectByName

JNU_NewStringPlatform

JNU_ReleaseStringPlatformChars

JNU_SetFieldByName

JNU_ThrowArrayIndexOutOfBoundsException

JNU_ThrowByName

JNU_ThrowByNameWithLastError

JNU_ThrowByNameWithMessageAndLastError

JNU_ThrowClassNotFoundException

JNU_ThrowIOException

JNU_ThrowIOExceptionWithLastError

JNU_ThrowIllegalArgumentException

JNU_ThrowInternalError

JNU_ThrowNullPointerException

JNU_ThrowOutOfMemoryError

JNU_ToString

Java_java_io_Console_echo

Java_java_io_Console_encoding

Java_java_io_Console_istty

Java_java_io_FileCleanable_cleanupClose0

Java_java_io_FileDescriptor_close0

Java_java_io_FileDescriptor_getAppend

Java_java_io_FileDescriptor_getHandle

Java_java_io_FileDescriptor_initIDs

Java_java_io_FileDescriptor_sync

Java_java_io_FileInputStream_available0

Java_java_io_FileInputStream_initIDs

Java_java_io_FileInputStream_length0

Java_java_io_FileInputStream_open0

Java_java_io_FileInputStream_position0

Java_java_io_FileInputStream_read0

Java_java_io_FileInputStream_readBytes

Java_java_io_FileInputStream_skip0

Java_java_io_FileOutputStream_initIDs

Java_java_io_FileOutputStream_open0

Java_java_io_FileOutputStream_write

Java_java_io_FileOutputStream_writeBytes

Java_java_io_ObjectStreamClass_hasStaticInitializer

Java_java_io_ObjectStreamClass_initNative

Java_java_io_RandomAccessFile_getFilePointer

Java_java_io_RandomAccessFile_initIDs

Java_java_io_RandomAccessFile_length

Java_java_io_RandomAccessFile_open0

Java_java_io_RandomAccessFile_read0

Java_java_io_RandomAccessFile_readBytes

Java_java_io_RandomAccessFile_seek0

Java_java_io_RandomAccessFile_setLength

Java_java_io_RandomAccessFile_write0

Java_java_io_RandomAccessFile_writeBytes

Java_java_io_WinNTFileSystem_canonicalize0

Java_java_io_WinNTFileSystem_canonicalizeWithPrefix0

Java_java_io_WinNTFileSystem_checkAccess

Java_java_io_WinNTFileSystem_createDirectory

Java_java_io_WinNTFileSystem_createFileExclusively

Java_java_io_WinNTFileSystem_delete0

Java_java_io_WinNTFileSystem_getBooleanAttributes

Java_java_io_WinNTFileSystem_getDriveDirectory

Java_java_io_WinNTFileSystem_getLastModifiedTime

Java_java_io_WinNTFileSystem_getLength

Java_java_io_WinNTFileSystem_getNameMax0

Java_java_io_WinNTFileSystem_getSpace0

Java_java_io_WinNTFileSystem_initIDs

Java_java_io_WinNTFileSystem_list

Java_java_io_WinNTFileSystem_listRoots0

Java_java_io_WinNTFileSystem_rename0

Java_java_io_WinNTFileSystem_setLastModifiedTime

Java_java_io_WinNTFileSystem_setPermission

Java_java_io_WinNTFileSystem_setReadOnly

Java_java_lang_ClassLoader_defineClass0

Java_java_lang_ClassLoader_defineClass1

Java_java_lang_ClassLoader_defineClass2

Java_java_lang_ClassLoader_findBootstrapClass

Java_java_lang_ClassLoader_findLoadedClass0

Java_java_lang_ClassLoader_registerNatives

Java_java_lang_Class_forName0

Java_java_lang_Class_getPrimitiveClass

Java_java_lang_Class_isAssignableFrom

Java_java_lang_Class_isInstance

Java_java_lang_Class_registerNatives

Java_java_lang_Double_doubleToRawLongBits

Java_java_lang_Double_longBitsToDouble

Java_java_lang_Float_floatToRawIntBits

Java_java_lang_Float_intBitsToFloat

Java_java_lang_Module_addExports0

Java_java_lang_Module_addExportsToAll0

Java_java_lang_Module_addExportsToAllUnnamed0

Java_java_lang_Module_addReads0

Java_java_lang_Module_defineModule0

Java_java_lang_NullPointerException_getExtendedNPEMessage

Java_java_lang_Object_getClass

Java_java_lang_ProcessEnvironment_environmentBlock

Java_java_lang_ProcessHandleImpl_00024Info_info0

Java_java_lang_ProcessHandleImpl_00024Info_initIDs

Java_java_lang_ProcessHandleImpl_destroy0

Java_java_lang_ProcessHandleImpl_getCurrentPid0

Java_java_lang_ProcessHandleImpl_getProcessPids0

Java_java_lang_ProcessHandleImpl_initNative

Java_java_lang_ProcessHandleImpl_isAlive0

Java_java_lang_ProcessHandleImpl_parent0

Java_java_lang_ProcessHandleImpl_waitForProcessExit0

Java_java_lang_ProcessImpl_closeHandle

Java_java_lang_ProcessImpl_create

Java_java_lang_ProcessImpl_getExitCodeProcess

Java_java_lang_ProcessImpl_getProcessId0

Java_java_lang_ProcessImpl_getStillActive

Java_java_lang_ProcessImpl_isProcessAlive

Java_java_lang_ProcessImpl_openForAtomicAppend

Java_java_lang_ProcessImpl_terminateProcess

Java_java_lang_ProcessImpl_waitForInterruptibly

Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly

Java_java_lang_Runtime_availableProcessors

Java_java_lang_Runtime_freeMemory

Java_java_lang_Runtime_gc

Java_java_lang_Runtime_maxMemory

Java_java_lang_Runtime_totalMemory

Java_java_lang_SecurityManager_getClassContext

Java_java_lang_Shutdown_beforeHalt

Java_java_lang_Shutdown_halt0

Java_java_lang_StackStreamFactory_00024AbstractStackWalker_callStackWalk

Java_java_lang_StackStreamFactory_00024AbstractStackWalker_fetchStackFrames

Java_java_lang_StackStreamFactory_checkStackWalkModes

Java_java_lang_StackTraceElement_initStackTraceElement

Java_java_lang_StackTraceElement_initStackTraceElements

Java_java_lang_StrictMath_IEEEremainder

Java_java_lang_StrictMath_acos

Java_java_lang_StrictMath_asin

Java_java_lang_StrictMath_atan

Java_java_lang_StrictMath_atan2

Java_java_lang_StrictMath_cos

Java_java_lang_StrictMath_cosh

Java_java_lang_StrictMath_expm1

Java_java_lang_StrictMath_log

Java_java_lang_StrictMath_log10

Java_java_lang_StrictMath_log1p

Java_java_lang_StrictMath_sin

Java_java_lang_StrictMath_sinh

Java_java_lang_StrictMath_sqrt

Java_java_lang_StrictMath_tan

Java_java_lang_StrictMath_tanh

Java_java_lang_StringUTF16_isBigEndian

Java_java_lang_String_intern

Java_java_lang_System_identityHashCode

Java_java_lang_System_mapLibraryName

Java_java_lang_System_registerNatives

Java_java_lang_System_setErr0

Java_java_lang_System_setIn0

Java_java_lang_System_setOut0

Java_java_lang_Thread_clearInterruptEvent

Java_java_lang_Thread_registerNatives

Java_java_lang_Throwable_fillInStackTrace

Java_java_lang_invoke_LambdaProxyClassArchive_addToArchive

Java_java_lang_invoke_LambdaProxyClassArchive_findFromArchive

Java_java_lang_ref_PhantomReference_refersTo0

Java_java_lang_ref_Reference_clear0

Java_java_lang_ref_Reference_getAndClearReferencePendingList

Java_java_lang_ref_Reference_hasReferencePendingList

Java_java_lang_ref_Reference_refersTo0

Java_java_lang_ref_Reference_waitForReferencePendingList

Java_java_lang_reflect_Array_get

Java_java_lang_reflect_Array_getBoolean

Java_java_lang_reflect_Array_getByte

Java_java_lang_reflect_Array_getChar

Java_java_lang_reflect_Array_getDouble

Java_java_lang_reflect_Array_getFloat

Java_java_lang_reflect_Array_getInt

Java_java_lang_reflect_Array_getLength

Java_java_lang_reflect_Array_getLong

Java_java_lang_reflect_Array_getShort

Java_java_lang_reflect_Array_multiNewArray

Java_java_lang_reflect_Array_newArray

Java_java_lang_reflect_Array_set

Java_java_lang_reflect_Array_setBoolean

Java_java_lang_reflect_Array_setByte

Java_java_lang_reflect_Array_setChar

Java_java_lang_reflect_Array_setDouble

Java_java_lang_reflect_Array_setFloat

Java_java_lang_reflect_Array_setInt

Java_java_lang_reflect_Array_setLong

Java_java_lang_reflect_Array_setShort

Java_java_lang_reflect_Executable_getParameters0

Java_java_lang_reflect_Executable_getTypeAnnotationBytes0

Java_java_lang_reflect_Field_getTypeAnnotationBytes0

Java_java_security_AccessController_ensureMaterializedForStackWalk

Java_java_security_AccessController_getInheritedAccessControlContext

Java_java_security_AccessController_getProtectionDomain

Java_java_security_AccessController_getStackAccessControlContext

Java_java_util_TimeZone_getSystemGMTOffsetID

Java_java_util_TimeZone_getSystemTimeZoneID

Java_java_util_concurrent_atomic_AtomicLong_VMSupportsCS8

Java_jdk_internal_loader_BootLoader_getSystemPackageLocation

Java_jdk_internal_loader_BootLoader_getSystemPackageNames

Java_jdk_internal_loader_BootLoader_setBootLoaderUnnamedModule0

Java_jdk_internal_loader_NativeLibraries_findBuiltinLib

Java_jdk_internal_loader_NativeLibraries_findEntry0

Java_jdk_internal_loader_NativeLibraries_load

Java_jdk_internal_loader_NativeLibraries_unload

Java_jdk_internal_misc_CDS_defineArchivedModules

Java_jdk_internal_misc_CDS_dumpClassList

Java_jdk_internal_misc_CDS_dumpDynamicArchive

Java_jdk_internal_misc_CDS_getRandomSeedForDumping

Java_jdk_internal_misc_CDS_initializeFromArchive

Java_jdk_internal_misc_CDS_isDumpingArchive0

Java_jdk_internal_misc_CDS_isDumpingClassList0

Java_jdk_internal_misc_CDS_isSharingEnabled0

Java_jdk_internal_misc_CDS_logLambdaFormInvoker

Java_jdk_internal_misc_Signal_findSignal0

Java_jdk_internal_misc_Signal_handle0

Java_jdk_internal_misc_Signal_raise0

Java_jdk_internal_misc_VM_getRuntimeArguments

Java_jdk_internal_misc_VM_getegid

Java_jdk_internal_misc_VM_geteuid

Java_jdk_internal_misc_VM_getgid

Java_jdk_internal_misc_VM_getuid

Java_jdk_internal_misc_VM_initialize

Java_jdk_internal_misc_VM_latestUserDefinedLoader0

Java_jdk_internal_reflect_ConstantPool_getClassAt0

Java_jdk_internal_reflect_ConstantPool_getClassAtIfLoaded0

Java_jdk_internal_reflect_ConstantPool_getClassRefIndexAt0

Java_jdk_internal_reflect_ConstantPool_getDoubleAt0

Java_jdk_internal_reflect_ConstantPool_getFieldAt0

Java_jdk_internal_reflect_ConstantPool_getFieldAtIfLoaded0

Java_jdk_internal_reflect_ConstantPool_getFloatAt0

Java_jdk_internal_reflect_ConstantPool_getIntAt0

Java_jdk_internal_reflect_ConstantPool_getLongAt0

Java_jdk_internal_reflect_ConstantPool_getMemberRefInfoAt0

Java_jdk_internal_reflect_ConstantPool_getMethodAt0

Java_jdk_internal_reflect_ConstantPool_getMethodAtIfLoaded0

Java_jdk_internal_reflect_ConstantPool_getNameAndTypeRefIndexAt0

Java_jdk_internal_reflect_ConstantPool_getNameAndTypeRefInfoAt0

Java_jdk_internal_reflect_ConstantPool_getSize0

Java_jdk_internal_reflect_ConstantPool_getStringAt0

Java_jdk_internal_reflect_ConstantPool_getTagAt0

Java_jdk_internal_reflect_ConstantPool_getUTF8At0

Java_jdk_internal_reflect_NativeConstructorAccessorImpl_newInstance0

Java_jdk_internal_reflect_NativeMethodAccessorImpl_invoke0

Java_jdk_internal_reflect_Reflection_areNestMates

Java_jdk_internal_reflect_Reflection_getCallerClass

Java_jdk_internal_reflect_Reflection_getClassAccessFlags

Java_jdk_internal_util_EnvUtils_getEnvVar

Java_jdk_internal_util_SystemProps_00024Raw_platformProperties

Java_jdk_internal_util_SystemProps_00024Raw_vmProperties

Java_jdk_internal_vm_VMSupport_getVMTemporaryDirectory

Java_jdk_internal_vm_VMSupport_initAgentProperties

Java_sun_io_Win32ErrorMode_setErrorMode

Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getAmPmStrings

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDataValue

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDisplayStrings

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarID

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCurrencySymbol

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDateTimePattern

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDecimalSeparator

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDefaultLocale

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDisplayString

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getEras

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getGroupingSeparator

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInfinity

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInternationalCurrencySymbol

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMinusSign

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonetaryDecimalSeparator

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonths

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNaN

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNumberPattern

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPerMill

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPercent

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortMonths

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortWeekdays

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getWeekdays

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getZeroDigit

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_initialize

Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_isNativeDigit

getEncodingFromLangID

getErrorString

getJavaIDFromLangID

getLastErrorString

getPrefixed

handleLseek

handleRead

jio_fprintf

jio_snprintf

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/javajpeg.dll

.dll windows:6 windows x64

55a59b81219bc538daa289f58a07d456

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

57:24:a5:fe:b4:a1:5b:54:88:97:42:85:5e:b1:4a:5e:c0:f5:c8:2f:2b:91:7e:2a:1c:71:b9:b9:3a:70:73:d9
Signer

Actual PE Digest

57:24:a5:fe:b4:a1:5b:54:88:97:42:85:5e:b1:4a:5e:c0:f5:c8:2f:2b:91:7e:2a:1c:71:b9:b9:3a:70:73:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

java

JNU_GetEnv

jio_snprintf

JNU_ThrowNullPointerException

JNU_ThrowByName

kernel32

TerminateProcess

IsDebuggerPresent

InitializeSListHead

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

GetSystemTimeAsFileTime

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

DisableThreadLibraryCalls

vcruntime140

__std_type_info_destroy_list

__C_specific_handler

__intrinsic_setjmp

longjmp

memcpy

memset

memmove

api-ms-win-crt-heap-l1-1-0

calloc

free

malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf

__acrt_iob_func

__stdio_common_vsscanf

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table

_cexit

_execute_onexit_table

_initterm

_initterm_e

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

Exports

JNI_OnLoad

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_abortRead

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_clearNativeReadAbortFlag

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_disposeReader

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_initJPEGImageReader

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_initReaderIDs

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImage

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImageHeader

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_resetLibraryState

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_resetReader

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_setOutColorSpace

Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_setSource

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_abortWrite

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_disposeWriter

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_initJPEGImageWriter

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_initWriterIDs

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_resetWriter

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_setDest

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_writeImage

Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_writeTables

Java_sun_awt_image_JPEGImageDecoder_initIDs

Java_sun_awt_image_JPEGImageDecoder_readImage

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/jawt.dll

.dll windows:6 windows x64

3546964e3f06cd8a05d583a33ce5f71b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

de:de:24:03:6f:6f:46:9f:de:56:e1:6c:2b:5a:3f:75:f6:0b:b1:88:9d:0e:57:83:8e:03:79:cc:ac:f9:4b:c5
Signer

Actual PE Digest

de:de:24:03:6f:6f:46:9f:de:56:e1:6c:2b:5a:3f:75:f6:0b:b1:88:9d:0e:57:83:8e:03:79:cc:ac:f9:4b:c5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

awt

DSLockAWT

DSUnlockAWT

DSGetComponent

awt_CreateEmbeddedFrame

awt_SetBounds

awt_SynthesizeWindowActivation

DSGetDrawingSurface

DSFreeDrawingSurface

kernel32

IsProcessorFeaturePresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

IsDebuggerPresent

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

InitializeSListHead

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

vcruntime140

__std_type_info_destroy_list

memset

__C_specific_handler

memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit

_execute_onexit_table

_initialize_onexit_table

_seh_filter_dll

_initterm

_initterm_e

_configure_narrow_argv

_initialize_narrow_environment

Exports

JAWT_GetAWT

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/jimage.dll

.dll windows:6 windows x64

b826f032fe1b27fd036f117a827ba017

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:20:1a:d3:c6:97:43:d2:22:b6:fd:2c:b0:25:09:4d:ca:fb:ca:c6:40:f4:53:9c:63:b8:58:9a:7d:38:c3:8d
Signer

Actual PE Digest

06:20:1a:d3:c6:97:43:d2:22:b6:fd:2c:b0:25:09:4d:ca:fb:ca:c6:40:f4:53:9c:63:b8:58:9a:7d:38:c3:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

jvm

JVM_LoadZipLibrary

kernel32

UnhandledExceptionFilter

GetProcAddress

CreateFileA

ReadFile

CloseHandle

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

MapViewOfFileEx

UnmapViewOfFile

CreateFileMappingA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

vcruntime140

__std_type_info_destroy_list

memcpy

memset

__C_specific_handler

__std_exception_copy

__std_exception_destroy

_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

_get_osfhandle

__acrt_iob_func

_open

_close

__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

strlen

strcat

strcpy

strcmp

strncpy

api-ms-win-crt-heap-l1-1-0

_callnewh

malloc

realloc

calloc

free

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment

_cexit

_initialize_onexit_table

_execute_onexit_table

_initterm

_initterm_e

_seh_filter_dll

_configure_narrow_argv

Exports

JIMAGE_Close

JIMAGE_FindResource

JIMAGE_GetResource

JIMAGE_Open

JIMAGE_PackageToModule

JIMAGE_ResourceIterator

Java_jdk_internal_jimage_NativeImageBuffer_getNativeMap

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/jli.dll

.dll windows:6 windows x64

2116dac044e54d4ccdb7448a3daff03b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

18:90:0c:7e:d8:0e:00:6c:5f:3e:38:10:07:50:f0:ee:b1:98:78:d4:30:c1:3b:1b:37:28:17:45:ae:8d:7b:4d
Signer

Actual PE Digest

18:90:0c:7e:d8:0e:00:6c:5f:3e:38:10:07:50:f0:ee:b1:98:78:d4:30:c1:3b:1b:37:28:17:45:ae:8d:7b:4d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

advapi32

RegEnumKeyExA

RegOpenKeyExA

RegGetValueA

RegCloseKey

comctl32

InitCommonControlsEx

user32

MessageBoxA

CharNextExA

version

GetFileVersionInfoA

VerQueryValueA

GetFileVersionInfoSizeA

kernel32

IsDebuggerPresent

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

CloseHandle

GetLastError

QueryPerformanceCounter

QueryPerformanceFrequency

WaitForSingleObject

GetExitCodeThread

GetModuleFileNameA

GetModuleHandleA

GetModuleHandleExA

GetProcAddress

LoadLibraryA

LocalFree

FormatMessageA

MultiByteToWideChar

FindClose

FindFirstFileA

FindNextFileA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

GetCurrentProcessId

vcruntime140

__C_specific_handler

__std_type_info_destroy_list

memcpy

strchr

memset

strrchr

memcmp

memmove

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment

_configure_narrow_argv

_seh_filter_dll

_initterm_e

exit

_initterm

_execute_onexit_table

perror

_beginthreadex

_getpid

_errno

_cexit

strerror

_initialize_onexit_table

api-ms-win-crt-environment-l1-1-0

getenv

_putenv

api-ms-win-crt-stdio-l1-1-0

_open

_close

fread

fflush

_read

fopen

ferror

_fileno

_lseeki64

feof

__acrt_iob_func

__stdio_common_vsscanf

__stdio_common_vsprintf

__stdio_common_vfprintf

_wopen

fgets

fclose

api-ms-win-crt-filesystem-l1-1-0

_access

_fstat64i32

_stat64i32

api-ms-win-crt-string-l1-1-0

strncmp

wcsncpy

wcslen

strcmp

isspace

_strdup

strspn

strcspn

strcpy

strcat

_stricmp

strlen

strpbrk

api-ms-win-crt-heap-l1-1-0

realloc

malloc

calloc

free

Exports

JLI_AddArgsFromEnvVar

JLI_CmdToArgs

JLI_GetAppArgIndex

JLI_GetStdArgc

JLI_GetStdArgs

JLI_InitArgProcessing

JLI_Launch

JLI_List_add

JLI_List_new

JLI_ManifestIterate

JLI_MemAlloc

JLI_MemFree

JLI_PreprocessArg

JLI_ReportErrorMessage

JLI_ReportErrorMessageSys

JLI_ReportExceptionDescription

JLI_ReportMessage

JLI_SetTraceLauncher

JLI_StringDup

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/jsound.dll

.dll windows:6 windows x64

26dd14b1856f14f12a9430597163674f

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8a:73:ed:a2:f1:fa:3a:71:95:16:24:08:4f:6c:cd:c6:27:b6:94:a7:4b:db:23:d5:97:82:8e:ba:56:85:ec:59
Signer

Actual PE Digest

8a:73:ed:a2:f1:fa:3a:71:95:16:24:08:4f:6c:cd:c6:27:b6:94:a7:4b:db:23:d5:97:82:8e:ba:56:85:ec:59

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

dsound

ord2

ord3

ord6

ord7

ord8

ord1

winmm

timeEndPeriod

timeBeginPeriod

midiOutReset

midiOutLongMsg

midiOutShortMsg

midiOutUnprepareHeader

midiOutPrepareHeader

midiOutClose

mixerGetDevCapsW

midiOutGetErrorTextA

midiOutGetDevCapsW

midiOutGetNumDevs

midiInReset

midiInStop

midiInStart

midiInAddBuffer

midiInUnprepareHeader

midiInPrepareHeader

midiInClose

midiInOpen

midiInGetErrorTextA

midiInGetDevCapsW

midiInGetNumDevs

timeGetTime

mixerOpen

mixerClose

mixerGetNumDevs

mixerSetControlDetails

mixerGetControlDetailsA

mixerGetLineControlsA

midiOutOpen

mixerGetLineInfoA

user32

GetDesktopWindow

GetForegroundWindow

ole32

CoInitialize

CoUninitialize

kernel32

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

DeleteCriticalSection

Sleep

CreateThread

CreateEventA

WaitForSingleObject

SetEvent

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSection

CloseHandle

WideCharToMultiByte

vcruntime140

__C_specific_handler

memset

memcmp

_CxxThrowException

__std_exception_destroy

__std_exception_copy

memcpy

__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

malloc

free

_callnewh

api-ms-win-crt-string-l1-1-0

strcpy

strncpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function

_initterm_e

_initterm

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_execute_onexit_table

_crt_atexit

_cexit

Exports

Java_com_sun_media_sound_DirectAudioDeviceProvider_nGetNumDevices

Java_com_sun_media_sound_DirectAudioDeviceProvider_nNewDirectAudioDeviceInfo

Java_com_sun_media_sound_DirectAudioDevice_nAvailable

Java_com_sun_media_sound_DirectAudioDevice_nClose

Java_com_sun_media_sound_DirectAudioDevice_nFlush

Java_com_sun_media_sound_DirectAudioDevice_nGetBufferSize

Java_com_sun_media_sound_DirectAudioDevice_nGetBytePosition

Java_com_sun_media_sound_DirectAudioDevice_nGetFormats

Java_com_sun_media_sound_DirectAudioDevice_nIsStillDraining

Java_com_sun_media_sound_DirectAudioDevice_nOpen

Java_com_sun_media_sound_DirectAudioDevice_nRead

Java_com_sun_media_sound_DirectAudioDevice_nRequiresServicing

Java_com_sun_media_sound_DirectAudioDevice_nService

Java_com_sun_media_sound_DirectAudioDevice_nSetBytePosition

Java_com_sun_media_sound_DirectAudioDevice_nStart

Java_com_sun_media_sound_DirectAudioDevice_nStop

Java_com_sun_media_sound_DirectAudioDevice_nWrite

Java_com_sun_media_sound_MidiInDeviceProvider_nGetDescription

Java_com_sun_media_sound_MidiInDeviceProvider_nGetName

Java_com_sun_media_sound_MidiInDeviceProvider_nGetNumDevices

Java_com_sun_media_sound_MidiInDeviceProvider_nGetVendor

Java_com_sun_media_sound_MidiInDeviceProvider_nGetVersion

Java_com_sun_media_sound_MidiInDevice_nClose

Java_com_sun_media_sound_MidiInDevice_nGetMessages

Java_com_sun_media_sound_MidiInDevice_nGetTimeStamp

Java_com_sun_media_sound_MidiInDevice_nOpen

Java_com_sun_media_sound_MidiInDevice_nStart

Java_com_sun_media_sound_MidiInDevice_nStop

Java_com_sun_media_sound_MidiOutDeviceProvider_nGetDescription

Java_com_sun_media_sound_MidiOutDeviceProvider_nGetName

Java_com_sun_media_sound_MidiOutDeviceProvider_nGetNumDevices

Java_com_sun_media_sound_MidiOutDeviceProvider_nGetVendor

Java_com_sun_media_sound_MidiOutDeviceProvider_nGetVersion

Java_com_sun_media_sound_MidiOutDevice_nClose

Java_com_sun_media_sound_MidiOutDevice_nGetTimeStamp

Java_com_sun_media_sound_MidiOutDevice_nOpen

Java_com_sun_media_sound_MidiOutDevice_nSendLongMessage

Java_com_sun_media_sound_MidiOutDevice_nSendShortMessage

Java_com_sun_media_sound_Platform_nIsBigEndian

Java_com_sun_media_sound_PortMixerProvider_nGetNumDevices

Java_com_sun_media_sound_PortMixerProvider_nNewPortMixerInfo

Java_com_sun_media_sound_PortMixer_nClose

Java_com_sun_media_sound_PortMixer_nControlGetFloatValue

Java_com_sun_media_sound_PortMixer_nControlGetIntValue

Java_com_sun_media_sound_PortMixer_nControlSetFloatValue

Java_com_sun_media_sound_PortMixer_nControlSetIntValue

Java_com_sun_media_sound_PortMixer_nGetControls

Java_com_sun_media_sound_PortMixer_nGetPortCount

Java_com_sun_media_sound_PortMixer_nGetPortName

Java_com_sun_media_sound_PortMixer_nGetPortType

Java_com_sun_media_sound_PortMixer_nOpen

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/lcms.dll

.dll windows:6 windows x64

3084b5879b9883b27251540613bda70e

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

45:ac:64:b3:2b:64:e9:61:a2:93:92:42:33:2a:db:13:c3:82:13:70:48:58:a9:f2:63:c3:f3:4d:4f:87:e4:0e
Signer

Actual PE Digest

45:ac:64:b3:2b:64:e9:61:a2:93:92:42:33:2a:db:13:c3:82:13:70:48:58:a9:f2:63:c3:f3:4d:4f:87:e4:0e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

awt

J2dTraceImpl

Disposer_AddRecord

java

JNU_ThrowByName

JNU_ThrowIllegalArgumentException

kernel32

IsDebuggerPresent

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

vcruntime140

__std_type_info_destroy_list

memcpy

__C_specific_handler

memcmp

memset

memmove

api-ms-win-crt-stdio-l1-1-0

ftell

fseek

__stdio_common_vsprintf

fclose

fopen

fread

fwrite

api-ms-win-crt-heap-l1-1-0

free

realloc

malloc

api-ms-win-crt-math-l1-1-0

_dclass

floor

exp

pow

sqrt

ceil

log

sqrtf

_fdclass

log10

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-time-l1-1-0

_time64

_gmtime64

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll

_initterm_e

_initterm

_initialize_narrow_environment

_execute_onexit_table

_initialize_onexit_table

_cexit

_configure_narrow_argv

Exports

JNI_OnLoad

Java_sun_java2d_cmm_lcms_LCMS_colorConvert

Java_sun_java2d_cmm_lcms_LCMS_createNativeTransform

Java_sun_java2d_cmm_lcms_LCMS_getProfileDataNative

Java_sun_java2d_cmm_lcms_LCMS_getProfileID

Java_sun_java2d_cmm_lcms_LCMS_getTagNative

Java_sun_java2d_cmm_lcms_LCMS_initLCMS

Java_sun_java2d_cmm_lcms_LCMS_loadProfileNative

Java_sun_java2d_cmm_lcms_LCMS_setTagDataNative

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/management.dll

.dll windows:6 windows x64

86882c7bbbac4a2fb6bbf8fca93434d0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

00:df:90:ca:6b:63:ab:a7:b3:29:62:96:9d:50:46:91:20:08:a6:be:18:45:c5:7e:86:ff:79:52:7a:15:e2:72
Signer

Actual PE Digest

00:df:90:ca:6b:63:ab:a7:b3:29:62:96:9d:50:46:91:20:08:a6:be:18:45:c5:7e:86:ff:79:52:7a:15:e2:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

jvm

JVM_GetVmArguments

JVM_GetManagement

JVM_GetAllThreads

JVM_ActiveProcessorCount

java

JNU_ThrowInternalError

kernel32

GetCurrentProcess

IsDebuggerPresent

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

vcruntime140

__std_type_info_destroy_list

memset

__C_specific_handler

memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_cexit

_configure_narrow_argv

_initialize_onexit_table

_initterm

_initterm_e

_seh_filter_dll

_initialize_narrow_environment

Exports

JNI_OnLoad

Java_sun_management_ClassLoadingImpl_setVerboseClass

Java_sun_management_GarbageCollectorImpl_getCollectionCount

Java_sun_management_GarbageCollectorImpl_getCollectionTime

Java_sun_management_HotspotThread_getInternalThreadCount

Java_sun_management_HotspotThread_getInternalThreadTimes0

Java_sun_management_MemoryImpl_getMemoryManagers0

Java_sun_management_MemoryImpl_getMemoryPools0

Java_sun_management_MemoryImpl_getMemoryUsage0

Java_sun_management_MemoryImpl_setVerboseGC

Java_sun_management_MemoryManagerImpl_getMemoryPools0

Java_sun_management_MemoryPoolImpl_getCollectionUsage0

Java_sun_management_MemoryPoolImpl_getMemoryManagers0

Java_sun_management_MemoryPoolImpl_getPeakUsage0

Java_sun_management_MemoryPoolImpl_getUsage0

Java_sun_management_MemoryPoolImpl_resetPeakUsage0

Java_sun_management_MemoryPoolImpl_setCollectionThreshold0

Java_sun_management_MemoryPoolImpl_setPoolCollectionSensor

Java_sun_management_MemoryPoolImpl_setPoolUsageSensor

Java_sun_management_MemoryPoolImpl_setUsageThreshold0

Java_sun_management_ThreadImpl_dumpThreads0

Java_sun_management_ThreadImpl_findDeadlockedThreads0

Java_sun_management_ThreadImpl_findMonitorDeadlockedThreads0

Java_sun_management_ThreadImpl_getThreadAllocatedMemory0

Java_sun_management_ThreadImpl_getThreadAllocatedMemory1

Java_sun_management_ThreadImpl_getThreadInfo1

Java_sun_management_ThreadImpl_getThreadTotalCpuTime0

Java_sun_management_ThreadImpl_getThreadTotalCpuTime1

Java_sun_management_ThreadImpl_getThreadUserCpuTime0

Java_sun_management_ThreadImpl_getThreadUserCpuTime1

Java_sun_management_ThreadImpl_getThreads

Java_sun_management_ThreadImpl_resetContentionTimes0

Java_sun_management_ThreadImpl_resetPeakThreadCount0

Java_sun_management_ThreadImpl_setThreadAllocatedMemoryEnabled0

Java_sun_management_ThreadImpl_setThreadContentionMonitoringEnabled0

Java_sun_management_ThreadImpl_setThreadCpuTimeEnabled0

Java_sun_management_VMManagementImpl_getAvailableProcessors

Java_sun_management_VMManagementImpl_getClassInitializationTime

Java_sun_management_VMManagementImpl_getClassLoadingTime

Java_sun_management_VMManagementImpl_getClassVerificationTime

Java_sun_management_VMManagementImpl_getDaemonThreadCount

Java_sun_management_VMManagementImpl_getInitializedClassCount

Java_sun_management_VMManagementImpl_getLiveThreadCount

Java_sun_management_VMManagementImpl_getLoadedClassSize

Java_sun_management_VMManagementImpl_getMethodDataSize

Java_sun_management_VMManagementImpl_getPeakThreadCount

Java_sun_management_VMManagementImpl_getProcessId

Java_sun_management_VMManagementImpl_getSafepointCount

Java_sun_management_VMManagementImpl_getSafepointSyncTime

Java_sun_management_VMManagementImpl_getStartupTime

Java_sun_management_VMManagementImpl_getTotalApplicationNonStoppedTime

Java_sun_management_VMManagementImpl_getTotalClassCount

Java_sun_management_VMManagementImpl_getTotalCompileTime

Java_sun_management_VMManagementImpl_getTotalSafepointTime

Java_sun_management_VMManagementImpl_getTotalThreadCount

Java_sun_management_VMManagementImpl_getUnloadedClassCount

Java_sun_management_VMManagementImpl_getUnloadedClassSize

Java_sun_management_VMManagementImpl_getUptime0

Java_sun_management_VMManagementImpl_getVerboseClass

Java_sun_management_VMManagementImpl_getVerboseGC

Java_sun_management_VMManagementImpl_getVersion0

Java_sun_management_VMManagementImpl_getVmArguments0

Java_sun_management_VMManagementImpl_initOptionalSupportFields

Java_sun_management_VMManagementImpl_isThreadAllocatedMemoryEnabled

Java_sun_management_VMManagementImpl_isThreadContentionMonitoringEnabled

Java_sun_management_VMManagementImpl_isThreadCpuTimeEnabled

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/mlib_image.dll

.dll windows:6 windows x64

ed30577820b1534158591b1338772c3c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

62:bc:8b:90:7d:c1:b7:55:02:5a:f7:3b:a1:5d:57:89:0c:b7:97:73:e4:98:80:75:14:80:0a:06:99:8e:cb:61
Signer

Actual PE Digest

62:bc:8b:90:7d:c1:b7:55:02:5a:f7:3b:a1:5d:57:89:0c:b7:97:73:e4:98:80:75:14:80:0a:06:99:8e:cb:61

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

kernel32

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

IsDebuggerPresent

vcruntime140

memset

memcpy

__C_specific_handler

__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

malloc

free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll

_configure_narrow_argv

_initterm_e

_initialize_onexit_table

_execute_onexit_table

_cexit

_initterm

_initialize_narrow_environment

Exports

j2d_mlib_ImageAffine

j2d_mlib_ImageConvKernelConvert

j2d_mlib_ImageConvMxN

j2d_mlib_ImageCreate

j2d_mlib_ImageCreateStruct

j2d_mlib_ImageDelete

j2d_mlib_ImageLookUp

Sections

.text
Size: 421KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/msvcp140.dll

.dll windows:6 windows x64

047aec27169fe21274a3b2f2f30606c0

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1c:ed:38:09:e7:93:38:b2:58:1f:4b:65:07:e1:ff:f5:90:9c:e5:66:44:54:9a:c2:58:90:5d:89:c1:ef:39:3d
Signer

Actual PE Digest

1c:ed:38:09:e7:93:38:b2:58:1f:4b:65:07:e1:ff:f5:90:9c:e5:66:44:54:9a:c2:58:90:5d:89:c1:ef:39:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

vcruntime140

__current_exception_context

__C_specific_handler

memcmp

__uncaught_exceptions

__uncaught_exception

memchr

memmove

__std_terminate

_purecall

memset

memcpy

_CxxThrowException

__AdjustPointer

__current_exception

__std_exception_destroy

__std_type_info_destroy_list

__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

malloc

realloc

calloc

free

_callnewh

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table

_cexit

_initialize_narrow_environment

_initterm

_configure_narrow_argv

_invalid_parameter_noinfo_noreturn

_endthreadex

_beginthreadex

terminate

_set_new_handler

_crt_atexit

abort

_execute_onexit_table

_seh_filter_dll

_initterm_e

_register_onexit_function

_errno

api-ms-win-crt-string-l1-1-0

isdigit

isspace

isxdigit

iswxdigit

__strncnt

wcsnlen

iswspace

isupper

wcscpy_s

iswalnum

iswdigit

isalnum

islower

_wcsdup

tolower

strcspn

api-ms-win-crt-locale-l1-1-0

setlocale

__pctype_func

___lc_locale_name_func

_unlock_locales

___lc_codepage_func

___mb_cur_max_func

___lc_collate_cp_func

_lock_locales

localeconv

api-ms-win-crt-stdio-l1-1-0

fputs

fgetwc

fseek

_fsopen

_wfsopen

fputwc

ungetwc

fsetpos

__acrt_iob_func

_get_stream_buffer_pointers

fclose

fflush

fgetc

fgetpos

fputc

fread

__stdio_common_vsprintf_s

_fseeki64

fwrite

setvbuf

ungetc

api-ms-win-crt-filesystem-l1-1-0

_wrename

_wremove

_wrmdir

_wchdir

_lock_file

_unlock_file

api-ms-win-crt-time-l1-1-0

_W_Getmonths

_W_Getdays

_Gettnames

_Getmonths

_W_Gettnames

_Wcsftime

_Getdays

_Strftime

api-ms-win-crt-environment-l1-1-0

_wgetcwd

api-ms-win-crt-math-l1-1-0

ldexp

copysign

pow

powf

frexp

copysignf

logf

log

api-ms-win-crt-convert-l1-1-0

btowc

strtod

strtof

api-ms-win-crt-utility-l1-1-0

rand_s

kernel32

SubmitThreadpoolWork

RaiseException

CompareStringEx

MultiByteToWideChar

GetCPInfo

InitializeSListHead

WideCharToMultiByte

LCMapStringEx

GetLocaleInfoEx

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

CreateDirectoryW

CreateFileW

FindClose

FindFirstFileExW

FindNextFileW

GetDiskFreeSpaceExW

GetFileAttributesExW

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

IsDebuggerPresent

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

GetFileInformationByHandleEx

GetProcAddress

GetModuleHandleW

CloseThreadpoolWait

SetThreadpoolWait

CreateThreadpoolWait

CloseThreadpoolTimer

WaitForThreadpoolTimerCallbacks

SetThreadpoolTimer

CreateThreadpoolTimer

GetTickCount64

GetSystemTimeAsFileTime

GetCurrentProcessorNumber

FlushProcessWriteBuffers

CreateSemaphoreExW

CreateEventExW

SetFileInformationByHandle

InitOnceExecuteOnce

GetStringTypeW

QueryPerformanceFrequency

QueryPerformanceCounter

GetModuleHandleExW

CloseThreadpoolWork

RtlPcToFileHeader

CreateThreadpoolWork

FreeLibraryWhenCallbackReturns

IsProcessorFeaturePresent

RtlCaptureStackBackTrace

DeleteCriticalSection

TryEnterCriticalSection

InitializeCriticalSectionEx

LeaveCriticalSection

EnterCriticalSection

InitializeSRWLock

GetNativeSystemInfo

GetExitCodeThread

GetCurrentThreadId

SwitchToThread

Sleep

WaitForSingleObjectEx

SleepConditionVariableSRW

SleepConditionVariableCS

WakeAllConditionVariable

WakeConditionVariable

InitializeConditionVariable

FormatMessageA

LocalFree

DecodePointer

EncodePointer

CreateSymbolicLinkW

CreateHardLinkW

CopyFileW

GetLastError

CloseHandle

AreFileApisANSI

GetTempPathW

SetFileTime

SetFilePointerEx

SetFileAttributesW

SetEndOfFile

GetFileInformationByHandle

Exports

??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z

??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z

??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z

??0?$_Yarn@D@std@@QEAA@AEBV01@@Z

??0?$_Yarn@D@std@@QEAA@PEBD@Z

??0?$_Yarn@D@std@@QEAA@XZ

??0?$_Yarn@G@std@@QEAA@AEBV01@@Z

??0?$_Yarn@G@std@@QEAA@PEBG@Z

??0?$_Yarn@G@std@@QEAA@XZ

??0?$_Yarn@_W@std@@QEAA@AEBV01@@Z

??0?$_Yarn@_W@std@@QEAA@PEB_W@Z

??0?$_Yarn@_W@std@@QEAA@XZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ

??0?$basic_ios@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z

??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@AEBV01@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@W4_Uninitialized@1@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@AEBV01@@Z

??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@W4_Uninitialized@1@@Z

??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@AEBV01@@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@W4_Uninitialized@1@@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

??0?$codecvt@DDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$codecvt@DDU_Mbstatet@@@std@@QEAA@_K@Z

??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z

??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@KW4_Codecvt_mode@1@_K@Z

??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@_K@Z

??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@KW4_Codecvt_mode@1@_K@Z

??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@_K@Z

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

??0?$ctype@D@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$ctype@D@std@@QEAA@PEBF_N_K@Z

??0?$ctype@G@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$ctype@G@std@@QEAA@_K@Z

??0?$ctype@_W@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$ctype@_W@std@@QEAA@_K@Z

??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAA@PEBD_K@Z

??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z

??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z

??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z

??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z

??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

??0Init@ios_base@std@@QEAA@XZ

??0_Facet_base@std@@QEAA@AEBV01@@Z

??0_Facet_base@std@@QEAA@XZ

??0_Init_locks@std@@QEAA@XZ

??0_Locimp@locale@std@@AEAA@AEBV012@@Z

??0_Locimp@locale@std@@AEAA@_N@Z

??0_Locinfo@std@@QEAA@HPEBD@Z

??0_Locinfo@std@@QEAA@PEBD@Z

??0_Lockit@std@@QEAA@H@Z

??0_Lockit@std@@QEAA@XZ

??0_Timevec@std@@QEAA@AEBV01@@Z

??0_Timevec@std@@QEAA@PEAX@Z

??0_UShinit@std@@QEAA@XZ

??0_Winit@std@@QEAA@XZ

??0codecvt_base@std@@QEAA@_K@Z

??0ctype_base@std@@QEAA@_K@Z

??0facet@locale@std@@IEAA@_K@Z

??0id@locale@std@@QEAA@_K@Z

??0ios_base@std@@IEAA@XZ

??0task_continuation_context@Concurrency@@AEAA@XZ

??0time_base@std@@QEAA@_K@Z

??1?$_Yarn@D@std@@QEAA@XZ

??1?$_Yarn@G@std@@QEAA@XZ

??1?$_Yarn@_W@std@@QEAA@XZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ

??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$codecvt@DDU_Mbstatet@@@std@@MEAA@XZ

??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ

??1?$codecvt@_SDU_Mbstatet@@@std@@MEAA@XZ

??1?$codecvt@_UDU_Mbstatet@@@std@@MEAA@XZ

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

??1?$ctype@D@std@@MEAA@XZ

??1?$ctype@G@std@@MEAA@XZ

??1?$ctype@_W@std@@MEAA@XZ

??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

??1Init@ios_base@std@@QEAA@XZ

??1_Facet_base@std@@UEAA@XZ

??1_Init_locks@std@@QEAA@XZ

??1_Locimp@locale@std@@MEAA@XZ

??1_Locinfo@std@@QEAA@XZ

??1_Lockit@std@@QEAA@XZ

??1_Timevec@std@@QEAA@XZ

??1_UShinit@std@@QEAA@XZ

??1_Winit@std@@QEAA@XZ

??1codecvt_base@std@@UEAA@XZ

??1ctype_base@std@@UEAA@XZ

??1facet@locale@std@@MEAA@XZ

??1ios_base@std@@UEAA@XZ

??1time_base@std@@UEAA@XZ

??4?$_Iosb@H@std@@QEAAAEAV01@$$QEAV01@@Z

??4?$_Iosb@H@std@@QEAAAEAV01@AEBV01@@Z

??4?$_Yarn@D@std@@QEAAAEAV01@AEBV01@@Z

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

??4?$_Yarn@G@std@@QEAAAEAV01@AEBV01@@Z

??4?$_Yarn@G@std@@QEAAAEAV01@PEBG@Z

??4?$_Yarn@_W@std@@QEAAAEAV01@AEBV01@@Z

??4?$_Yarn@_W@std@@QEAAAEAV01@PEB_W@Z

??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_istream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z

??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAAEAV01@AEBV01@@Z

??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAAEAV01@AEBV01@@Z

??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@AEBV01@@Z

??4Init@ios_base@std@@QEAAAEAV012@AEBV012@@Z

??4_Crt_new_delete@std@@QEAAAEAU01@$$QEAU01@@Z

??4_Crt_new_delete@std@@QEAAAEAU01@AEBU01@@Z

??4_Facet_base@std@@QEAAAEAV01@AEBV01@@Z

??4_Init_locks@std@@QEAAAEAV01@AEBV01@@Z

??4_Timevec@std@@QEAAAEAV01@AEBV01@@Z

??4_UShinit@std@@QEAAAEAV01@AEBV01@@Z

??4_Winit@std@@QEAAAEAV01@AEBV01@@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAO@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAPEAX@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAF@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAG@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAI@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAJ@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAK@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAM@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAN@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAO@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAPEAX@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_J@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_K@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_N@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAF@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAG@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAJ@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAK@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAM@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAN@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAO@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAPEAX@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_J@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_N@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@O@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@F@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@G@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@J@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@M@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@O@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEBX@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_J@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_N@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@F@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@O@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z

??7ios_base@std@@QEBA_NXZ

??Bid@locale@std@@QEAA_KXZ

??Bios_base@std@@QEBA_NXZ

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$codecvt@DDU_Mbstatet@@@std@@6B@

??_7?$codecvt@GDU_Mbstatet@@@std@@6B@

??_7?$codecvt@_SDU_Mbstatet@@@std@@6B@

??_7?$codecvt@_UDU_Mbstatet@@@std@@6B@

??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@

??_7?$ctype@D@std@@6B@

??_7?$ctype@G@std@@6B@

??_7?$ctype@_W@std@@6B@

??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7_Facet_base@std@@6B@

??_7_Locimp@locale@std@@6B@

??_7codecvt_base@std@@6B@

??_7ctype_base@std@@6B@

??_7facet@locale@std@@6B@

??_7ios_base@std@@6B@

??_7time_base@std@@6B@

??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@

??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@

??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@

??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@

??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@

??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@

??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@

??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@

??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@

??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@

??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@

??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@

??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAAXXZ

??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ

??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAXXZ

??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ

??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

??_F?$codecvt@DDU_Mbstatet@@@std@@QEAAXXZ

??_F?$codecvt@GDU_Mbstatet@@@std@@QEAAXXZ

??_F?$codecvt@_SDU_Mbstatet@@@std@@QEAAXXZ

??_F?$codecvt@_UDU_Mbstatet@@@std@@QEAAXXZ

??_F?$codecvt@_WDU_Mbstatet@@@std@@QEAAXXZ

??_F?$ctype@D@std@@QEAAXXZ

??_F?$ctype@G@std@@QEAAXXZ

??_F?$ctype@_W@std@@QEAAXXZ

??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

??_F_Locinfo@std@@QEAAXXZ

??_F_Timevec@std@@QEAAXXZ

??_Fcodecvt_base@std@@QEAAXXZ

??_Fctype_base@std@@QEAAXXZ

??_Ffacet@locale@std@@QEAAXXZ

??_Fid@locale@std@@QEAAXXZ

??_Ftime_base@std@@QEAAXXZ

?CaptureCallstack@platform@details@Concurrency@@YA_KPEAPEAX_K1@Z

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ

?_Addcats@_Locinfo@std@@QEAAAEAV12@HPEBD@Z

?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

?_Addstd@ios_base@std@@SAXPEAV12@@Z

?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z

?_Atexit@@YAXP6AXXZ@Z

?_BADOFF@std@@3_JB

?_C_str@?$_Yarn@D@std@@QEBAPEBDXZ

?_C_str@?$_Yarn@G@std@@QEBAPEBGXZ

?_C_str@?$_Yarn@_W@std@@QEBAPEB_WXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Callfns@ios_base@std@@AEAAXW4event@12@@Z

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Clocptr@_Locimp@locale@std@@0PEAV123@EA

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Donarrow@?$ctype@G@std@@IEBADGD@Z

?_Donarrow@?$ctype@_W@std@@IEBAD_WD@Z

?_Dowiden@?$ctype@G@std@@IEBAGD@Z

?_Dowiden@?$ctype@_W@std@@IEBA_WD@Z

?_Empty@?$_Yarn@D@std@@QEBA_NXZ

?_Empty@?$_Yarn@G@std@@QEBA_NXZ

?_Empty@?$_Yarn@_W@std@@QEBA_NXZ

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADDH@Z

?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADDH@Z

?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADDH@Z

?_Findarr@ios_base@std@@AEAAAEAU_Iosarray@12@H@Z

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBD_K@Z

?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBD_K@Z

?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBD_K@Z

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$codecvt@_SDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$codecvt@_UDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?_Getcat@facet@locale@std@@SA_KPEAPEBV123@PEBV23@@Z

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ

?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ

?_Getdateorder@_Locinfo@std@@QEBAHXZ

?_Getdays@_Locinfo@std@@QEBAPEBDXZ

?_Getfalse@_Locinfo@std@@QEBAPEBDXZ

?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z

?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z

?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z

?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z

?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z

?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z

?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z

?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z

?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HAEBVlocale@2@@Z

?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HAEBVlocale@2@@Z

?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HAEBVlocale@2@@Z

?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAEAHAEBV?$ctype@D@2@@Z

?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAEAHAEBV?$ctype@G@2@@Z

?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAEAHAEBV?$ctype@_W@2@@Z

?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ

?_Getmonths@_Locinfo@std@@QEBAPEBDXZ

?_Getname@_Locinfo@std@@QEBAPEBDXZ

?_Getptr@_Timevec@std@@QEBAPEAXXZ

?_Gettnames@_Locinfo@std@@QEBA?AV_Timevec@2@XZ

?_Gettrue@_Locinfo@std@@QEBAPEBDXZ

?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBA_JXZ

?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBA_JXZ

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ

?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ

?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ

?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?_Id_cnt@id@locale@std@@0HA

?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z

?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z

?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z

?_Incref@facet@locale@std@@UEAAXXZ

?_Index@ios_base@std@@0HA

Sections

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/net.dll

.dll windows:6 windows x64

e58259464763035ed1ff5c0bf85f3088

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4b:88:99:e6:ac:c8:2a:06:82:20:a9:b6:ed:f5:45:b6:25:49:d6:19:da:fc:43:75:60:12:33:4a:d5:42:f8:f1
Signer

Actual PE Digest

4b:88:99:e6:ac:c8:2a:06:82:20:a9:b6:ed:f5:45:b6:25:49:d6:19:da:fc:43:75:60:12:33:4a:d5:42:f8:f1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup

recv

WSAAddressToStringA

shutdown

send

listen

accept

__WSAFDIsSet

getnameinfo

freeaddrinfo

WSACleanup

WSAEventSelect

WSACreateEvent

WSACloseEvent

gethostname

ntohl

htons

closesocket

htonl

getsockopt

bind

WSAIoctl

WSAGetLastError

WSASetLastError

socket

setsockopt

sendto

select

recvfrom

ntohs

getsockname

ioctlsocket

connect

getaddrinfo

jvm

jio_snprintf

JVM_CurrentTimeMillis

winhttp

WinHttpGetProxyForUrl

WinHttpGetIEProxyConfigForCurrentUser

WinHttpOpen

java

getErrorString

JNU_ThrowByNameWithMessageAndLastError

JNU_ThrowOutOfMemoryError

JNU_ThrowByName

JNU_ThrowNullPointerException

JNU_NewStringPlatform

JDK_LoadSystemLibrary

JNU_ReleaseStringPlatformChars

JNU_GetStringPlatformChars

advapi32

RegCloseKey

RegQueryValueExA

RegOpenKeyExA

kernel32

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

LoadLibraryExA

GetModuleHandleW

FreeLibrary

VirtualQuery

VirtualProtect

QueryPerformanceCounter

RaiseException

VerifyVersionInfoW

VerSetConditionMask

WideCharToMultiByte

GetOverlappedResult

Sleep

MultiByteToWideChar

GetProcAddress

FormatMessageA

LocalFree

SetHandleInformation

GlobalFree

IsProcessorFeaturePresent

GetCurrentProcessId

GetLastError

GetSystemInfo

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

GetCurrentThreadId

vcruntime140

memcpy

__C_specific_handler

__std_type_info_destroy_list

wcsstr

wcschr

memset

api-ms-win-crt-string-l1-1-0

strcmp

strncpy

strlen

_wcsdup

strcpy

wcscpy

strcat

wcstok_s

wcslen

wcsncmp

strncpy_s

wcscmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf

__stdio_common_vsprintf

__stdio_common_vswprintf

__stdio_common_vsnprintf_s

api-ms-win-crt-heap-l1-1-0

realloc

calloc

free

malloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_cexit

_initialize_narrow_environment

_configure_narrow_argv

_seh_filter_dll

_errno

_initterm

_initialize_onexit_table

_initterm_e

Exports

JNI_OnLoad

Java_java_net_AbstractPlainDatagramSocketImpl_isReusePortAvailable0

Java_java_net_AbstractPlainSocketImpl_isReusePortAvailable0

Java_java_net_DatagramPacket_init

Java_java_net_DualStackPlainDatagramSocketImpl_dataAvailable

Java_java_net_DualStackPlainDatagramSocketImpl_initIDs

Java_java_net_DualStackPlainDatagramSocketImpl_socketBind

Java_java_net_DualStackPlainDatagramSocketImpl_socketClose

Java_java_net_DualStackPlainDatagramSocketImpl_socketConnect

Java_java_net_DualStackPlainDatagramSocketImpl_socketCreate

Java_java_net_DualStackPlainDatagramSocketImpl_socketDisconnect

Java_java_net_DualStackPlainDatagramSocketImpl_socketGetIntOption

Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalAddress

Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalPort

Java_java_net_DualStackPlainDatagramSocketImpl_socketReceiveOrPeekData

Java_java_net_DualStackPlainDatagramSocketImpl_socketSend

Java_java_net_DualStackPlainDatagramSocketImpl_socketSetIntOption

Java_java_net_Inet4AddressImpl_getHostByAddr

Java_java_net_Inet4AddressImpl_getLocalHostName

Java_java_net_Inet4AddressImpl_isReachable0

Java_java_net_Inet4AddressImpl_lookupAllHostAddr

Java_java_net_Inet4Address_init

Java_java_net_Inet6AddressImpl_getHostByAddr

Java_java_net_Inet6AddressImpl_getLocalHostName

Java_java_net_Inet6AddressImpl_isReachable0

Java_java_net_Inet6AddressImpl_lookupAllHostAddr

Java_java_net_Inet6Address_init

Java_java_net_InetAddressImplFactory_isIPv6Supported

Java_java_net_InetAddress_init

Java_java_net_NetworkInterface_boundInetAddress0

Java_java_net_NetworkInterface_getAll

Java_java_net_NetworkInterface_getAll_XP

Java_java_net_NetworkInterface_getByIndex0

Java_java_net_NetworkInterface_getByIndex0_XP

Java_java_net_NetworkInterface_getByInetAddress0

Java_java_net_NetworkInterface_getByInetAddress0_XP

Java_java_net_NetworkInterface_getByName0

Java_java_net_NetworkInterface_getByName0_XP

Java_java_net_NetworkInterface_getMTU0

Java_java_net_NetworkInterface_getMTU0_XP

Java_java_net_NetworkInterface_getMacAddr0

Java_java_net_NetworkInterface_getMacAddr0_XP

Java_java_net_NetworkInterface_init

Java_java_net_NetworkInterface_isLoopback0

Java_java_net_NetworkInterface_isLoopback0_XP

Java_java_net_NetworkInterface_isP2P0

Java_java_net_NetworkInterface_isP2P0_XP

Java_java_net_NetworkInterface_isUp0

Java_java_net_NetworkInterface_isUp0_XP

Java_java_net_NetworkInterface_supportsMulticast0

Java_java_net_NetworkInterface_supportsMulticast0_XP

Java_java_net_PlainSocketImpl_accept0

Java_java_net_PlainSocketImpl_available0

Java_java_net_PlainSocketImpl_bind0

Java_java_net_PlainSocketImpl_close0

Java_java_net_PlainSocketImpl_configureBlocking

Java_java_net_PlainSocketImpl_connect0

Java_java_net_PlainSocketImpl_getIntOption

Java_java_net_PlainSocketImpl_initIDs

Java_java_net_PlainSocketImpl_listen0

Java_java_net_PlainSocketImpl_localAddress

Java_java_net_PlainSocketImpl_localPort0

Java_java_net_PlainSocketImpl_sendOOB

Java_java_net_PlainSocketImpl_setIntOption

Java_java_net_PlainSocketImpl_setSoTimeout0

Java_java_net_PlainSocketImpl_shutdown0

Java_java_net_PlainSocketImpl_socket0

Java_java_net_PlainSocketImpl_waitForConnect

Java_java_net_PlainSocketImpl_waitForNewConnection

Java_java_net_SocketCleanable_cleanupClose0

Java_java_net_SocketInputStream_init

Java_java_net_SocketInputStream_socketRead0

Java_java_net_SocketOutputStream_init

Java_java_net_SocketOutputStream_socketWrite0

Java_java_net_TwoStacksPlainDatagramSocketImpl_bind0

Java_java_net_TwoStacksPlainDatagramSocketImpl_connect0

Java_java_net_TwoStacksPlainDatagramSocketImpl_dataAvailable

Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketClose

Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketCreate

Java_java_net_TwoStacksPlainDatagramSocketImpl_disconnect0

Java_java_net_TwoStacksPlainDatagramSocketImpl_getTTL

Java_java_net_TwoStacksPlainDatagramSocketImpl_getTimeToLive

Java_java_net_TwoStacksPlainDatagramSocketImpl_init

Java_java_net_TwoStacksPlainDatagramSocketImpl_join

Java_java_net_TwoStacksPlainDatagramSocketImpl_leave

Java_java_net_TwoStacksPlainDatagramSocketImpl_peek

Java_java_net_TwoStacksPlainDatagramSocketImpl_peekData

Java_java_net_TwoStacksPlainDatagramSocketImpl_receive0

Java_java_net_TwoStacksPlainDatagramSocketImpl_send0

Java_java_net_TwoStacksPlainDatagramSocketImpl_setTTL

Java_java_net_TwoStacksPlainDatagramSocketImpl_setTimeToLive

Java_java_net_TwoStacksPlainDatagramSocketImpl_socketGetOption

Java_java_net_TwoStacksPlainDatagramSocketImpl_socketLocalAddress

Java_java_net_TwoStacksPlainDatagramSocketImpl_socketNativeSetOption

Java_jdk_net_Sockets_isReusePortAvailable0

Java_sun_net_dns_ResolverConfigurationImpl_init0

Java_sun_net_dns_ResolverConfigurationImpl_loadDNSconfig0

Java_sun_net_dns_ResolverConfigurationImpl_notifyAddrChange0

Java_sun_net_spi_DefaultProxySelector_getSystemProxies

Java_sun_net_spi_DefaultProxySelector_init

Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getCredentialsHandle

Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getNextToken

Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_initFirst

Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSite0

Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSiteAvailable

NET_Bind

NET_BindV6

NET_EnableFastTcpLoopback

NET_EnableFastTcpLoopbackConnect

NET_GetPortFromSockaddr

NET_GetSockOpt

NET_InetAddressToSockaddr

NET_MapSocketOption

NET_MapSocketOptionV6

NET_SetSockOpt

NET_SockaddrEqualsInetAddress

NET_SockaddrToInetAddress

NET_SocketAvailable

NET_SocketClose

NET_ThrowNew

NET_Timeout

NET_Timeout2

NET_WinBind

initInetAddressIDs

ipv4_available

ipv6_available

reuseport_available

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/nio.dll

.dll windows:6 windows x64

78791fc9fc6ff3936e3c8567048b39b2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

de:b7:60:45:dd:f6:4a:d2:34:33:9c:b6:af:40:d7:ca:91:21:cb:53:41:ae:85:24:37:10:3e:d5:23:c4:03:5e
Signer

Actual PE Digest

de:b7:60:45:dd:f6:4a:d2:34:33:9c:b6:af:40:d7:ca:91:21:cb:53:41:ae:85:24:37:10:3e:d5:23:c4:03:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

ws2_32

accept

recvfrom

select

sendto

WSAGetLastError

WSAIoctl

WSARecv

WSASend

ioctlsocket

recv

send

WSAEventSelect

__WSAFDIsSet

connect

getpeername

getsockname

getsockopt

htonl

listen

ntohl

setsockopt

WSAStartup

WSASocketW

WSAEnumProtocolsW

bind

closesocket

socket

shutdown

java

JNU_ThrowOutOfMemoryError

JNU_NewObjectByName

JNU_ThrowIOException

Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed

JNU_ThrowInternalError

JNU_ThrowIOExceptionWithLastError

JNU_ThrowByName

net

NET_SetSockOpt

NET_GetSockOpt

NET_SocketAvailable

NET_GetPortFromSockaddr

NET_SockaddrToInetAddress

NET_InetAddressToSockaddr

ipv6_available

NET_ThrowNew

initInetAddressIDs

NET_EnableFastTcpLoopbackConnect

NET_WinBind

NET_EnableFastTcpLoopback

advapi32

GetLengthSid

ConvertStringSidToSidW

ConvertSidToStringSidW

LookupPrivilegeValueW

LookupAccountNameW

LookupAccountSidW

SetSecurityDescriptorOwner

SetSecurityDescriptorDacl

SetFileSecurityW

MapGenericMask

InitializeSecurityDescriptor

InitializeAcl

GetTokenInformation

GetSecurityDescriptorOwner

GetSecurityDescriptorDacl

GetFileSecurityW

GetAclInformation

GetAce

DuplicateTokenEx

AdjustTokenPrivileges

AddAccessDeniedAceEx

AddAccessAllowedAceEx

AccessCheck

OpenThreadToken

OpenProcessToken

SetThreadToken

RegQueryValueExW

RegOpenKeyExW

RegCloseKey

mswsock

TransmitFile

kernel32

InitializeCriticalSection

AcquireSRWLockShared

AcquireSRWLockExclusive

ReleaseSRWLockShared

ReleaseSRWLockExclusive

InitializeSRWLock

GetQueuedCompletionStatusEx

SetLastError

GetHandleInformation

CreateSymbolicLinkW

EnterCriticalSection

CreateHardLinkW

MoveFileExW

CopyFileExW

LocalFree

LocalAlloc

GetCurrentThread

CreateEventW

CancelIo

DeviceIoControl

LeaveCriticalSection

DeleteCriticalSection

InitOnceExecuteOnce

GetTickCount64

GetModuleHandleW

GetProcAddress

SetFileCompletionNotificationModes

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

GetFileInformationByHandle

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

IsDebuggerPresent

GetVolumePathNameW

RemoveDirectoryW

SetEndOfFile

SetFileAttributesW

SetFileTime

FindFirstStreamW

ReadDirectoryChangesW

GetVolumeInformationW

GetLogicalDrives

SetFilePointerEx

CloseHandle

GetLastError

GetSystemInfo

MapViewOfFile

UnmapViewOfFile

CreateFileMappingA

FlushFileBuffers

GetDiskFreeSpaceW

GetFileSizeEx

LockFileEx

ReadFile

SetFileInformationByHandle

UnlockFileEx

WriteFile

DuplicateHandle

GetOverlappedResult

GetCurrentProcess

ReOpenFile

GetFullPathNameW

CreateIoCompletionPort

GetQueuedCompletionStatus

PostQueuedCompletionStatus

FormatMessageW

FlushViewOfFile

SetHandleInformation

CreateDirectoryW

CreateFileW

DeleteFileW

FindClose

FindFirstFileW

FindNextFileW

GetDiskFreeSpaceExW

GetDriveTypeW

GetFileAttributesW

GetFileAttributesExW

GetFinalPathNameByHandleW

FindNextStreamW

vcruntime140

memset

__C_specific_handler

__std_type_info_destroy_list

memcpy

api-ms-win-crt-heap-l1-1-0

malloc

free

api-ms-win-crt-string-l1-1-0

strlen

strncpy

wcslen

api-ms-win-crt-runtime-l1-1-0

abort

_errno

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initterm

_cexit

_execute_onexit_table

_initterm_e

_initialize_onexit_table

Exports

JNI_OnLoad

Java_java_nio_MappedMemoryUtils_force0

Java_java_nio_MappedMemoryUtils_isLoaded0

Java_java_nio_MappedMemoryUtils_load0

Java_java_nio_MappedMemoryUtils_unload0

Java_sun_nio_ch_DatagramChannelImpl_disconnect0

Java_sun_nio_ch_DatagramChannelImpl_receive0

Java_sun_nio_ch_DatagramChannelImpl_send0

Java_sun_nio_ch_DatagramDispatcher_read0

Java_sun_nio_ch_DatagramDispatcher_readv0

Java_sun_nio_ch_DatagramDispatcher_write0

Java_sun_nio_ch_DatagramDispatcher_writev0

Java_sun_nio_ch_FileChannelImpl_initIDs

Java_sun_nio_ch_FileChannelImpl_map0

Java_sun_nio_ch_FileChannelImpl_maxDirectTransferSize0

Java_sun_nio_ch_FileChannelImpl_transferTo0

Java_sun_nio_ch_FileChannelImpl_unmap0

Java_sun_nio_ch_FileDispatcherImpl_close0

Java_sun_nio_ch_FileDispatcherImpl_duplicateHandle

Java_sun_nio_ch_FileDispatcherImpl_force0

Java_sun_nio_ch_FileDispatcherImpl_lock0

Java_sun_nio_ch_FileDispatcherImpl_pread0

Java_sun_nio_ch_FileDispatcherImpl_pwrite0

Java_sun_nio_ch_FileDispatcherImpl_read0

Java_sun_nio_ch_FileDispatcherImpl_readv0

Java_sun_nio_ch_FileDispatcherImpl_release0

Java_sun_nio_ch_FileDispatcherImpl_seek0

Java_sun_nio_ch_FileDispatcherImpl_setDirect0

Java_sun_nio_ch_FileDispatcherImpl_size0

Java_sun_nio_ch_FileDispatcherImpl_truncate0

Java_sun_nio_ch_FileDispatcherImpl_write0

Java_sun_nio_ch_FileDispatcherImpl_writev0

Java_sun_nio_ch_FileKey_init

Java_sun_nio_ch_FileKey_initIDs

Java_sun_nio_ch_IOUtil_configureBlocking

Java_sun_nio_ch_IOUtil_drain

Java_sun_nio_ch_IOUtil_fdVal

Java_sun_nio_ch_IOUtil_initIDs

Java_sun_nio_ch_IOUtil_iovMax

Java_sun_nio_ch_IOUtil_randomBytes

Java_sun_nio_ch_IOUtil_setfdVal

Java_sun_nio_ch_IOUtil_write1

Java_sun_nio_ch_Iocp_close0

Java_sun_nio_ch_Iocp_createIoCompletionPort

Java_sun_nio_ch_Iocp_getErrorMessage

Java_sun_nio_ch_Iocp_getQueuedCompletionStatus

Java_sun_nio_ch_Iocp_initIDs

Java_sun_nio_ch_Iocp_postQueuedCompletionStatus

Java_sun_nio_ch_NativeSocketAddress_AFINET

Java_sun_nio_ch_NativeSocketAddress_AFINET6

Java_sun_nio_ch_NativeSocketAddress_offsetFamily

Java_sun_nio_ch_NativeSocketAddress_offsetSin4Addr

Java_sun_nio_ch_NativeSocketAddress_offsetSin4Port

Java_sun_nio_ch_NativeSocketAddress_offsetSin6Addr

Java_sun_nio_ch_NativeSocketAddress_offsetSin6FlowInfo

Java_sun_nio_ch_NativeSocketAddress_offsetSin6Port

Java_sun_nio_ch_NativeSocketAddress_offsetSin6ScopeId

Java_sun_nio_ch_NativeSocketAddress_sizeofFamily

Java_sun_nio_ch_NativeSocketAddress_sizeofSockAddr4

Java_sun_nio_ch_NativeSocketAddress_sizeofSockAddr6

Java_sun_nio_ch_Net_accept

Java_sun_nio_ch_Net_available

Java_sun_nio_ch_Net_bind0

Java_sun_nio_ch_Net_blockOrUnblock4

Java_sun_nio_ch_Net_blockOrUnblock6

Java_sun_nio_ch_Net_canIPv6SocketJoinIPv4Group0

Java_sun_nio_ch_Net_canJoin6WithIPv4Group0

Java_sun_nio_ch_Net_canUseIPv6OptionsWithIPv4LocalAddress0

Java_sun_nio_ch_Net_connect0

Java_sun_nio_ch_Net_discardOOB

Java_sun_nio_ch_Net_getIntOption0

Java_sun_nio_ch_Net_getInterface4

Java_sun_nio_ch_Net_getInterface6

Java_sun_nio_ch_Net_initIDs

Java_sun_nio_ch_Net_isExclusiveBindAvailable

Java_sun_nio_ch_Net_isIPv6Available0

Java_sun_nio_ch_Net_isReusePortAvailable0

Java_sun_nio_ch_Net_joinOrDrop4

Java_sun_nio_ch_Net_joinOrDrop6

Java_sun_nio_ch_Net_listen

Java_sun_nio_ch_Net_localInetAddress

Java_sun_nio_ch_Net_localPort

Java_sun_nio_ch_Net_poll

Java_sun_nio_ch_Net_pollConnect

Java_sun_nio_ch_Net_pollconnValue

Java_sun_nio_ch_Net_pollerrValue

Java_sun_nio_ch_Net_pollhupValue

Java_sun_nio_ch_Net_pollinValue

Java_sun_nio_ch_Net_pollnvalValue

Java_sun_nio_ch_Net_polloutValue

Java_sun_nio_ch_Net_remoteInetAddress

Java_sun_nio_ch_Net_remotePort

Java_sun_nio_ch_Net_sendOOB

Java_sun_nio_ch_Net_setIntOption0

Java_sun_nio_ch_Net_setInterface4

Java_sun_nio_ch_Net_setInterface6

Java_sun_nio_ch_Net_shouldSetBothIPv4AndIPv6Options0

Java_sun_nio_ch_Net_shutdown

Java_sun_nio_ch_Net_socket0

Java_sun_nio_ch_SocketDispatcher_close0

Java_sun_nio_ch_SocketDispatcher_read0

Java_sun_nio_ch_SocketDispatcher_readv0

Java_sun_nio_ch_SocketDispatcher_write0

Java_sun_nio_ch_SocketDispatcher_writev0

Java_sun_nio_ch_UnixDomainSockets_accept0

Java_sun_nio_ch_UnixDomainSockets_bind0

Java_sun_nio_ch_UnixDomainSockets_connect0

Java_sun_nio_ch_UnixDomainSockets_init

Java_sun_nio_ch_UnixDomainSockets_localAddress0

Java_sun_nio_ch_UnixDomainSockets_socket0

Java_sun_nio_ch_WEPoll_close

Java_sun_nio_ch_WEPoll_create

Java_sun_nio_ch_WEPoll_ctl

Java_sun_nio_ch_WEPoll_dataOffset

Java_sun_nio_ch_WEPoll_eventSize

Java_sun_nio_ch_WEPoll_eventsOffset

Java_sun_nio_ch_WEPoll_wait

Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_lockFile

Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_readFile

Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_writeFile

Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_accept0

Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_closesocket0

Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_initIDs

Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_updateAcceptContext

Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_closesocket0

Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_connect0

Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_initIDs

Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_read0

Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_shutdown0

Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_updateConnectContext

Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_write0

Java_sun_nio_ch_WindowsSelectorImpl_00024SubSelector_poll0

Java_sun_nio_ch_WindowsSelectorImpl_resetWakeupSocket0

Java_sun_nio_ch_WindowsSelectorImpl_setWakeupSocket0

Java_sun_nio_fs_RegistryFileTypeDetector_queryStringValue

Java_sun_nio_fs_WindowsNativeDispatcher_AccessCheck

Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessAllowedAceEx

Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessDeniedAceEx

Java_sun_nio_fs_WindowsNativeDispatcher_AdjustTokenPrivileges

Java_sun_nio_fs_WindowsNativeDispatcher_CancelIo

Java_sun_nio_fs_WindowsNativeDispatcher_CloseHandle

Java_sun_nio_fs_WindowsNativeDispatcher_ConvertSidToStringSid

Java_sun_nio_fs_WindowsNativeDispatcher_ConvertStringSidToSid0

Java_sun_nio_fs_WindowsNativeDispatcher_CopyFileEx0

Java_sun_nio_fs_WindowsNativeDispatcher_CreateDirectory0

Java_sun_nio_fs_WindowsNativeDispatcher_CreateEvent

Java_sun_nio_fs_WindowsNativeDispatcher_CreateFile0

Java_sun_nio_fs_WindowsNativeDispatcher_CreateHardLink0

Java_sun_nio_fs_WindowsNativeDispatcher_CreateIoCompletionPort

Java_sun_nio_fs_WindowsNativeDispatcher_CreateSymbolicLink0

Java_sun_nio_fs_WindowsNativeDispatcher_DeleteFile0

Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlGetReparsePoint

Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlSetSparse

Java_sun_nio_fs_WindowsNativeDispatcher_DuplicateTokenEx

Java_sun_nio_fs_WindowsNativeDispatcher_FindClose

Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile0

Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile1

Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstStream0

Java_sun_nio_fs_WindowsNativeDispatcher_FindNextFile

Java_sun_nio_fs_WindowsNativeDispatcher_FindNextStream

Java_sun_nio_fs_WindowsNativeDispatcher_FormatMessage

Java_sun_nio_fs_WindowsNativeDispatcher_GetAce

Java_sun_nio_fs_WindowsNativeDispatcher_GetAclInformation0

Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentProcess

Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentThread

Java_sun_nio_fs_WindowsNativeDispatcher_GetDiskFreeSpace0

Java_sun_nio_fs_WindowsNativeDispatcher_GetDiskFreeSpaceEx0

Java_sun_nio_fs_WindowsNativeDispatcher_GetDriveType0

Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributes0

Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributesEx0

Java_sun_nio_fs_WindowsNativeDispatcher_GetFileInformationByHandle

Java_sun_nio_fs_WindowsNativeDispatcher_GetFileSecurity0

Java_sun_nio_fs_WindowsNativeDispatcher_GetFileSizeEx

Java_sun_nio_fs_WindowsNativeDispatcher_GetFinalPathNameByHandle

Java_sun_nio_fs_WindowsNativeDispatcher_GetFullPathName0

Java_sun_nio_fs_WindowsNativeDispatcher_GetLengthSid

Java_sun_nio_fs_WindowsNativeDispatcher_GetLogicalDrives

Java_sun_nio_fs_WindowsNativeDispatcher_GetOverlappedResult

Java_sun_nio_fs_WindowsNativeDispatcher_GetQueuedCompletionStatus0

Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorDacl

Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorOwner

Java_sun_nio_fs_WindowsNativeDispatcher_GetTokenInformation

Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumeInformation0

Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumePathName0

Java_sun_nio_fs_WindowsNativeDispatcher_InitializeAcl

Java_sun_nio_fs_WindowsNativeDispatcher_InitializeSecurityDescriptor

Java_sun_nio_fs_WindowsNativeDispatcher_LocalFree

Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountName0

Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountSid0

Java_sun_nio_fs_WindowsNativeDispatcher_LookupPrivilegeValue0

Java_sun_nio_fs_WindowsNativeDispatcher_MoveFileEx0

Java_sun_nio_fs_WindowsNativeDispatcher_OpenProcessToken

Java_sun_nio_fs_WindowsNativeDispatcher_OpenThreadToken

Java_sun_nio_fs_WindowsNativeDispatcher_PostQueuedCompletionStatus

Java_sun_nio_fs_WindowsNativeDispatcher_ReadDirectoryChangesW

Java_sun_nio_fs_WindowsNativeDispatcher_RemoveDirectory0

Java_sun_nio_fs_WindowsNativeDispatcher_SetEndOfFile

Java_sun_nio_fs_WindowsNativeDispatcher_SetFileAttributes0

Java_sun_nio_fs_WindowsNativeDispatcher_SetFileSecurity0

Java_sun_nio_fs_WindowsNativeDispatcher_SetFileTime

Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorDacl

Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorOwner

Java_sun_nio_fs_WindowsNativeDispatcher_SetThreadToken

Java_sun_nio_fs_WindowsNativeDispatcher_initIDs

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/prefs.dll

.dll windows:6 windows x64

050d35bc36fe2ec85f64ca50bc2b6367

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

30:0f:99:b9:7b:08:c7:12:18:e4:0c:30:40:83:6c:c8:29:c3:08:2b:b8:03:6f:f6:47:b7:79:79:c3:a2:20:92
Signer

Actual PE Digest

30:0f:99:b9:7b:08:c7:12:18:e4:0c:30:40:83:6c:c8:29:c3:08:2b:b8:03:6f:f6:47:b7:79:79:c3:a2:20:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey

RegCreateKeyExA

RegDeleteKeyA

RegDeleteValueA

RegEnumKeyExA

RegEnumValueA

RegFlushKey

RegOpenKeyExA

RegQueryInfoKeyA

RegQueryValueExA

RegSetValueExA

java

JNU_ThrowOutOfMemoryError

kernel32

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

IsDebuggerPresent

vcruntime140

memset

memcpy

__C_specific_handler

__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

free

malloc

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_execute_onexit_table

_cexit

Exports

Java_java_util_prefs_WindowsPreferences_WindowsRegCloseKey

Java_java_util_prefs_WindowsPreferences_WindowsRegCreateKeyEx

Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteKey

Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteValue

Java_java_util_prefs_WindowsPreferences_WindowsRegEnumKeyEx

Java_java_util_prefs_WindowsPreferences_WindowsRegEnumValue

Java_java_util_prefs_WindowsPreferences_WindowsRegFlushKey

Java_java_util_prefs_WindowsPreferences_WindowsRegOpenKey

Java_java_util_prefs_WindowsPreferences_WindowsRegQueryInfoKey

Java_java_util_prefs_WindowsPreferences_WindowsRegQueryValueEx

Java_java_util_prefs_WindowsPreferences_WindowsRegSetValueEx

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/server/jvm.dll

.dll windows:6 windows x64

f20a9fb2038e451b2483af69592a8984

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e7:a2:ae:b8:2e:11:cd:42:ad:b3:32:54:dd:dc:85:bf:97:e9:05:bd:ea:39:54:a4:25:7a:b5:f7:09:9f:0c:35
Signer

Actual PE Digest

e7:a2:ae:b8:2e:11:cd:42:ad:b3:32:54:dd:dc:85:bf:97:e9:05:bd:ea:39:54:a4:25:7a:b5:f7:09:9f:0c:35

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

kernel32

ResetEvent

OpenProcess

GetModuleFileNameA

WideCharToMultiByte

K32EnumProcessModules

K32GetModuleFileNameExA

CreateToolhelp32Snapshot

Process32First

Process32Next

RtlCaptureStackBackTrace

SetEnvironmentVariableA

CreateFileW

FindClose

FindFirstFileA

FindFirstFileW

FindNextFileA

FindNextFileW

GetFileAttributesA

GetFileAttributesExW

GetFileInformationByHandle

GetFullPathNameW

ReadFile

SetEndOfFile

SetFilePointer

GetTempPathA

IsDebuggerPresent

DebugBreak

DuplicateHandle

RaiseException

SetLastError

QueryPerformanceCounter

QueryPerformanceFrequency

InitOnceExecuteOnce

SleepConditionVariableCS

CreateEventA

WaitForMultipleObjects

GetProcessTimes

GetCurrentProcess

GetCurrentProcessId

GetExitCodeProcess

SwitchToThread

GetCurrentThread

GetCurrentThreadId

OpenThread

SetThreadPriority

GetThreadPriority

SuspendThread

ResumeThread

SetEvent

GetThreadContext

GetThreadTimes

GetCurrentProcessorNumber

GlobalMemoryStatusEx

GetSystemInfo

GetSystemTimeAsFileTime

GetLocalTime

GetTickCount64

GetSystemDirectoryA

GetWindowsDirectoryA

GetComputerNameExA

GetVersionExA

GetNativeSystemInfo

VirtualAlloc

VirtualProtect

VirtualFree

VirtualQuery

MapViewOfFileEx

UnmapViewOfFile

GetLargePageMinimum

VirtualAllocExNuma

GetModuleHandleA

LoadLibraryA

GetNumaHighestNodeNumber

GetProcessAffinityMask

FormatMessageA

CreateFileMappingA

GetNumaNodeProcessorMask

MultiByteToWideChar

IsDBCSLeadByte

SetConsoleCtrlHandler

RtlCaptureContext

RtlAddFunctionTable

CreateDirectoryA

GetVolumeInformationA

MapViewOfFile

OpenFileMappingA

TlsAlloc

TlsGetValue

TlsSetValue

SetUnhandledExceptionFilter

AllocateUserPhysicalPages

FreeUserPhysicalPages

MapUserPhysicalPages

IsProcessorFeaturePresent

TerminateProcess

UnhandledExceptionFilter

RtlVirtualUnwind

WakeAllConditionVariable

TryEnterCriticalSection

GetEnvironmentVariableA

WakeConditionVariable

InitializeConditionVariable

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSection

GetProcAddress

FreeLibrary

CreateSemaphoreA

Sleep

CreateMutexA

WaitForSingleObject

ReleaseMutex

ReleaseSemaphore

GetLastError

CloseHandle

WriteFile

FlushFileBuffers

CreateProcessA

CreateFileA

RtlLookupFunctionEntry

GetModuleHandleW

CreateEventW

WaitForSingleObjectEx

InitializeCriticalSectionAndSpinCount

InitializeSListHead

user32

GetUserObjectInformationA

MessageBoxA

GetProcessWindowStation

advapi32

GetUserNameA

SetFileSecurityA

SetSecurityDescriptorDacl

InitializeSecurityDescriptor

InitializeAcl

GetTokenInformation

GetSecurityDescriptorDacl

GetLengthSid

GetAclInformation

GetAce

FreeSid

EqualSid

CopySid

AllocateAndInitializeSid

AddAce

AddAccessAllowedAce

RegQueryValueExA

RegOpenKeyA

RegCloseKey

LookupPrivilegeValueA

AdjustTokenPrivileges

OpenProcessToken

wsock32

WSAStartup

winmm

timeEndPeriod

timeBeginPeriod

version

GetFileVersionInfoSizeA

GetFileVersionInfoA

VerQueryValueA

psapi

GetProcessMemoryInfo

GetModuleFileNameExA

GetModuleInformation

EnumProcessModules

vcruntime140

__std_type_info_destroy_list

__C_specific_handler

memcpy

memmove

_purecall

memset

strchr

strrchr

strstr

memcmp

memchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

__stdio_common_vsprintf

__stdio_common_vfprintf

_close

_wsopen_dispatch

fopen

_get_osfhandle

_mktemp

_setmode

_lseeki64

fgetc

__acrt_iob_func

_sopen_dispatch

_getcwd

fclose

_read

getc

fwrite

fflush

fgets

fputc

_write

_lseek

_fileno

__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

isalpha

iswalpha

strncmp

strlen

strpbrk

_strnicmp

strtok_s

strcspn

isprint

_strdup

strcmp

strncpy

_stricmp

isspace

isdigit

strncat

isalnum

api-ms-win-crt-math-l1-1-0

fmod

frexp

_fdopen

ceil

floor

log

log2

exp

_finite

_isnan

sqrt

log2f

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll

_endthreadex

_initterm_e

_beginthreadex

_configure_narrow_argv

_errno

_cexit

raise

signal

_exit

_initialize_narrow_environment

exit

_register_onexit_function

_getpid

_initterm

_crt_atexit

_execute_onexit_table

_initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

strtol

atof

_itoa

wcstombs

strtod

strtoull

api-ms-win-crt-environment-l1-1-0

__p__environ

getenv

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

_lock_file

_getdrive

_access

_unlink

_chmod

rename

_stat64i32

remove

api-ms-win-crt-time-l1-1-0

wcsftime

strftime

_localtime64

_gmtime64

_time64

_ctime64

_get_timezone

api-ms-win-crt-heap-l1-1-0

realloc

_aligned_malloc

free

malloc

Exports

??_7?$ArrayRef@D@MetaspaceClosure@@6B@

??_7?$ArrayRef@E@MetaspaceClosure@@6B@

??_7?$ArrayRef@G@MetaspaceClosure@@6B@

??_7?$ArrayRef@H@MetaspaceClosure@@6B@

??_7?$ArrayRef@PEAV?$Array@E@@@MetaspaceClosure@@6B@

??_7?$ArrayRef@PEAVInstanceKlass@@@MetaspaceClosure@@6B@

??_7?$ArrayRef@PEAVKlass@@@MetaspaceClosure@@6B@

??_7?$ArrayRef@PEAVMethod@@@MetaspaceClosure@@6B@

??_7?$ArrayRef@PEAVRecordComponent@@@MetaspaceClosure@@6B@

??_7?$ArrayRef@_K@MetaspaceClosure@@6B@

??_7?$ClaimingCLDToOopClosure@$02@@6B@

??_7?$ClaimingCLDToOopClosure@$03@@6B@

??_7?$ClaimingCLDToOopClosure@$0A@@@6B@

??_7?$CppVtableTesterA@VConstantPool@@@@6B@

??_7?$CppVtableTesterA@VInstanceClassLoaderKlass@@@@6B@

??_7?$CppVtableTesterA@VInstanceKlass@@@@6B@

??_7?$CppVtableTesterA@VInstanceMirrorKlass@@@@6B@

??_7?$CppVtableTesterA@VInstanceRefKlass@@@@6B@

??_7?$CppVtableTesterA@VMethod@@@@6B@

??_7?$CppVtableTesterA@VObjArrayKlass@@@@6B@

??_7?$CppVtableTesterA@VTypeArrayKlass@@@@6B@

??_7?$CppVtableTesterB@VConstantPool@@@@6B@

??_7?$CppVtableTesterB@VInstanceClassLoaderKlass@@@@6B@

??_7?$CppVtableTesterB@VInstanceKlass@@@@6B@

??_7?$CppVtableTesterB@VInstanceMirrorKlass@@@@6B@

??_7?$CppVtableTesterB@VInstanceRefKlass@@@@6B@

??_7?$CppVtableTesterB@VMethod@@@@6B@

??_7?$CppVtableTesterB@VObjArrayKlass@@@@6B@

??_7?$CppVtableTesterB@VTypeArrayKlass@@@@6B@

??_7?$DCmdArgument@PEAD@@6B@

??_7?$DCmdArgument@PEAVStringArrayArgument@@@@6B@

??_7?$DCmdArgument@VMemorySizeArgument@@@@6B@

??_7?$DCmdArgument@VNanoTimeArgument@@@@6B@

??_7?$DCmdArgument@_J@@6B@

??_7?$DCmdArgument@_N@@6B@

??_7?$DCmdFactoryImpl@VClassHierarchyDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VClassHistogramDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VClassLoaderHierarchyDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VClassLoaderStatsDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCodeCacheDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCodeHeapAnalyticsDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCodeListDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCommandLineDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCompileQueueDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCompilerDirectivesAddDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCompilerDirectivesClearDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCompilerDirectivesPrintDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VCompilerDirectivesRemoveDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VDebugOnCmdStartDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VDumpSharedArchiveDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VEventLogDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VFinalizerInfoDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VHeapDumpDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VHeapInfoDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VHelpDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJMXStartLocalDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJMXStartRemoteDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJMXStatusDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJMXStopRemoteDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJVMTIAgentLoadDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJVMTIDataDumpDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJfrCheckFlightRecordingDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJfrConfigureFlightRecorderDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJfrDumpFlightRecordingDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJfrStartFlightRecordingDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VJfrStopFlightRecordingDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VLogDiagnosticCommand@@@@6B@

??_7?$DCmdFactoryImpl@VMetaspaceDCmd@metaspace@@@@6B@

??_7?$DCmdFactoryImpl@VNMTDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VPrintSystemPropertiesDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VPrintVMFlagsDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VRunFinalizationDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VSetVMFlagDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VStringtableDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VSymboltableDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VSystemDictionaryDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VSystemGCDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VThreadDumpDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VTouchedMethodsDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VVMDynamicLibrariesDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VVMInfoDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VVMUptimeDCmd@@@@6B@

??_7?$DCmdFactoryImpl@VVersionDCmd@@@@6B@

??_7?$DeadCounterClosure@VOopClosure@@@@6B@

??_7?$EventLogBase@V?$FormatStringLogMessage@$0BAA@@@@@6B@

??_7?$EventLogBase@V?$FormatStringLogMessage@$0CAA@@@@@6B@

??_7?$EventLogBase@VGCMessage@@@@6B@

??_7?$FastScanClosure@VDefNewScanClosure@@@@6B@

??_7?$FastScanClosure@VDefNewYoungerGenClosure@@@@6B@

??_7?$FormatStringEventLog@$0BAA@@@6B@

??_7?$FormatStringEventLog@$0CAA@@@6B@

??_7?$G1BiasedMappedArray@E@@6B@

??_7?$G1BiasedMappedArray@PEAVHeapRegion@@@@6B@

??_7?$G1BiasedMappedArray@UG1HeapRegionAttr@@@@6B@

??_7?$G1BiasedMappedArray@_N@@6B@

??_7?$G1ConcurrentStartMarkClosures@$00@@6B@

??_7?$G1ConcurrentStartMarkClosures@$0A@@@6B@

??_7?$G1ParCopyClosure@$00$00@@6B@

??_7?$G1ParCopyClosure@$00$0A@@@6B@

??_7?$G1ParCopyClosure@$01$00@@6B@

??_7?$G1ParCopyClosure@$01$0A@@@6B@

??_7?$G1ParCopyClosure@$0A@$00@@6B@

??_7?$G1ParCopyClosure@$0A@$0A@@@6B@

??_7?$GCTraceTimeLoggerWrapper@$02$0CL@$0A@$0A@$0A@$0A@$0A@@@6B@

??_7?$GenericTaskQueueSet@V?$GenericTaskQueue@PEAVoopDesc@@$04$0CAAAA@@@$04@@6B@

??_7?$GenericTaskQueueSet@V?$GenericTaskQueue@VG1TaskQueueEntry@@$04$0CAAAA@@@$04@@6B@

??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@PEAVoopDesc@@$04$0CAAAA@@@$04@@6B@

??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@VObjArrayTask@@$04$0CAAA@@@$04@@6B@

??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@VObjArrayTask@@$04$0CAAAA@@@$04@@6B@

??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@VScannerTask@@$04$0CAAAA@@@$04@@6B@

??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@_K$04$0CAAAA@@@$04@@6B@

??_7?$JfrArtifactCallbackHost@PEBVClassLoaderData@@V?$ClearArtifact@PEBVClassLoaderData@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVClassLoaderData@@V?$CompositeFunctor@PEBVClassLoaderData@@V?$CompositeFunctor@PEBVClassLoaderData@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVClassLoaderData@@V?$LeakPredicate@PEBVClassLoaderData@@@@$1?write__classloader__leakp@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0KF@@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVClassLoaderData@@V?$SerializePredicate@PEBVClassLoaderData@@@@$1?write__classloader@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0KF@@@@@V?$ClearArtifact@PEBVClassLoaderData@@@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVClassLoaderData@@V?$CompositeFunctor@PEBVClassLoaderData@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVClassLoaderData@@V?$SerializePredicate@PEBVClassLoaderData@@@@$1?write__classloader@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0KF@@@V?$ClearArtifact@PEBVClassLoaderData@@@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVKlass@@V?$CompositeFunctor@PEBVKlass@@V?$CompositeFunctor@PEBVKlass@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVKlass@@V?$LeakPredicate@PEBVKlass@@@@$1?write__klass__leakp@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0KE@@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVKlass@@V?$SerializePredicate@PEBVKlass@@@@$1?write__klass@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0KE@@@@@VKlassArtifactRegistrator@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVKlass@@V?$CompositeFunctor@PEBVKlass@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVKlass@@V?$SerializePredicate@PEBVKlass@@@@$1?write__klass@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0KE@@@VKlassArtifactRegistrator@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVKlass@@VKlassArtifactRegistrator@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVModuleEntry@@V?$ClearArtifact@PEBVModuleEntry@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVModuleEntry@@V?$CompositeFunctor@PEBVModuleEntry@@V?$CompositeFunctor@PEBVModuleEntry@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVModuleEntry@@V?$LeakPredicate@PEBVModuleEntry@@@@$1?write__module__leakp@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0LI@@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVModuleEntry@@V?$SerializePredicate@PEBVModuleEntry@@@@$1?write__module@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0LI@@@@@V?$ClearArtifact@PEBVModuleEntry@@@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVModuleEntry@@V?$CompositeFunctor@PEBVModuleEntry@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVModuleEntry@@V?$SerializePredicate@PEBVModuleEntry@@@@$1?write__module@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0LI@@@V?$ClearArtifact@PEBVModuleEntry@@@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVPackageEntry@@V?$ClearArtifact@PEBVPackageEntry@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVPackageEntry@@V?$CompositeFunctor@PEBVPackageEntry@@V?$CompositeFunctor@PEBVPackageEntry@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVPackageEntry@@V?$LeakPredicate@PEBVPackageEntry@@@@$1?write__package__leakp@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0LJ@@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVPackageEntry@@V?$SerializePredicate@PEBVPackageEntry@@@@$1?write__package@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0LJ@@@@@V?$ClearArtifact@PEBVPackageEntry@@@@@@@@6B@

??_7?$JfrArtifactCallbackHost@PEBVPackageEntry@@V?$CompositeFunctor@PEBVPackageEntry@@V?$JfrTypeWriterHost@V?$JfrPredicatedTypeWriterImplHost@PEBVPackageEntry@@V?$SerializePredicate@PEBVPackageEntry@@@@$1?write__package@@YAHPEAVJfrCheckpointWriter@@PEBX@Z@@$0LJ@@@V?$ClearArtifact@PEBVPackageEntry@@@@@@@@6B@

??_7?$JfrVMOperation@VJfrRecorderService@@$1?safepoint_clear@1@AEAAXXZ@@6B@

??_7?$JfrVMOperation@VJfrRecorderService@@$1?safepoint_write@1@AEAAXXZ@@6B@

??_7?$LinkedList@VAsyncLogMessage@@@@6B@

??_7?$LinkedList@VCommittedMemoryRegion@@@@6B@

??_7?$LinkedList@VMallocSite@@@@6B@

??_7?$LinkedList@VReservedMemoryRegion@@@@6B@

??_7?$LinkedList@VSimpleThreadStackSite@@@@6B@

??_7?$LinkedList@VVirtualMemoryAllocationSite@@@@6B@

??_7?$LinkedListDeque@VAsyncLogMessage@@$0BA@@@6B@

??_7?$LinkedListImpl@VAsyncLogMessage@@$01$0BA@$00@@6B@

??_7?$LinkedListImpl@VCommittedMemoryRegion@@$01$0L@$00@@6B@

??_7?$LinkedListImpl@VMallocSite@@$01$0L@$00@@6B@

??_7?$LinkedListImpl@VReservedMemoryRegion@@$01$0L@$00@@6B@

??_7?$LinkedListImpl@VSimpleThreadStackSite@@$01$0L@$00@@6B@

??_7?$LinkedListImpl@VVirtualMemoryAllocationSite@@$01$0L@$00@@6B@

??_7?$LogMessageImpl@$0DI@$0CF@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogMessageImpl@$0DI@$0IC@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogMessageImpl@$0DI@$0IO@$0CF@$0A@$0A@$0A@@@6B@

??_7?$LogMessageImpl@$0N@$0A@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogMessageImpl@$0N@$0CN@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogMessageImpl@$0P@$0EA@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$00$0FA@$0A@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$00$0HA@$0P@$0CC@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$00$0IH@$0A@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$00$0N@$0EE@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$01$0CL@$0CO@$0CH@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$01$0EM@$0BF@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$01$0EM@$0DC@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$01$0FA@$0A@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$02$0FA@$0A@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$02$0N@$0EE@$0A@$0A@$0A@$0A@@@6B@

??_7?$LogStreamTemplate@$04$0CL@$0JM@$0A@$0A@$0A@$0A@@@6B@

??_7?$MSOPointerArrayRef@V?$Array@E@@@MetaspaceClosure@@6B@

??_7?$MSOPointerArrayRef@VInstanceKlass@@@MetaspaceClosure@@6B@

??_7?$MSOPointerArrayRef@VKlass@@@MetaspaceClosure@@6B@

??_7?$MSOPointerArrayRef@VMethod@@@MetaspaceClosure@@6B@

??_7?$MSOPointerArrayRef@VRecordComponent@@@MetaspaceClosure@@6B@

??_7?$MSORef@VAnnotations@@@MetaspaceClosure@@6B@

??_7?$MSORef@VConstMethod@@@MetaspaceClosure@@6B@

??_7?$MSORef@VConstantPool@@@MetaspaceClosure@@6B@

??_7?$MSORef@VConstantPoolCache@@@MetaspaceClosure@@6B@

??_7?$MSORef@VInstanceKlass@@@MetaspaceClosure@@6B@

??_7?$MSORef@VKlass@@@MetaspaceClosure@@6B@

??_7?$MSORef@VMethod@@@MetaspaceClosure@@6B@

??_7?$MSORef@VMethodCounters@@@MetaspaceClosure@@6B@

??_7?$MSORef@VMethodData@@@MetaspaceClosure@@6B@

??_7?$MSORef@VRecordComponent@@@MetaspaceClosure@@6B@

??_7?$MSORef@VSymbol@@@MetaspaceClosure@@6B@

??_7?$OtherArrayRef@D@MetaspaceClosure@@6B@

??_7?$OtherArrayRef@E@MetaspaceClosure@@6B@

??_7?$OtherArrayRef@G@MetaspaceClosure@@6B@

??_7?$OtherArrayRef@H@MetaspaceClosure@@6B@

??_7?$OtherArrayRef@_K@MetaspaceClosure@@6B@

??_7?$PSRootsClosure@$00@@6B@

??_7?$PSRootsClosure@$0A@@@6B@

??_7?$PointerRemarker@$00@@6B@

??_7?$PointerRemarker@$0A@@@6B@

??_7?$RelocateBufferToRequested@$00@@6B@

??_7?$RelocateBufferToRequested@$0A@@@6B@

??_7?$RootSetClosure@VBFSClosure@@@@6B@

??_7?$RootSetClosure@VDFSClosure@@@@6B@

??_7?$SimpleBufferWithFallback@D$0BAE@$0CAAA@@@6B@

??_7?$SimpleBufferWithFallback@D$0EBA@$0EBAA@@@6B@

??_7?$SimpleBufferWithFallback@E$0KA@$0ECA@@@6B@

??_7?$SimpleBufferWithFallback@PEAUHINSTANCE__@@$0DA@$0CAA@@@6B@

??_7?$SortedLinkedList@VCommittedMemoryRegion@@$1?compare_committed_region@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VMallocSite@@$1?compare_malloc_site@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VMallocSite@@$1?compare_malloc_site_and_type@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VMallocSite@@$1?compare_malloc_size@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VReservedMemoryRegion@@$1?compare_reserved_region_base@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VReservedMemoryRegion@@$1?compare_virtual_memory_base@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VSimpleThreadStackSite@@$1?compare_thread_stack_base@ThreadStackTracker@@CAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VVirtualMemoryAllocationSite@@$1?compare_allocation_site@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VVirtualMemoryAllocationSite@@$1?compare_virtual_memory_site@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$SortedLinkedList@VVirtualMemoryAllocationSite@@$1?compare_virtual_memory_size@@YAHAEBV1@0@Z$01$0L@$00@@6B@

??_7?$Stack@PEAVKlass@@$04@@6B@

??_7?$Stack@PEAVKlassInfoEntry@@$00@@6B@

??_7?$Stack@PEAV_jclass@@$07@@6B@

??_7?$Stack@PEAVoopDesc@@$04@@6B@

??_7?$Stack@VObjArrayTask@@$04@@6B@

??_7?$Stack@VOopAndMarkWord@PreservedMarks@@$04@@6B@

??_7?$Stack@VScannerTask@@$04@@6B@

??_7?$Stack@VmarkWord@@$04@@6B@

??_7?$Stack@_K$04@@6B@

??_7?$TaskQueueSetSuperImpl@$04@@6B@

??_7?$ZHeapIteratorOopClosure@$00@@6B@

??_7?$ZHeapIteratorOopClosure@$0A@@@6B@

??_7?$ZHeapIteratorRootOopClosure@$00@@6B@

??_7?$ZHeapIteratorRootOopClosure@$0A@@@6B@

??_7?$ZMarkBarrierOopClosure@$00@@6B@

??_7?$ZMarkBarrierOopClosure@$0A@@@6B@

??_7?$ZPageDebugMapOrUnmapClosure@$00@@6B@

??_7?$ZPageDebugMapOrUnmapClosure@$0A@@@6B@

??_7?$ZRelocateClosure@VZRelocateMediumAllocator@@@@6B@

??_7?$ZRelocateClosure@VZRelocateSmallAllocator@@@@6B@

??_7AbsDNode@@6B@

??_7AbsFNode@@6B@

??_7AbsINode@@6B@

??_7AbsLNode@@6B@

??_7AbsNode@@6B@

??_7AbsSeq@@6B@

??_7AbsVBNode@@6B@

??_7AbsVDNode@@6B@

??_7AbsVFNode@@6B@

??_7AbsVINode@@6B@

??_7AbsVLNode@@6B@

??_7AbsVSNode@@6B@

??_7AbstractAssembler@@6B@

??_7AbstractClassHierarchyWalker@@6B@

??_7AbstractCompiler@@6B@

??_7AbstractCompressor@@6B@

??_7AbstractGangTask@@6B@

??_7AbstractLockNode@@6B@

??_7AbstractWriter@@6B@

??_7AccessArray@@6B@

??_7AccessField@@6B@

??_7AccessIndexed@@6B@

??_7AccessMonitor@@6B@

??_7AdapterBlob@@6B@

??_7AdaptiveSizePolicy@@6B@

??_7AdaptiveSizePolicySpaceOverheadTester@@6B@

??_7AdaptiveSizePolicyTimeOverheadTester@@6B@

??_7AddDNode@@6B@

??_7AddFNode@@6B@

??_7AddINode@@6B@

??_7AddLNode@@6B@

??_7AddNode@@6B@

??_7AddPNode@@6B@

??_7AddReductionVDNode@@6B@

??_7AddReductionVFNode@@6B@

??_7AddReductionVINode@@6B@

??_7AddReductionVLNode@@6B@

??_7AddThreadHazardPointerThreadClosure@@6B@

??_7AddVBNode@@6B@

??_7AddVDNode@@6B@

??_7AddVFNode@@6B@

??_7AddVINode@@6B@

??_7AddVLNode@@6B@

??_7AddVSNode@@6B@

??_7AddressConstant@@6B@

??_7AddressType@@6B@

??_7AdjustAndCleanMetadata@VM_RedefineClasses@@6B@

??_7AdjustPointerClosure@@6B@

??_7AdjustPointersClosure@@6B@

??_7AllClassesFinder@KlassInfoTable@@6B@

??_7AllRootsClosures@@6B@

??_7AllocateArrayNode@@6B@

??_7AllocateNode@@6B@

??_7AlwaysClearPolicy@@6B@

??_7AlwaysTrueClosure@@6B@

??_7AndINode@@6B@

??_7AndLNode@@6B@

??_7AndReductionVNode@@6B@

??_7AndVNode@@6B@

??_7ArchiveBuilder@@6B@

??_7ArchivePtrBitmapCleaner@@6B@

??_7ArchiveRegionSetChecker@@6B@

??_7ArgInfoData@@6B@

??_7ArithmeticOp@@6B@

??_7ArrayConstant@@6B@

??_7ArrayCopyNode@@6B@

??_7ArrayCopyStub@@6B@

??_7ArrayData@@6B@

??_7ArrayKlass@@6B@

??_7ArrayLength@@6B@

??_7ArrayStoreExceptionStub@@6B@

??_7ArrayType@@6B@

??_7AryEqNode@@6B@

??_7Assembler@@6B@

??_7AsyncHandshakeClosure@@6B@

??_7AsyncHandshakeOperation@@6B@

??_7AsyncLogWriter@@6B@

??_7AttachOperation@@6B@

??_7AutoBoxObjectValue@@6B@

??_7BFSClosure@@6B@

??_7BarrierSet@@6B@

??_7BarrierSetAssembler@@6B@

??_7BarrierSetC1@@6B@

??_7BarrierSetC2@@6B@

??_7BarrierSetNMethod@@6B@

??_7Base@@6B@

??_7BaseCountedLoopEndNode@@6B@

??_7BaseCountedLoopNode@@6B@

??_7BaseFrameStream@@6B@

??_7BasicOopIterateClosure@@6B@

??_7BinaryNode@@6B@

??_7BitData@@6B@

??_7BitMapClosure@@6B@

??_7BlackholeNode@@6B@

??_7Block@@6B@

??_7BlockBegin@@6B@

??_7BlockClosure@@6B@

??_7BlockEnd@@6B@

??_7BlockMerger@@6B@

??_7BlockOffsetArray@@6B@

??_7BlockOffsetArrayContigSpace@@6B@

??_7BlockOffsetTable@@6B@

??_7BoolNode@@6B@

??_7BoolObjectClosure@@6B@

??_7BoxLockNode@@6B@

??_7BranchData@@6B@

??_7BufferBlob@@6B@

??_7BytecodeClosure@@6B@

??_7BytecodeConstant@@6B@

??_7BytecodePrinter@@6B@

??_7C1G1PostBarrierCodeGenClosure@@6B@

??_7C1G1PreBarrierCodeGenClosure@@6B@

??_7C1SafepointPollStub@@6B@

??_7C1_MacroAssembler@@6B@

??_7C2Access@@6B@

??_7C2AtomicParseAccess@@6B@

??_7C2Compiler@@6B@

??_7C2OptAccess@@6B@

??_7C2ParseAccess@@6B@

??_7C2_MacroAssembler@@6B@

??_7CE_Eliminator@@6B@

??_7CFGElement@@6B@

??_7CFGLoop@@6B@

??_7CLDCallback@@6B@

??_7CLDClaimStateClosure@@6B@

??_7CLDClosure@@6B@

??_7CLDScanClosure@@6B@

??_7CLDToOopClosure@@6B@

??_7CMCleanup@@6B@

??_7CMRemark@@6B@

??_7CMoveDNode@@6B@

??_7CMoveFNode@@6B@

??_7CMoveINode@@6B@

??_7CMoveLNode@@6B@

??_7CMoveNNode@@6B@

??_7CMoveNode@@6B@

??_7CMovePNode@@6B@

??_7CMoveVDNode@@6B@

??_7CMoveVFNode@@6B@

??_7CProjNode@@6B@

??_7CacheWBNode@@6B@

??_7CacheWBPostSyncNode@@6B@

??_7CacheWBPreSyncNode@@6B@

??_7CallDynamicJavaDirectNode@@6B@

??_7CallDynamicJavaNode@@6B@

??_7CallGenerator@@6B@

??_7CallJavaNode@@6B@

??_7CallLeafDirectNode@@6B@

??_7CallLeafDirectVectorNode@@6B@

??_7CallLeafNoFPDirectNode@@6B@

??_7CallLeafNoFPNode@@6B@

??_7CallLeafNode@@6B@

??_7CallLeafVectorNode@@6B@

??_7CallNativeDirectNode@@6B@

??_7CallNativeNode@@6B@

??_7CallNode@@6B@

??_7CallRelocation@@6B@

??_7CallRuntimeDirectNode@@6B@

??_7CallRuntimeNode@@6B@

??_7CallSiteDepChange@@6B@

??_7CallStaticJavaDirectNode@@6B@

??_7CallStaticJavaNode@@6B@

??_7CallTypeData@@6B@

??_7Canonicalizer@@6B@

??_7CardGeneration@@6B@

??_7CardTable@@6B@

??_7CardTableBarrierSet@@6B@

??_7CardTableBarrierSetAssembler@@6B@

??_7CardTableBarrierSetC1@@6B@

??_7CardTableBarrierSetC2@@6B@

??_7CardTableRS@@6B@

??_7CastDDNode@@6B@

??_7CastFFNode@@6B@

??_7CastIINode@@6B@

??_7CastLLNode@@6B@

??_7CastP2XNode@@6B@

??_7CastPPNode@@6B@

??_7CastVVNode@@6B@

??_7CastX2PNode@@6B@

??_7CatchNode@@6B@

??_7CatchProjNode@@6B@

??_7ChangeItem@@6B@

??_7ChangeJumpWiden@@6B@

??_7ChangeSwitchPad@@6B@

??_7ChangeWiden@@6B@

??_7CheckCast@@6B@

??_7CheckCastPPNode@@6B@

??_7CheckClass@VM_RedefineClasses@@6B@

??_7CheckForPreciseMarks@@6B@

??_7CheckForUnmarkedObjects@@6B@

??_7CheckForUnmarkedOops@@6B@

??_7ChunkPoolCleaner@@6B@

??_7ClaimMetadataVisitingOopIterateClosure@@6B@

??_7ClassAllocator@@6B@

??_7ClassConstant@@6B@

??_7ClassFileStream@@6B@

??_7ClassHierarchyDCmd@@6B@

??_7ClassHistogramDCmd@@6B@

??_7ClassLoaderHierarchyDCmd@@6B@

??_7ClassLoaderHierarchyVMOperation@@6B@

??_7ClassLoaderStatsClosure@@6B@

??_7ClassLoaderStatsDCmd@@6B@

??_7ClassLoaderStatsVMOperation@@6B@

??_7ClassPathDirEntry@@6B@

??_7ClassPathEntry@@6B@

??_7ClassPathImageEntry@@6B@

??_7ClassPathZipEntry@@6B@

??_7ClassStatsClosure@@6B@

??_7ClassType@@6B@

??_7CleanExtraDataClosure@@6B@

??_7CleanExtraDataKlassClosure@@6B@

??_7CleanExtraDataMethodClosure@@6B@

??_7CleanProtectionDomainEntries@@6B@

??_7Cleaner@Table@StringDedup@@6B@

??_7CleanupState@Table@StringDedup@@6B@

??_7ClearArrayNode@@6B@

??_7ClearNoncleanCardWrapper@@6B@

??_7CloseScopedMemoryClosure@@6B@

??_7CloseScopedMemoryFindOopClosure@@6B@

??_7ClosureIsUnloadingBehaviour@@6B@

??_7CmpD3Node@@6B@

??_7CmpDNode@@6B@

??_7CmpF3Node@@6B@

??_7CmpFNode@@6B@

??_7CmpINode@@6B@

??_7CmpL3Node@@6B@

??_7CmpLNode@@6B@

??_7CmpLTMaskNode@@6B@

??_7CmpNNode@@6B@

??_7CmpNode@@6B@

??_7CmpPNode@@6B@

??_7CmpULNode@@6B@

??_7CmpUNode@@6B@

??_7CodeBlob@@6B@

??_7CodeBlobClosure@@6B@

??_7CodeBlobToNMethodClosure@@6B@

??_7CodeBlobToOopClosure@@6B@

??_7CodeBlobTypeConstant@@6B@

??_7CodeCacheDCmd@@6B@

??_7CodeCacheSweeperThread@@6B@

??_7CodeHeap@@6B@

??_7CodeHeapAnalyticsDCmd@@6B@

??_7CodeHeapPool@@6B@

??_7CodeListDCmd@@6B@

??_7CodeStub@@6B@

??_7CollectCLDClosure@@6B@

??_7CollectedHeap@@6B@

??_7CollectedMemoryPool@@6B@

??_7CommandLineDCmd@@6B@

??_7CompactStringsFixup@@6B@

??_7CompactibleSpace@@6B@

??_7CompareAndExchangeBNode@@6B@

??_7CompareAndExchangeINode@@6B@

??_7CompareAndExchangeLNode@@6B@

??_7CompareAndExchangeNNode@@6B@

??_7CompareAndExchangeNode@@6B@

??_7CompareAndExchangePNode@@6B@

??_7CompareAndExchangeSNode@@6B@

??_7CompareAndSwapBNode@@6B@

??_7CompareAndSwapINode@@6B@

??_7CompareAndSwapLNode@@6B@

??_7CompareAndSwapNNode@@6B@

??_7CompareAndSwapNode@@6B@

??_7CompareAndSwapPNode@@6B@

??_7CompareAndSwapSNode@@6B@

??_7CompareOp@@6B@

??_7CompilationLog@@6B@

??_7CompileLog@@6B@

??_7CompileQueueDCmd@@6B@

??_7CompiledArgumentOopFinder@@6B@

??_7CompiledDirectStaticCall@@6B@

??_7CompiledICProtectionBehaviour@@6B@

??_7CompiledMethod@@6B@

??_7CompiledStaticCall@@6B@

??_7Compiler@@6B@

??_7CompilerDirectivesAddDCmd@@6B@

??_7CompilerDirectivesClearDCmd@@6B@

??_7CompilerDirectivesPrintDCmd@@6B@

??_7CompilerDirectivesRemoveDCmd@@6B@

??_7CompilerPhaseTypeConstant@@6B@

??_7CompilerThread@@6B@

??_7CompilerTypeConstant@@6B@

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 376KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/splashscreen.dll

.dll windows:6 windows x64

c4ffcc393894fd42eac46bcd5eb96b47

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

18:66:c7:57:67:c1:c5:7f:1f:f2:ac:96:bf:15:ec:7d:a7:93:c4:7e:59:24:33:89:47:f6:b5:cc:b0:e3:de:b5
Signer

Actual PE Digest

18:66:c7:57:67:c1:c5:7f:1f:f2:ac:96:bf:15:ec:7d:a7:93:c4:7e:59:24:33:89:47:f6:b5:cc:b0:e3:de:b5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent

GetProcAddress

MultiByteToWideChar

GetModuleHandleA

GetTickCount

CreateThread

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSection

ExitProcess

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

IsProcessorFeaturePresent

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

LoadLibraryExA

GetModuleHandleW

FreeLibrary

VirtualQuery

VirtualProtect

GetSystemInfo

GetLastError

RaiseException

gdi32

CreatePalette

CreateDIBSection

StretchDIBits

SelectPalette

SelectObject

RealizePalette

GetDeviceCaps

ExtCreateRegion

DeleteObject

DeleteDC

CombineRgn

CreateCompatibleDC

CreateRectRgn

java

JDK_LoadSystemLibrary

vcruntime140

__intrinsic_setjmp

memcpy

memset

memcmp

longjmp

__C_specific_handler

strrchr

__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

calloc

realloc

free

malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

fread

ungetc

fgetc

__acrt_iob_func

__stdio_common_vfprintf

fopen

fclose

__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

_strdup

strcpy

strlen

strncmp

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-runtime-l1-1-0

_cexit

_initterm

_initialize_onexit_table

_initterm_e

_execute_onexit_table

_initialize_narrow_environment

_seh_filter_dll

_errno

_configure_narrow_argv

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

pow

floor

Exports

JNI_OnLoad

Java_java_awt_SplashScreen__1close

Java_java_awt_SplashScreen__1getBounds

Java_java_awt_SplashScreen__1getImageFileName

Java_java_awt_SplashScreen__1getImageJarName

Java_java_awt_SplashScreen__1getInstance

Java_java_awt_SplashScreen__1getScaleFactor

Java_java_awt_SplashScreen__1isVisible

Java_java_awt_SplashScreen__1setImageData

Java_java_awt_SplashScreen__1update

SplashClose

SplashGetScaledImageName

SplashGetScaledImgNameMaxPstfixLen

SplashInit

SplashLoadFile

SplashLoadMemory

SplashSetFileJarName

SplashSetScaleFactor

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/ucrtbase.dll

.dll windows:10 windows x64

405cde0fc80c30dcc3d783173dbd4143

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:29

Not After

03-03-2021 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e2:09:1a:39:a5:c3:fd:37:30:89:d0:08:0c:5b:0e:eb:cd:6b:70:a1:0d:10:93:83:62:ff:4e:94:0a:b2:4f:61
Signer

Actual PE Digest

e2:09:1a:39:a5:c3:fd:37:30:89:d0:08:0c:5b:0e:eb:cd:6b:70:a1:0d:10:93:83:62:ff:4e:94:0a:b2:4f:61

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RaiseException

SetLastError

SetErrorMode

GetLastError

api-ms-win-core-heap-l1-1-0

HeapWalk

HeapValidate

HeapFree

HeapCompact

HeapReAlloc

HeapQueryInformation

GetProcessHeap

HeapAlloc

HeapSize

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetStartupInfoW

GetCurrentProcess

TlsAlloc

GetCurrentThread

TlsGetValue

GetCurrentThreadId

CreateProcessW

TlsSetValue

ExitProcess

ExitThread

CreateThread

TlsFree

GetExitCodeProcess

ResumeThread

TerminateProcess

api-ms-win-core-libraryloader-l1-1-0

FreeLibrary

LoadLibraryExW

GetModuleHandleExW

FreeLibraryAndExitThread

GetModuleHandleW

GetProcAddress

GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSectionAndSpinCount

WaitForSingleObject

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW

SetStdHandle

GetCommandLineA

GetCurrentDirectoryW

GetStdHandle

SetEnvironmentVariableW

GetEnvironmentStringsW

SetCurrentDirectoryW

FreeEnvironmentStringsW

api-ms-win-core-file-l1-1-0

ReadFile

GetFileSizeEx

GetFileType

SetFilePointerEx

CreateFileW

FindClose

FindNextFileW

FindFirstFileExW

GetFileInformationByHandle

GetFullPathNameW

GetDriveTypeW

GetFileAttributesExW

GetDiskFreeSpaceW

GetLogicalDrives

SetFileAttributesW

SetFileTime

CreateDirectoryW

LockFileEx

UnlockFileEx

FlushFileBuffers

SetEndOfFile

DeleteFileW

WriteFile

RemoveDirectoryW

api-ms-win-core-string-l1-1-0

CompareStringW

MultiByteToWideChar

WideCharToMultiByte

GetStringTypeW

api-ms-win-core-localization-l1-2-0

GetOEMCP

EnumSystemLocalesW

IsValidCodePage

GetACP

GetCPInfo

IsValidLocale

GetUserDefaultLCID

GetLocaleInfoW

LCMapStringW

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW

GetDateFormatW

api-ms-win-core-sysinfo-l1-1-0

SetLocalTime

GetSystemTimeAsFileTime

GetLocalTime

GetSystemInfo

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlUnwindEx

RtlPcToFileHeader

RtlUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-console-l1-1-0

PeekConsoleInputA

GetConsoleMode

GetConsoleCP

SetConsoleCtrlHandler

WriteConsoleW

GetConsoleOutputCP

GetNumberOfConsoleInputEvents

ReadConsoleW

ReadConsoleInputW

SetConsoleMode

api-ms-win-core-handle-l1-1-0

CloseHandle

DuplicateHandle

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe

CreatePipe

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

TzSpecificLocalTimeToSystemTime

GetTimeZoneInformation

FileTimeToSystemTime

SystemTimeToTzSpecificLocalTime

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

QueryPerformanceFrequency

api-ms-win-core-memory-l1-1-0

VirtualQuery

VirtualAlloc

VirtualProtect

api-ms-win-core-util-l1-1-0

Beep

EncodePointer

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList

InterlockedPushEntrySList

Exports

_Cbuild

_Cmulcc

_Cmulcr

_CreateFrameInfo

_CxxThrowException

_Exit

_FCbuild

_FCmulcc

_FCmulcr

_FindAndUnlinkFrame

_GetImageBase

_GetThrowImageBase

_Getdays

_Getmonths

_Gettnames

_IsExceptionObjectToBeDestroyed

_LCbuild

_LCmulcc

_LCmulcr

_SetImageBase

_SetThrowImageBase

_SetWinRTOutOfMemoryExceptionCallback

_Strftime

_W_Getdays

_W_Getmonths

_W_Gettnames

_Wcsftime

__AdjustPointer

__BuildCatchObject

__BuildCatchObjectHelper

__C_specific_handler

__C_specific_handler_noexcept

__CxxDetectRethrow

__CxxExceptionFilter

__CxxFrameHandler

__CxxFrameHandler2

__CxxFrameHandler3

__CxxFrameHandler4

__CxxQueryExceptionSize

__CxxRegisterExceptionObject

__CxxUnregisterExceptionObject

__DestructExceptionObject

__FrameUnwindFilter

__GetPlatformExceptionInfo

__NLG_Dispatch2

__NLG_Return2

__RTCastToVoid

__RTDynamicCast

__RTtypeid

__TypeMatch

___lc_codepage_func

___lc_collate_cp_func

___lc_locale_name_func

___mb_cur_max_func

___mb_cur_max_l_func

__acrt_iob_func

__conio_common_vcprintf

__conio_common_vcprintf_p

__conio_common_vcprintf_s

__conio_common_vcscanf

__conio_common_vcwprintf

__conio_common_vcwprintf_p

__conio_common_vcwprintf_s

__conio_common_vcwscanf

__current_exception

__current_exception_context

__daylight

__dcrt_get_wide_environment_from_os

__dcrt_initial_narrow_environment

__doserrno

__dstbias

__fpe_flt_rounds

__fpecode

__initialize_lconv_for_unsigned_char

__intrinsic_setjmp

__intrinsic_setjmpex

__isascii

__iscsym

__iscsymf

__iswcsym

__iswcsymf

__p___argc

__p___argv

__p___wargv

__p__acmdln

__p__commode

__p__environ

__p__fmode

__p__mbcasemap

__p__mbctype

__p__pgmptr

__p__wcmdln

__p__wenviron

__p__wpgmptr

__pctype_func

__processing_throw

__pwctype_func

__pxcptinfoptrs

__report_gsfailure

__setusermatherr

__std_exception_copy

__std_exception_destroy

__std_terminate

__std_type_info_compare

__std_type_info_destroy_list

__std_type_info_hash

__std_type_info_name

__stdio_common_vfprintf

__stdio_common_vfprintf_p

__stdio_common_vfprintf_s

__stdio_common_vfscanf

__stdio_common_vfwprintf

__stdio_common_vfwprintf_p

__stdio_common_vfwprintf_s

__stdio_common_vfwscanf

__stdio_common_vsnprintf_s

__stdio_common_vsnwprintf_s

__stdio_common_vsprintf

__stdio_common_vsprintf_p

__stdio_common_vsprintf_s

__stdio_common_vsscanf

__stdio_common_vswprintf

__stdio_common_vswprintf_p

__stdio_common_vswprintf_s

__stdio_common_vswscanf

__strncnt

__sys_errlist

__sys_nerr

__threadhandle

__threadid

__timezone

__toascii

__tzname

__unDName

__unDNameEx

__uncaught_exception

__uncaught_exceptions

__wcserror

__wcserror_s

__wcsncnt

_abs64

_access

_access_s

_aligned_free

_aligned_malloc

_aligned_msize

_aligned_offset_malloc

_aligned_offset_realloc

_aligned_offset_recalloc

_aligned_realloc

_aligned_recalloc

_assert

_atodbl

_atodbl_l

_atof_l

_atoflt

_atoflt_l

_atoi64

_atoi64_l

_atoi_l

_atol_l

_atoldbl

_atoldbl_l

_atoll_l

_beep

_beginthread

_beginthreadex

_byteswap_uint64

_byteswap_ulong

_byteswap_ushort

_c_exit

_cabs

_callnewh

_calloc_base

_cexit

_cgets

_cgets_s

_cgetws

_cgetws_s

_chdir

_chdrive

_chgsign

_chgsignf

_chmod

_chsize

_chsize_s

_clearfp

_close

_commit

_configthreadlocale

_configure_narrow_argv

_configure_wide_argv

_control87

_controlfp

_controlfp_s

_copysign

_copysignf

_cputs

_cputws

_creat

_create_locale

_crt_at_quick_exit

_crt_atexit

_ctime32

_ctime32_s

_ctime64

_ctime64_s

_cwait

_d_int

_dclass

_dexp

_difftime32

_difftime64

_dlog

_dnorm

_dpcomp

_dpoly

_dscale

_dsign

_dsin

_dtest

_dunscale

_dup

_dup2

_dupenv_s

_ecvt

_ecvt_s

_endthread

_endthreadex

_eof

_errno

_except1

_execl

_execle

_execlp

_execlpe

_execute_onexit_table

_execv

_execve

_execvp

_execvpe

_exit

_expand

_fclose_nolock

_fcloseall

_fcvt

_fcvt_s

_fd_int

_fdclass

_fdexp

_fdlog

_fdnorm

_fdopen

_fdpcomp

_fdpoly

_fdscale

_fdsign

_fdsin

_fdtest

_fdunscale

_fflush_nolock

_fgetc_nolock

_fgetchar

_fgetwc_nolock

_fgetwchar

_filelength

_filelengthi64

_fileno

_findclose

_findfirst32

_findfirst32i64

_findfirst64

_findfirst64i32

_findnext32

_findnext32i64

_findnext64

_findnext64i32

_finite

_finitef

_flushall

_fpclass

_fpclassf

_fpieee_flt

_fpreset

_fputc_nolock

_fputchar

_fputwc_nolock

_fputwchar

_fread_nolock

_fread_nolock_s

_free_base

_free_locale

_fseek_nolock

_fseeki64

_fseeki64_nolock

_fsopen

_fstat32

_fstat32i64

_fstat64

_fstat64i32

_ftell_nolock

_ftelli64

_ftelli64_nolock

_ftime32

_ftime32_s

_ftime64

_ftime64_s

_fullpath

_futime32

_futime64

_fwrite_nolock

_gcvt

_gcvt_s

_get_FMA3_enable

_get_current_locale

_get_daylight

_get_doserrno

_get_dstbias

_get_errno

_get_fmode

_get_heap_handle

_get_initial_narrow_environment

_get_initial_wide_environment

_get_invalid_parameter_handler

_get_narrow_winmain_command_line

_get_osfhandle

_get_pgmptr

_get_printf_count_output

_get_purecall_handler

_get_stream_buffer_pointers

_get_terminate

_get_thread_local_invalid_parameter_handler

_get_timezone

_get_tzname

_get_unexpected

_get_wide_winmain_command_line

_get_wpgmptr

_getc_nolock

_getch

_getch_nolock

_getche

_getche_nolock

_getcwd

_getdcwd

_getdiskfree

_getdllprocaddr

_getdrive

_getdrives

_getmaxstdio

_getmbcp

_getpid

_getsystime

_getw

_getwc_nolock

_getwch

_getwch_nolock

_getwche

_getwche_nolock

_getws

_getws_s

_gmtime32

_gmtime32_s

_gmtime64

_gmtime64_s

_heapchk

_heapmin

_heapwalk

_hypot

_hypotf

_i64toa

_i64toa_s

_i64tow

_i64tow_s

_initialize_narrow_environment

_initialize_onexit_table

_initialize_wide_environment

_initterm

_initterm_e

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

_invoke_watson

_is_exception_typeof

_isalnum_l

_isalpha_l

_isatty

_isblank_l

_iscntrl_l

_isctype

_isctype_l

_isdigit_l

_isgraph_l

_isleadbyte_l

_islower_l

_ismbbalnum

_ismbbalnum_l

_ismbbalpha

_ismbbalpha_l

_ismbbblank

_ismbbblank_l

_ismbbgraph

_ismbbgraph_l

_ismbbkalnum

_ismbbkalnum_l

_ismbbkana

_ismbbkana_l

_ismbbkprint

_ismbbkprint_l

_ismbbkpunct

_ismbbkpunct_l

_ismbblead

_ismbblead_l

_ismbbprint

_ismbbprint_l

_ismbbpunct

_ismbbpunct_l

_ismbbtrail

_ismbbtrail_l

_ismbcalnum

_ismbcalnum_l

_ismbcalpha

_ismbcalpha_l

_ismbcblank

_ismbcblank_l

_ismbcdigit

_ismbcdigit_l

_ismbcgraph

_ismbcgraph_l

_ismbchira

_ismbchira_l

_ismbckata

_ismbckata_l

_ismbcl0

_ismbcl0_l

_ismbcl1

_ismbcl1_l

_ismbcl2

_ismbcl2_l

_ismbclegal

_ismbclegal_l

_ismbclower

_ismbclower_l

_ismbcprint

_ismbcprint_l

_ismbcpunct

_ismbcpunct_l

_ismbcspace

_ismbcspace_l

_ismbcsymbol

_ismbcsymbol_l

_ismbcupper

_ismbcupper_l

_ismbslead

_ismbslead_l

_ismbstrail

_ismbstrail_l

_isnan

_isnanf

_isprint_l

_ispunct_l

_isspace_l

_isupper_l

_iswalnum_l

_iswalpha_l

_iswblank_l

_iswcntrl_l

_iswcsym_l

_iswcsymf_l

_iswctype_l

_iswdigit_l

_iswgraph_l

_iswlower_l

_iswprint_l

_iswpunct_l

_iswspace_l

_iswupper_l

_iswxdigit_l

_isxdigit_l

_itoa

_itoa_s

_itow

_itow_s

_j0

_j1

_jn

_kbhit

_ld_int

_ldclass

_ldexp

_ldlog

_ldpcomp

_ldpoly

_ldscale

_ldsign

_ldsin

_ldtest

_ldunscale

_lfind

_lfind_s

_loaddll

_local_unwind

Sections

.text
Size: 718KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/vcruntime140.dll

.dll windows:6 windows x64

7f07fd94e5bb907093556781cc464017

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

71:f4:6e:77:5c:30:41:e0:e3:df:bb:07:e1:63:9c:14:eb:d4:98:cc:e1:b1:43:ec:84:ef:f4:96:a1:85:dc:9f
Signer

Actual PE Digest

71:f4:6e:77:5c:30:41:e0:e3:df:bb:07:e1:63:9c:14:eb:d4:98:cc:e1:b1:43:ec:84:ef:f4:96:a1:85:dc:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

api-ms-win-crt-runtime-l1-1-0

terminate

abort

api-ms-win-crt-heap-l1-1-0

calloc

malloc

free

api-ms-win-crt-string-l1-1-0

strcpy_s

strncmp

wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

GetLastError

IsProcessorFeaturePresent

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlCaptureContext

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

RtlLookupFunctionEntry

RtlUnwindEx

GetModuleHandleW

GetModuleFileNameW

RtlUnwind

EncodePointer

RaiseException

RtlPcToFileHeader

InterlockedPushEntrySList

InterlockedFlushSList

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

GetProcAddress

SetLastError

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

FreeLibrary

LoadLibraryExW

Exports

_CreateFrameInfo

_CxxThrowException

_FindAndUnlinkFrame

_IsExceptionObjectToBeDestroyed

_SetWinRTOutOfMemoryExceptionCallback

__AdjustPointer

__BuildCatchObject

__BuildCatchObjectHelper

__C_specific_handler

__C_specific_handler_noexcept

__CxxDetectRethrow

__CxxExceptionFilter

__CxxFrameHandler

__CxxFrameHandler2

__CxxFrameHandler3

__CxxQueryExceptionSize

__CxxRegisterExceptionObject

__CxxUnregisterExceptionObject

__DestructExceptionObject

__FrameUnwindFilter

__GetPlatformExceptionInfo

__NLG_Dispatch2

__NLG_Return2

__RTCastToVoid

__RTDynamicCast

__RTtypeid

__TypeMatch

__current_exception

__current_exception_context

__intrinsic_setjmp

__intrinsic_setjmpex

__processing_throw

__report_gsfailure

__std_exception_copy

__std_exception_destroy

__std_terminate

__std_type_info_compare

__std_type_info_destroy_list

__std_type_info_hash

__std_type_info_name

__telemetry_main_invoke_trigger

__telemetry_main_return_trigger

__unDName

__unDNameEx

__uncaught_exception

__uncaught_exceptions

__vcrt_GetModuleFileNameW

__vcrt_GetModuleHandleW

__vcrt_InitializeCriticalSectionEx

__vcrt_LoadLibraryExW

_get_purecall_handler

_get_unexpected

_is_exception_typeof

_local_unwind

_purecall

_set_purecall_handler

_set_se_translator

longjmp

memchr

memcmp

memcpy

memmove

memset

set_unexpected

strchr

strrchr

strstr

unexpected

wcschr

wcsrchr

wcsstr

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/vcruntime140_1.dll

.dll windows:6 windows x64

bf380ca954cbf10d1a4cef9ec18e46fd

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

8f:95:bc:fb:dc:2b:c4:95:d5:fd:7c:f9:d4:ff:31:13:2d:a4:f9:f4:da:b2:c5:6d:d6:8a:a0:e3:a5:45:2a:3c
Signer

Actual PE Digest

8f:95:bc:fb:dc:2b:c4:95:d5:fd:7c:f9:d4:ff:31:13:2d:a4:f9:f4:da:b2:c5:6d:d6:8a:a0:e3:a5:45:2a:3c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

api-ms-win-crt-runtime-l1-1-0

terminate

abort

api-ms-win-crt-heap-l1-1-0

malloc

calloc

free

api-ms-win-crt-string-l1-1-0

strcpy_s

wcsncmp

vcruntime140

memcpy

__processing_throw

__C_specific_handler

memmove

__current_exception

kernel32

IsProcessorFeaturePresent

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlCaptureContext

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

RtlUnwindEx

RtlLookupFunctionEntry

LoadLibraryExW

GetProcAddress

FreeLibrary

TlsFree

TlsSetValue

TlsGetValue

TlsAlloc

EncodePointer

RaiseException

RtlPcToFileHeader

SetLastError

DeleteCriticalSection

GetLastError

InitializeCriticalSectionAndSpinCount

Exports

__CxxFrameHandler4

__NLG_Dispatch2

__NLG_Return2

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/verify.dll

.dll windows:6 windows x64

c1f1d5b524d8bd631ee62d2f0b359225

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

9f:90:17:04:1a:08:a7:bf:59:18:04:c4:aa:ea:d0:f6:81:cf:05:c6:d4:8a:08:4c:e7:ff:7e:0c:9a:20:7a:2b
Signer

Actual PE Digest

9f:90:17:04:1a:08:a7:bf:59:18:04:c4:aa:ea:d0:f6:81:cf:05:c6:d4:8a:08:4c:e7:ff:7e:0c:9a:20:7a:2b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

jvm

JVM_GetCPFieldModifiers

JVM_GetCPMethodClassNameUTF

JVM_GetCPFieldClassNameUTF

JVM_GetCPClassNameUTF

JVM_GetCPFieldSignatureUTF

JVM_GetCPMethodSignatureUTF

JVM_GetCPMethodNameUTF

JVM_GetMethodIxSignatureUTF

JVM_GetMethodIxNameUTF

JVM_IsVMGeneratedMethodIx

JVM_IsConstructorIx

JVM_GetMethodIxMaxStack

JVM_GetMethodIxArgsSize

JVM_GetMethodIxLocalsCount

JVM_ReleaseUTF

jio_vsnprintf

JVM_IsSameClassPackage

JVM_GetMethodIxModifiers

JVM_GetFieldIxModifiers

JVM_GetMethodIxExceptionTableLength

JVM_GetMethodIxExceptionTableEntry

JVM_GetMethodIxByteCodeLength

JVM_GetMethodIxByteCode

JVM_GetMethodIxExceptionsCount

JVM_GetMethodIxExceptionIndexes

JVM_GetClassMethodsCount

JVM_GetClassFieldsCount

JVM_GetClassCPEntriesCount

JVM_GetClassCPTypes

JVM_GetClassNameUTF

JVM_IsInterface

JVM_FindClassFromClass

JVM_GetCPMethodModifiers

jio_snprintf

kernel32

IsProcessorFeaturePresent

QueryPerformanceCounter

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

IsDebuggerPresent

GetCurrentProcessId

vcruntime140

__std_type_info_destroy_list

__C_specific_handler

__intrinsic_setjmp

longjmp

strchr

memset

memcpy

api-ms-win-crt-string-l1-1-0

strcpy

strlen

strcmp

api-ms-win-crt-heap-l1-1-0

malloc

calloc

free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initterm

_execute_onexit_table

_cexit

_initialize_onexit_table

_initterm_e

Exports

VerifyClassForMajorVersion

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/bin/zip.dll

.dll windows:6 windows x64

d5adf4feccf043ecd73630a5e1fa6ca6

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:8b:e2:f5:34:52:c8:82:f1:8e:d4:1a:5d:d4:e7:a3
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

19-08-2021 00:00

Not After

19-08-2023 23:59

Subject

CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4c:4e:a8:0d:bf:10:7b:2f:34:e7:86:9f:62:7b:f4:71:99:be:7a:ba:78:c5:ee:a8:18:ea:43:ef:5a:a9:eb:1d
Signer

Actual PE Digest

4c:4e:a8:0d:bf:10:7b:2f:34:e7:86:9f:62:7b:f4:71:99:be:7a:ba:78:c5:ee:a8:18:ea:43:ef:5a:a9:eb:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

jvm

JVM_RawMonitorExit

JVM_RawMonitorCreate

jio_fprintf

JVM_RawMonitorEnter

JVM_NativePath

JVM_RawMonitorDestroy

java

JNU_ThrowInternalError

JNU_ThrowIllegalArgumentException

JNU_ThrowOutOfMemoryError

getLastErrorString

getPrefixed

handleRead

handleLseek

JNU_ThrowByName

getErrorString

kernel32

GetCurrentProcess

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

MultiByteToWideChar

IsDebuggerPresent

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

CreateFileA

CreateFileW

CloseHandle

IsProcessorFeaturePresent

vcruntime140

__C_specific_handler

memcpy

__std_type_info_destroy_list

memset

api-ms-win-crt-heap-l1-1-0

calloc

realloc

malloc

free

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

api-ms-win-crt-string-l1-1-0

_strdup

strlen

strcmp

strcpy

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_initialize_narrow_environment

_configure_narrow_argv

_cexit

_initialize_onexit_table

_seh_filter_dll

_initterm_e

_initterm

_errno

Exports

Java_java_util_zip_Adler32_update

Java_java_util_zip_Adler32_updateByteBuffer

Java_java_util_zip_Adler32_updateBytes

Java_java_util_zip_CRC32_update

Java_java_util_zip_CRC32_updateByteBuffer0

Java_java_util_zip_CRC32_updateBytes0

Java_java_util_zip_Deflater_deflateBufferBuffer

Java_java_util_zip_Deflater_deflateBufferBytes

Java_java_util_zip_Deflater_deflateBytesBuffer

Java_java_util_zip_Deflater_deflateBytesBytes

Java_java_util_zip_Deflater_end

Java_java_util_zip_Deflater_getAdler

Java_java_util_zip_Deflater_init

Java_java_util_zip_Deflater_reset

Java_java_util_zip_Deflater_setDictionary

Java_java_util_zip_Deflater_setDictionaryBuffer

Java_java_util_zip_Inflater_end

Java_java_util_zip_Inflater_getAdler

Java_java_util_zip_Inflater_inflateBufferBuffer

Java_java_util_zip_Inflater_inflateBufferBytes

Java_java_util_zip_Inflater_inflateBytesBuffer

Java_java_util_zip_Inflater_inflateBytesBytes

Java_java_util_zip_Inflater_init

Java_java_util_zip_Inflater_initIDs

Java_java_util_zip_Inflater_reset

Java_java_util_zip_Inflater_setDictionary

Java_java_util_zip_Inflater_setDictionaryBuffer

ZIP_CRC32

ZIP_Close

ZIP_FindEntry

ZIP_GZip_Fully

ZIP_GZip_InitParams

ZIP_GetNextEntry

ZIP_InflateFully

ZIP_Open

ZIP_ReadEntry

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Koalageddon/runtime/conf/logging.properties

Koalageddon/runtime/conf/net.properties

Koalageddon/runtime/conf/security/java.policy

Koalageddon/runtime/conf/security/java.security

Koalageddon/runtime/conf/security/policy/README.txt

Koalageddon/runtime/conf/security/policy/limited/default_US_export.policy

Koalageddon/runtime/conf/security/policy/limited/default_local.policy

Koalageddon/runtime/conf/security/policy/limited/exempt_local.policy

Koalageddon/runtime/conf/security/policy/unlimited/default_US_export.policy

Koalageddon/runtime/conf/security/policy/unlimited/default_local.policy

Koalageddon/runtime/conf/sound.properties

Koalageddon/runtime/legal/java.base/COPYRIGHT

Koalageddon/runtime/legal/java.base/LICENSE

Koalageddon/runtime/legal/java.base/aes.md

Koalageddon/runtime/legal/java.base/asm.md

Koalageddon/runtime/legal/java.base/c-libutl.md

Koalageddon/runtime/legal/java.base/cldr.md

Koalageddon/runtime/legal/java.base/icu.md

Koalageddon/runtime/legal/java.base/public_suffix.md

Koalageddon/runtime/legal/java.base/unicode.md

Koalageddon/runtime/legal/java.base/wepoll.md

Koalageddon/runtime/legal/java.base/zlib.md

Koalageddon/runtime/legal/java.datatransfer/COPYRIGHT

Koalageddon/runtime/legal/java.datatransfer/LICENSE

Koalageddon/runtime/legal/java.desktop/COPYRIGHT

Koalageddon/runtime/legal/java.desktop/LICENSE

Koalageddon/runtime/legal/java.desktop/colorimaging.md

Koalageddon/runtime/legal/java.desktop/freetype.md

Koalageddon/runtime/legal/java.desktop/giflib.md

Koalageddon/runtime/legal/java.desktop/harfbuzz.md

Koalageddon/runtime/legal/java.desktop/jpeg.md

Koalageddon/runtime/legal/java.desktop/lcms.md

Koalageddon/runtime/legal/java.desktop/libpng.md

Koalageddon/runtime/legal/java.desktop/mesa3d.md

Koalageddon/runtime/legal/java.instrument/COPYRIGHT

Koalageddon/runtime/legal/java.instrument/LICENSE

Koalageddon/runtime/legal/java.logging/COPYRIGHT

Koalageddon/runtime/legal/java.logging/LICENSE

Koalageddon/runtime/legal/java.management/COPYRIGHT

Koalageddon/runtime/legal/java.management/LICENSE

Koalageddon/runtime/legal/java.naming/COPYRIGHT

Koalageddon/runtime/legal/java.naming/LICENSE

Koalageddon/runtime/legal/java.prefs/COPYRIGHT

Koalageddon/runtime/legal/java.prefs/LICENSE

Koalageddon/runtime/legal/java.security.sasl/COPYRIGHT

Koalageddon/runtime/legal/java.security.sasl/LICENSE

Koalageddon/runtime/legal/java.sql/COPYRIGHT

Koalageddon/runtime/legal/java.sql/LICENSE

Koalageddon/runtime/legal/java.transaction.xa/COPYRIGHT

Koalageddon/runtime/legal/java.transaction.xa/LICENSE

Koalageddon/runtime/legal/java.xml/COPYRIGHT

Koalageddon/runtime/legal/java.xml/LICENSE

Koalageddon/runtime/legal/java.xml/bcel.md

Koalageddon/runtime/legal/java.xml/dom.md

Koalageddon/runtime/legal/java.xml/jcup.md

Koalageddon/runtime/legal/java.xml/xalan.md

Koalageddon/runtime/legal/java.xml/xerces.md

Koalageddon/runtime/legal/jdk.crypto.ec/COPYRIGHT

Koalageddon/runtime/legal/jdk.crypto.ec/LICENSE

Koalageddon/runtime/legal/jdk.unsupported/COPYRIGHT

Koalageddon/runtime/legal/jdk.unsupported/LICENSE

Koalageddon/runtime/lib/classlist

Koalageddon/runtime/lib/fontconfig.bfc

Koalageddon/runtime/lib/fontconfig.properties.src

Koalageddon/runtime/lib/jawt.lib

Koalageddon/runtime/lib/jrt-fs.jar

.jar

Koalageddon/runtime/lib/jvm.cfg

Koalageddon/runtime/lib/jvm.lib

Koalageddon/runtime/lib/modules

Koalageddon/runtime/lib/psfont.properties.ja

Koalageddon/runtime/lib/psfontj2d.properties

Koalageddon/runtime/lib/security/blocked.certs

Koalageddon/runtime/lib/security/cacerts

Koalageddon/runtime/lib/security/default.policy

Koalageddon/runtime/lib/security/public_suffix_list.dat

.zip

Koalageddon/runtime/lib/tzdb.dat

Koalageddon/runtime/lib/tzmappings

Koalageddon/runtime/release

Resubmissions

Sharing

General

Malware Config

Signatures

Files

5ee94995f32b14841cb0fab5026d0dbb

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

kernel32

Exports

Exports

Sections

.text Size: 277KB - Virtual size: 277KB

.rdata Size: 103KB - Virtual size: 102KB

.data Size: 7KB - Virtual size: 13KB

.pdata Size: 14KB - Virtual size: 14KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 3KB - Virtual size: 3KB

3497416675b3dcc6d3571185a5302dde

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

dwmapi

opengl32

user32

kernel32

Exports

Exports

Sections

.text Size: 12.7MB - Virtual size: 12.7MB

.rdata Size: 2.5MB - Virtual size: 2.5MB

.data Size: 37KB - Virtual size: 87KB

.pdata Size: 596KB - Virtual size: 595KB

.idata Size: 10KB - Virtual size: 9KB

.tls Size: 1024B - Virtual size: 849B

.00cfg Size: 512B - Virtual size: 337B

_RDATA Size: 1024B - Virtual size: 562B

.reloc Size: 87KB - Virtual size: 87KB

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

9a:21:b0:8b:85:a9:de:1f:d9:4f:fe:56:97:d3:7b:37:3d:86:6f:aa:be:dd:dc:05:03:e3:b6:57:a0:0f:c9:53Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.rdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1008B

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

10:a4:b7:d1:65:d5:bc:cf:9e:2c:dc:b7:61:13:97:0c:5a:4a:25:b4:e9:74:66:0a:a2:cc:88:c1:1b:f7:26:c7Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.rdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1008B

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

.text
Size: 277KB - Virtual size: 277KB

.rdata
Size: 103KB - Virtual size: 102KB

.data
Size: 7KB - Virtual size: 13KB

.pdata
Size: 14KB - Virtual size: 14KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 12.7MB - Virtual size: 12.7MB

.rdata
Size: 2.5MB - Virtual size: 2.5MB

.data
Size: 37KB - Virtual size: 87KB

.pdata
Size: 596KB - Virtual size: 595KB

.idata
Size: 10KB - Virtual size: 9KB

.tls
Size: 1024B - Virtual size: 849B

.00cfg
Size: 512B - Virtual size: 337B

_RDATA
Size: 1024B - Virtual size: 562B

.reloc
Size: 87KB - Virtual size: 87KB

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

9a:21:b0:8b:85:a9:de:1f:d9:4f:fe:56:97:d3:7b:37:3d:86:6f:aa:be:dd:dc:05:03:e3:b6:57:a0:0f:c9:53
Signer

.rdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

10:a4:b7:d1:65:d5:bc:cf:9e:2c:dc:b7:61:13:97:0c:5a:4a:25:b4:e9:74:66:0a:a2:cc:88:c1:1b:f7:26:c7
Signer

.rdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

29:8c:72:37:c7:ec:6f:9a:e3:b3:d0:6f:37:88:23:05:94:c6:24:84:37:0a:be:d7:8c:6c:4b:84:3c:e9:91:15
Signer

.rdata
Size: 1024B - Virtual size: 584B

.rsrc
Size: 1024B - Virtual size: 1008B

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

39:b9:fd:ac:5b:dc:e8:1e:8f:2d:e8:ee:54:da:31:11:3e:3c:73:70:81:d0:4c:16:a0:a4:c0:b2:28:d9:9d:33
Signer

.rdata
Size: 1024B - Virtual size: 596B

.rsrc
Size: 1024B - Virtual size: 1008B

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

38:c7:b6:7e:d3:49:27:25:36:5f:9c:fc:32:93:06:e7:d4:59:b3:98:d6:44:e0:e1:df:74:fc:11:88:2a:76:2e
Signer

.rdata
Size: 1024B - Virtual size: 776B

.rsrc
Size: 1024B - Virtual size: 1008B

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

73:6f:69:75:0f:67:32:4b:fb:6f:48:bb:b3:bf:f0:1d:9f:13:4e:c8:03:5e:3a:64:44:91:63:65:78:e2:f6:56
Signer

.rdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 1008B

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

a6:49:26:84:e3:13:01:27:f8:8e:a6:8c:bb:14:73:f6:bd:5c:f3:a6:4d:07:65:93:4b:75:2b:a5:11:0d:b3:a3
Signer