0e0cfdf14afaadf4da9e30f4e1e28442f76c31ba363e7f18e96501c24dcfdd76[.]zip[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

0e0cfdf14afaadf4da9e30f4e1e28442f76c31ba363e7f18e96501c24dcfdd76.zip.zip
Size

60.6MB
MD5

6243215f10fba8766803ab547ea76ee4
SHA1

62151f7580b86e59cc528aa0b8550016923f2f09
SHA256

aaf4827d78018fbcb8d72931b583ad35627aed37937a9db19af2e48a8a34ff18
SHA512

211737435f898a32b04b3499336a0465543a98fe21dcea10811c83232e7b19c724b8eb4848c8bdf7eb086b0fb8bc36d22eb34018a49e8d86d6db4142105ef5ad
SSDEEP

1572864:xx2sXOvlrkLQBXKcd7lXUBtDRN87UN/yuSt9A/r+:xhONTGDDEq/oK/C

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack002/Basilisk Portable with Flash/Basilisk-Portable.exe	upx

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack003/out.upx	autoit_exe

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack003/out.upx
unpack002/Basilisk Portable with Flash/Bin/basilisk/gmp-clearkey/0.1/clearkey.dll
unpack002/Basilisk Portable with Flash/Plugins/Flash/NPSWF32_32_0_0_363.dll
unpack002/Basilisk Portable with Flash/Plugins/SoundPlayback/Npxgplugin.dll
unpack002/Basilisk Portable with Flash/Plugins/SoundPlayback/npmod32.dll
unpack002/Basilisk Portable with Flash/Plugins/SoundPlayback/npsid.dll

Files

0e0cfdf14afaadf4da9e30f4e1e28442f76c31ba363e7f18e96501c24dcfdd76.zip.zip
.zip

Password: infected
0e0cfdf14afaadf4da9e30f4e1e28442f76c31ba363e7f18e96501c24dcfdd76.zip
.zip
Basilisk Portable with Flash/Basilisk-Portable.exe
.exe windows:5 windows x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:3b:d2:7e:dd:3c:94:9e:95:8e:28:a9:b3:c7:57:a0
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16/12/2015, 01:00

Not After

16/12/2030, 01:00

Subject

CN=StartCom Class 2 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

14:7b:94:72:da:dd:ed:db:71:7a:24:6c:68:dd:bb:89
Certificate

Issuer

CN=StartCom Class 2 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

21/01/2016, 02:39

Not After

21/01/2018, 02:39

Subject

CN=Markus Straver,O=Markus Straver,L=Linköping,ST=Ostergotlands,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6c:3b:d2:7e:dd:3c:94:9e:95:8e:28:a9:b3:c7:57:a0
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16/12/2015, 01:00

Not After

16/12/2030, 01:00

Subject

CN=StartCom Class 2 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

14:7b:94:72:da:dd:ed:db:71:7a:24:6c:68:dd:bb:89
Certificate

Issuer

CN=StartCom Class 2 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

21/01/2016, 02:39

Not After

21/01/2018, 02:39

Subject

CN=Markus Straver,O=Markus Straver,L=Linköping,ST=Ostergotlands,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

97:97:8d:e4:b2:62:a8:b9:0d:9c:9c:87:ad:23:03:64:a6:7c:09:1b:4c:44:a9:a0:63:ae:b7:00:ac:68:e9:31
Signer

Actual PE Digest

97:97:8d:e4:b2:62:a8:b9:0d:9c:9c:87:ad:23:03:64:a6:7c:09:1b:4c:44:a9:a0:63:ae:b7:00:ac:68:e9:31

Digest Algorithm

sha256

PE Digest Matches

true

28:25:28:a0:27:b5:b6:62:fc:b9:65:ef:50:cc:6b:41:3a:56:48:92
Signer

Actual PE Digest

28:25:28:a0:27:b5:b6:62:fc:b9:65:ef:50:cc:6b:41:3a:56:48:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Basilisk-Portable.ini
Basilisk Portable with Flash/Bin/basilisk/Accessible.tlb
Basilisk Portable with Flash/Bin/basilisk/AccessibleMarshal.dll
.dll regsvr32 windows:6 windows x86

922fe4dbbad55e81cd92ab1d0c0477d0

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:0d:ad:04:e9:00:6e:3e:63:a3:d6:ad:a3:b6:f1:be:3d:29:02:1b:47:b0:1c:e4:58:71:00:8e:f8:bb:56:d5
Signer

Actual PE Digest

7e:0d:ad:04:e9:00:6e:3e:63:a3:d6:ad:a3:b6:f1:be:3d:29:02:1b:47:b0:1c:e4:58:71:00:8e:f8:bb:56:d5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess

rpcrt4

NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer_Release
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_Invoke
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect

oleaut32

BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserFree

vcruntime140

__std_type_info_destroy_list
memcmp
_except_handler4_common
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.orpc
Size: 512B - Virtual size: 229B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/IA2Marshal.dll
.dll regsvr32 windows:6 windows x86

717c93003ea51a556295af7f37d56d4f

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:67:e3:9e:2c:05:75:aa:69:2a:07:3a:a1:66:b6:c4:cb:b2:ad:87:a1:a7:67:96:ce:a7:61:0d:78:9d:ce:08
Signer

Actual PE Digest

90:67:e3:9e:2c:05:75:aa:69:2a:07:3a:a1:66:b6:c4:cb:b2:ad:87:a1:a7:67:96:ce:a7:61:0d:78:9d:ce:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess

rpcrt4

NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
CStdStubBuffer_DebugServerRelease
NdrDllCanUnloadNow
NdrDllRegisterProxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
NdrStubCall2
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
NdrDllGetClassObject
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrOleAllocate
NdrOleFree

ole32

HWND_UserUnmarshal
HWND_UserMarshal
HWND_UserSize
HWND_UserFree

oleaut32

VARIANT_UserMarshal
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
memset
memcmp

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_cexit
_execute_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-console-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:c9:61:bb:7c:de:0d:97:8d:09:bd:d9:fd:7f:75:37:26:e4:a8:28:de:94:c1:e8:03:2d:85:a3:81:5d:55:66
Signer

Actual PE Digest

6c:c9:61:bb:7c:de:0d:97:8d:09:bd:d9:fd:7f:75:37:26:e4:a8:28:de:94:c1:e8:03:2d:85:a3:81:5d:55:66

Digest Algorithm

sha256

PE Digest Matches

true

5c:e7:8d:5e:45:cf:dd:d3:54:43:ae:d5:ac:84:bd:4f:21:5e:c2:15
Signer

Actual PE Digest

5c:e7:8d:5e:45:cf:dd:d3:54:43:ae:d5:ac:84:bd:4f:21:5e:c2:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AllocConsole
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleA
WriteConsoleW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-console-l1-2-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:ee:3a:cd:7b:5f:17:a4:5c:2c:04:02:2d:d0:4d:c3:43:83:27:72:1f:e8:1d:49:d0:49:c7:65:6d:77:8c:21
Signer

Actual PE Digest

65:ee:3a:cd:7b:5f:17:a4:5c:2c:04:02:2d:d0:4d:c3:43:83:27:72:1f:e8:1d:49:d0:49:c7:65:6d:77:8c:21

Digest Algorithm

sha256

PE Digest Matches

true

a7:5c:ac:f9:5d:97:db:8f:01:a5:a9:66:7a:c6:01:53:15:18:46:7f
Signer

Actual PE Digest

a7:5c:ac:f9:5d:97:db:8f:01:a5:a9:66:7a:c6:01:53:15:18:46:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AllocConsole
AttachConsole
FreeConsole
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
PeekConsoleInputW
ReadConsoleA
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleA
WriteConsoleW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-datetime-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

22:08:ba:b1:b7:9f:f9:f8:2e:95:b6:27:5a:d6:8a:64:b9:dd:bd:1e:c9:b5:00:c7:72:3c:6c:ee:2e:fc:d5:37
Signer

Actual PE Digest

22:08:ba:b1:b7:9f:f9:f8:2e:95:b6:27:5a:d6:8a:64:b9:dd:bd:1e:c9:b5:00:c7:72:3c:6c:ee:2e:fc:d5:37

Digest Algorithm

sha256

PE Digest Matches

true

dd:60:94:fa:47:5d:33:eb:7a:fe:ae:d9:fa:2b:47:9e:06:a2:8c:11
Signer

Actual PE Digest

dd:60:94:fa:47:5d:33:eb:7a:fe:ae:d9:fa:2b:47:9e:06:a2:8c:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetDateFormatA
GetDateFormatW
GetTimeFormatA
GetTimeFormatW

Sections

.text
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-debug-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:fe:56:aa:ba:ee:53:d6:b3:d7:fc:57:fc:69:38:ff:e7:f2:17:3e:c0:5b:fa:4c:27:f1:5e:47:68:08:86:08
Signer

Actual PE Digest

f9:fe:56:aa:ba:ee:53:d6:b3:d7:fc:57:fc:69:38:ff:e7:f2:17:3e:c0:5b:fa:4c:27:f1:5e:47:68:08:86:08

Digest Algorithm

sha256

PE Digest Matches

true

e3:0d:63:2c:84:3a:5a:d5:22:c9:4d:e1:2d:f2:52:4d:3f:ed:e9:11
Signer

Actual PE Digest

e3:0d:63:2c:84:3a:5a:d5:22:c9:4d:e1:2d:f2:52:4d:3f:ed:e9:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DebugBreak
IsDebuggerPresent
OutputDebugStringA
OutputDebugStringW

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-errorhandling-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

89:cc:e5:90:71:33:c3:4f:f8:07:b1:32:96:df:88:2d:4e:f1:f7:c3:27:a5:98:46:5d:fa:49:ce:9a:2a:d4:51
Signer

Actual PE Digest

89:cc:e5:90:71:33:c3:4f:f8:07:b1:32:96:df:88:2d:4e:f1:f7:c3:27:a5:98:46:5d:fa:49:ce:9a:2a:d4:51

Digest Algorithm

sha256

PE Digest Matches

true

bb:83:d5:83:be:0f:2f:91:3d:93:58:48:c0:b6:b9:2b:94:0a:45:9f
Signer

Actual PE Digest

bb:83:d5:83:be:0f:2f:91:3d:93:58:48:c0:b6:b9:2b:94:0a:45:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetErrorMode
GetLastError
RaiseException
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Sections

.text
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-file-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:55:c8:4d:76:7a:2f:da:df:1c:c7:14:ae:96:29:f8:f9:0c:c7:28:fa:fc:ef:b7:04:c0:1d:d4:5c:f7:00:14
Signer

Actual PE Digest

5e:55:c8:4d:76:7a:2f:da:df:1c:c7:14:ae:96:29:f8:f9:0c:c7:28:fa:fc:ef:b7:04:c0:1d:d4:5c:f7:00:14

Digest Algorithm

sha256

PE Digest Matches

true

8c:d5:d2:4a:16:ab:29:14:06:5a:3b:3a:20:49:34:d8:a4:ea:20:12
Signer

Actual PE Digest

8c:d5:d2:4a:16:ab:29:14:06:5a:3b:3a:20:49:34:d8:a4:ea:20:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CompareFileTime
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DefineDosDeviceW
DeleteFileA
DeleteFileW
DeleteVolumeMountPointW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindFirstVolumeW
FindNextChangeNotification
FindNextFileA
FindNextFileW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleA
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetLogicalDriveStringsW
GetLogicalDrives
GetLongPathNameA
GetLongPathNameW
GetShortPathNameW
GetTempFileNameW
GetVolumeInformationByHandleW
GetVolumeInformationW
GetVolumePathNameW
LocalFileTimeToFileTime
LockFile
LockFileEx
QueryDosDeviceW
ReadFile
ReadFileEx
ReadFileScatter
RemoveDirectoryA
RemoveDirectoryW
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetFileValidData
UnlockFile
UnlockFileEx
WriteFile
WriteFileEx
WriteFileGather

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-file-l1-2-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:b0:78:44:1a:c2:61:b9:f8:78:59:c8:11:47:b0:bb:f4:4b:4f:88:89:5c:7d:0f:c5:e7:52:e8:f9:7c:1d:97
Signer

Actual PE Digest

ec:b0:78:44:1a:c2:61:b9:f8:78:59:c8:11:47:b0:bb:f4:4b:4f:88:89:5c:7d:0f:c5:e7:52:e8:f9:7c:1d:97

Digest Algorithm

sha256

PE Digest Matches

true

43:a9:ae:03:07:6d:81:15:3f:79:c0:24:9a:1f:a1:2d:09:7f:9d:0e
Signer

Actual PE Digest

43:a9:ae:03:07:6d:81:15:3f:79:c0:24:9a:1f:a1:2d:09:7f:9d:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CreateFile2
GetTempPathW
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW

Sections

.text
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-file-l2-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:c2:50:41:39:34:69:9f:9a:27:7b:bd:b2:de:50:c3:fb:e1:9f:20:f0:97:93:ad:e5:1f:8d:cf:72:f4:8b:3f
Signer

Actual PE Digest

c0:c2:50:41:39:34:69:9f:9a:27:7b:bd:b2:de:50:c3:fb:e1:9f:20:f0:97:93:ad:e5:1f:8d:cf:72:f4:8b:3f

Digest Algorithm

sha256

PE Digest Matches

true

13:37:09:22:e4:6d:db:ca:f4:f7:79:9b:91:7a:8e:5e:5f:e7:e1:f5
Signer

Actual PE Digest

13:37:09:22:e4:6d:db:ca:f4:f7:79:9b:91:7a:8e:5e:5f:e7:e1:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CopyFile2
CopyFileExW
CreateDirectoryExW
CreateHardLinkW
CreateSymbolicLinkW
GetFileInformationByHandleEx
MoveFileExW
MoveFileWithProgressW
ReOpenFile
ReadDirectoryChangesW
ReplaceFileW

Sections

.text
Size: 1024B - Virtual size: 893B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-handle-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6b:f1:46:e6:5f:4c:26:16:9f:9d:81:52:32:d5:40:a8:12:b5:75:ac:ed:e8:fb:f5:e7:6d:f9:7b:20:f6:90:43
Signer

Actual PE Digest

6b:f1:46:e6:5f:4c:26:16:9f:9d:81:52:32:d5:40:a8:12:b5:75:ac:ed:e8:fb:f5:e7:6d:f9:7b:20:f6:90:43

Digest Algorithm

sha256

PE Digest Matches

true

73:40:c0:6b:32:0e:47:40:a8:e1:20:5b:00:b6:e2:19:60:a0:be:2b
Signer

Actual PE Digest

73:40:c0:6b:32:0e:47:40:a8:e1:20:5b:00:b6:e2:19:60:a0:be:2b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CloseHandle
CompareObjectHandles
DuplicateHandle
GetHandleInformation
SetHandleInformation

Sections

.text
Size: 1024B - Virtual size: 607B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-heap-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:fb:0c:23:1c:30:b0:bc:d3:d3:07:60:e9:aa:56:b2:fb:46:3a:50:1e:e7:aa:c9:6a:a7:c4:d5:3c:89:85:8e
Signer

Actual PE Digest

d7:fb:0c:23:1c:30:b0:bc:d3:d3:07:60:e9:aa:56:b2:fb:46:3a:50:1e:e7:aa:c9:6a:a7:c4:d5:3c:89:85:8e

Digest Algorithm

sha256

PE Digest Matches

true

88:2f:09:e1:3e:10:01:51:0b:83:d5:54:69:72:86:c1:1a:e2:11:e1
Signer

Actual PE Digest

88:2f:09:e1:3e:10:01:51:0b:83:d5:54:69:72:86:c1:1a:e2:11:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetProcessHeap
GetProcessHeaps
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapQueryInformation
HeapReAlloc
HeapSetInformation
HeapSize
HeapSummary
HeapUnlock
HeapValidate
HeapWalk

Sections

.text
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-interlocked-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

67:85:56:8d:e1:3e:0c:17:1e:7e:8d:6e:41:78:33:b6:3e:d9:05:0a:4c:5a:cc:9a:0e:07:c6:6e:94:71:92:1b
Signer

Actual PE Digest

67:85:56:8d:e1:3e:0c:17:1e:7e:8d:6e:41:78:33:b6:3e:d9:05:0a:4c:5a:cc:9a:0e:07:c6:6e:94:71:92:1b

Digest Algorithm

sha256

PE Digest Matches

true

e3:20:c4:7f:63:ea:84:fd:54:45:b7:b2:a3:95:e5:be:a6:54:40:1a
Signer

Actual PE Digest

e3:20:c4:7f:63:ea:84:fd:54:45:b7:b2:a3:95:e5:be:a6:54:40:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

InitializeSListHead
InterlockedCompareExchange
InterlockedCompareExchange64
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedFlushSList
InterlockedIncrement
InterlockedPopEntrySList
InterlockedPushEntrySList
QueryDepthSList

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-libraryloader-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

71:0d:0c:aa:c3:bc:05:5a:76:e8:e6:cb:64:62:b7:a9:19:f8:96:31:6c:8f:9e:be:fd:23:85:06:84:3f:f3:16
Signer

Actual PE Digest

71:0d:0c:aa:c3:bc:05:5a:76:e8:e6:cb:64:62:b7:a9:19:f8:96:31:6c:8f:9e:be:fd:23:85:06:84:3f:f3:16

Digest Algorithm

sha256

PE Digest Matches

true

02:df:d9:3c:90:ec:bb:66:00:88:cf:85:c0:21:ec:97:2a:1a:95:1e
Signer

Actual PE Digest

02:df:d9:3c:90:ec:bb:66:00:88:cf:85:c0:21:ec:97:2a:1a:95:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AddDllDirectory
DisableThreadLibraryCalls
FindResourceExW
FindStringOrdinal
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
LoadResource
LoadStringA
LoadStringW
LockResource
RemoveDllDirectory
SetDefaultDllDirectories
SizeofResource

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-localization-l1-2-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:5a:e7:14:3e:cf:e9:c0:6d:43:fb:20:89:62:17:d0:ca:8a:c0:cf:65:66:93:55:0f:d0:01:37:28:cf:37:fb
Signer

Actual PE Digest

d3:5a:e7:14:3e:cf:e9:c0:6d:43:fb:20:89:62:17:d0:ca:8a:c0:cf:65:66:93:55:0f:d0:01:37:28:cf:37:fb

Digest Algorithm

sha256

PE Digest Matches

true

43:0d:36:ea:cc:25:98:be:70:74:fc:e2:6c:5e:b9:ce:ef:e6:e1:a5
Signer

Actual PE Digest

43:0d:36:ea:cc:25:98:be:70:74:fc:e2:6c:5e:b9:ce:ef:e6:e1:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ConvertDefaultLocale
EnumSystemGeoID
EnumSystemLocalesA
EnumSystemLocalesW
FindNLSString
FindNLSStringEx
FormatMessageA
FormatMessageW
GetACP
GetCPInfo
GetCPInfoExW
GetCalendarInfoEx
GetCalendarInfoW
GetFileMUIInfo
GetFileMUIPath
GetGeoInfoW
GetLocaleInfoA
GetLocaleInfoEx
GetLocaleInfoW
GetNLSVersion
GetNLSVersionEx
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemPreferredUILanguages
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadUILanguage
GetUILanguageInfo
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserGeoID
GetUserPreferredUILanguages
IdnToAscii
IdnToUnicode
IsDBCSLeadByte
IsDBCSLeadByteEx
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
IsValidNLSVersion
LCMapStringA
LCMapStringEx
LCMapStringW
LocaleNameToLCID
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetProcessPreferredUILanguages
SetThreadLocale
SetThreadPreferredUILanguages
SetThreadUILanguage
SetUserGeoID
VerLanguageNameA
VerLanguageNameW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-memory-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:4a:74:c5:7d:b5:77:c9:48:11:11:27:c9:56:99:96:c9:43:e1:4a:29:c9:d7:b3:2c:ed:36:28:77:95:ce:72
Signer

Actual PE Digest

c1:4a:74:c5:7d:b5:77:c9:48:11:11:27:c9:56:99:96:c9:43:e1:4a:29:c9:d7:b3:2c:ed:36:28:77:95:ce:72

Digest Algorithm

sha256

PE Digest Matches

true

af:7a:66:d6:f0:89:85:fd:aa:7b:64:4f:d7:22:4e:18:8b:b5:a4:7c
Signer

Actual PE Digest

af:7a:66:d6:f0:89:85:fd:aa:7b:64:4f:d7:22:4e:18:8b:b5:a4:7c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CreateFileMappingW
FlushViewOfFile
MapViewOfFile
MapViewOfFileEx
OpenFileMappingW
ReadProcessMemory
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WriteProcessMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-namedpipe-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:1c:c4:6c:2b:82:ce:a3:ac:ab:b1:0e:3c:eb:50:0a:4d:25:8c:38:7e:dc:43:40:22:b9:a2:e5:da:ac:06:7e
Signer

Actual PE Digest

c8:1c:c4:6c:2b:82:ce:a3:ac:ab:b1:0e:3c:eb:50:0a:4d:25:8c:38:7e:dc:43:40:22:b9:a2:e5:da:ac:06:7e

Digest Algorithm

sha256

PE Digest Matches

true

38:9c:87:71:75:4a:35:b9:16:19:fa:4d:73:5c:4d:13:57:91:1e:29
Signer

Actual PE Digest

38:9c:87:71:75:4a:35:b9:16:19:fa:4d:73:5c:4d:13:57:91:1e:29

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ConnectNamedPipe
CreateNamedPipeW
CreatePipe
DisconnectNamedPipe
GetNamedPipeClientComputerNameW
ImpersonateNamedPipeClient
PeekNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW

Sections

.text
Size: 1024B - Virtual size: 913B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-processenvironment-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:b7:0c:d0:65:a4:62:bd:4b:9b:e2:8e:e4:94:f1:02:a5:a1:3f:5a:7a:54:c6:5e:c3:38:1d:1c:01:78:86:d8
Signer

Actual PE Digest

f6:b7:0c:d0:65:a4:62:bd:4b:9b:e2:8e:e4:94:f1:02:a5:a1:3f:5a:7a:54:c6:5e:c3:38:1d:1c:01:78:86:d8

Digest Algorithm

sha256

PE Digest Matches

true

1f:d2:8a:44:4c:e7:4d:d3:0b:88:54:0b:73:78:bb:09:76:0a:89:67
Signer

Actual PE Digest

1f:d2:8a:44:4c:e7:4d:d3:0b:88:54:0b:73:78:bb:09:76:0a:89:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStdHandle
SearchPathW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
SetStdHandleEx

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-processthreads-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:b3:b8:ac:58:43:fb:47:bc:73:c6:79:fc:19:64:cf:08:f8:d2:77:3e:61:c8:82:38:46:5a:4f:0f:e9:e3:11
Signer

Actual PE Digest

02:b3:b8:ac:58:43:fb:47:bc:73:c6:79:fc:19:64:cf:08:f8:d2:77:3e:61:c8:82:38:46:5a:4f:0f:e9:e3:11

Digest Algorithm

sha256

PE Digest Matches

true

17:2c:64:09:e3:a6:61:4c:5d:74:a5:ff:e0:c3:6d:eb:a7:bd:71:54
Signer

Actual PE Digest

17:2c:64:09:e3:a6:61:4c:5d:74:a5:ff:e0:c3:6d:eb:a7:bd:71:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CreateProcessA
CreateProcessAsUserW
CreateProcessW
CreateRemoteThread
CreateRemoteThreadEx
CreateThread
DeleteProcThreadAttributeList
ExitProcess
ExitThread
FlushProcessWriteBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeProcess
GetExitCodeThread
GetPriorityClass
GetProcessId
GetProcessIdOfThread
GetProcessTimes
GetProcessVersion
GetStartupInfoW
GetThreadId
GetThreadPriority
GetThreadPriorityBoost
InitializeProcThreadAttributeList
OpenProcessToken
OpenThread
OpenThreadToken
ProcessIdToSessionId
QueryProcessAffinityUpdateMode
QueueUserAPC
ResumeThread
SetPriorityClass
SetProcessAffinityUpdateMode
SetProcessShutdownParameters
SetThreadPriority
SetThreadPriorityBoost
SetThreadStackGuarantee
SetThreadToken
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UpdateProcThreadAttribute

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-processthreads-l1-1-1.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f2:73:51:fb:dd:99:21:8e:8a:29:74:06:c3:3b:b4:a7:8e:2a:bb:26:5a:b6:e5:07:e0:2f:4f:36:35:27:bc:8c
Signer

Actual PE Digest

f2:73:51:fb:dd:99:21:8e:8a:29:74:06:c3:3b:b4:a7:8e:2a:bb:26:5a:b6:e5:07:e0:2f:4f:36:35:27:bc:8c

Digest Algorithm

sha256

PE Digest Matches

true

8a:70:0e:95:4c:4e:53:9b:e8:05:69:7e:df:ed:73:d6:12:b4:79:d6
Signer

Actual PE Digest

8a:70:0e:95:4c:4e:53:9b:e8:05:69:7e:df:ed:73:d6:12:b4:79:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

FlushInstructionCache
GetCurrentProcessorNumber
GetCurrentProcessorNumberEx
GetCurrentThreadStackLimits
GetProcessHandleCount
GetProcessMitigationPolicy
GetThreadContext
GetThreadIdealProcessorEx
GetThreadTimes
IsProcessorFeaturePresent
OpenProcess
SetProcessMitigationPolicy
SetThreadContext
SetThreadIdealProcessorEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-profile-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:21:cf:0c:87:1d:86:1e:7b:16:4a:1a:54:5f:72:fb:53:30:75:f5:2d:85:00:01:56:b0:c4:2f:92:19:2f:5e
Signer

Actual PE Digest

55:21:cf:0c:87:1d:86:1e:7b:16:4a:1a:54:5f:72:fb:53:30:75:f5:2d:85:00:01:56:b0:c4:2f:92:19:2f:5e

Digest Algorithm

sha256

PE Digest Matches

true

52:f8:37:dd:24:47:cc:dd:da:70:84:5b:a9:18:d4:33:11:ab:2d:7f
Signer

Actual PE Digest

52:f8:37:dd:24:47:cc:dd:da:70:84:5b:a9:18:d4:33:11:ab:2d:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

QueryPerformanceCounter
QueryPerformanceFrequency

Sections

.text
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-rtlsupport-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ce:ac:e5:76:12:e3:54:39:81:28:1e:8d:c7:41:df:b8:b5:ec:78:bd:a6:e9:37:c9:52:ac:28:85:11:9d:8a:8a
Signer

Actual PE Digest

ce:ac:e5:76:12:e3:54:39:81:28:1e:8d:c7:41:df:b8:b5:ec:78:bd:a6:e9:37:c9:52:ac:28:85:11:9d:8a:8a

Digest Algorithm

sha256

PE Digest Matches

true

e8:45:e4:cc:8d:45:1e:1a:28:d0:e7:12:e4:1c:5d:50:84:5e:f0:e4
Signer

Actual PE Digest

e8:45:e4:cc:8d:45:1e:1a:28:d0:e7:12:e4:1c:5d:50:84:5e:f0:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

RtlCaptureContext
RtlCaptureStackBackTrace
RtlUnwind

Sections

.text
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-string-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:7e:d6:43:f0:99:01:49:cd:35:b4:e8:a4:8f:a5:3f:e1:cd:77:3d:8f:52:a0:9e:07:c3:a6:77:20:67:b4:35
Signer

Actual PE Digest

57:7e:d6:43:f0:99:01:49:cd:35:b4:e8:a4:8f:a5:3f:e1:cd:77:3d:8f:52:a0:9e:07:c3:a6:77:20:67:b4:35

Digest Algorithm

sha256

PE Digest Matches

true

dc:d1:9f:2c:bb:e2:57:b3:61:db:d8:6c:de:e2:03:bb:ea:c3:4b:7d
Signer

Actual PE Digest

dc:d1:9f:2c:bb:e2:57:b3:61:db:d8:6c:de:e2:03:bb:ea:c3:4b:7d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CompareStringEx
CompareStringOrdinal
CompareStringW
FoldStringW
GetStringTypeExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte

Sections

.text
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-synch-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:82:b5:01:6d:26:2f:6f:4a:f3:78:ea:a0:f4:b7:15:8d:a3:3b:93:e2:5f:9a:c8:98:af:a8:27:08:8d:a2:0a
Signer

Actual PE Digest

d3:82:b5:01:6d:26:2f:6f:4a:f3:78:ea:a0:f4:b7:15:8d:a3:3b:93:e2:5f:9a:c8:98:af:a8:27:08:8d:a2:0a

Digest Algorithm

sha256

PE Digest Matches

true

d0:8d:5a:79:07:30:d7:4c:9a:a0:d8:be:4b:30:ea:2f:63:c1:2e:ed
Signer

Actual PE Digest

d0:8d:5a:79:07:30:d7:4c:9a:a0:d8:be:4b:30:ea:2f:63:c1:2e:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AcquireSRWLockExclusive
AcquireSRWLockShared
CancelWaitableTimer
CreateEventA
CreateEventExA
CreateEventExW
CreateEventW
CreateMutexA
CreateMutexExA
CreateMutexExW
CreateMutexW
CreateSemaphoreExW
CreateWaitableTimerExW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSRWLock
LeaveCriticalSection
OpenEventA
OpenEventW
OpenMutexW
OpenSemaphoreW
OpenWaitableTimerW
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
SetCriticalSectionSpinCount
SetEvent
SetWaitableTimer
SetWaitableTimerEx
SleepEx
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-synch-l1-2-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:15:24:ea:a1:d6:1d:3d:91:f1:86:5e:0c:0c:c8:d3:43:44:f7:c2:8d:48:b3:0b:a3:44:bc:46:09:17:32:4e
Signer

Actual PE Digest

3f:15:24:ea:a1:d6:1d:3d:91:f1:86:5e:0c:0c:c8:d3:43:44:f7:c2:8d:48:b3:0b:a3:44:bc:46:09:17:32:4e

Digest Algorithm

sha256

PE Digest Matches

true

cb:86:87:bc:c8:3c:af:76:84:15:18:44:0c:41:8c:c5:53:0e:c4:a6
Signer

Actual PE Digest

cb:86:87:bc:c8:3c:af:76:84:15:18:44:0c:41:8c:c5:53:0e:c4:a6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DeleteSynchronizationBarrier
EnterSynchronizationBarrier
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitOnceInitialize
InitializeConditionVariable
InitializeSynchronizationBarrier
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-sysinfo-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:7d:33:2a:4d:65:f1:80:6f:b2:ad:1c:47:9f:68:9e:29:26:c1:ab:66:d3:82:c8:e5:4b:1a:98:62:d3:0b:9d
Signer

Actual PE Digest

ad:7d:33:2a:4d:65:f1:80:6f:b2:ad:1c:47:9f:68:9e:29:26:c1:ab:66:d3:82:c8:e5:4b:1a:98:62:d3:0b:9d

Digest Algorithm

sha256

PE Digest Matches

true

60:b6:e5:78:58:cd:a3:e3:03:c3:df:3e:93:c4:d8:3b:89:32:7b:cb
Signer

Actual PE Digest

60:b6:e5:78:58:cd:a3:e3:03:c3:df:3e:93:c4:d8:3b:89:32:7b:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetComputerNameExA
GetComputerNameExW
GetLocalTime
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTickCount
GetTickCount64
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalMemoryStatusEx
SetLocalTime

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-timezone-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:51:04:a6:ec:c1:a4:2b:e8:8f:6f:67:73:05:85:e0:4f:5e:5b:58:11:ef:b7:1b:eb:e1:e6:12:0b:81:71:cc
Signer

Actual PE Digest

1c:51:04:a6:ec:c1:a4:2b:e8:8f:6f:67:73:05:85:e0:4f:5e:5b:58:11:ef:b7:1b:eb:e1:e6:12:0b:81:71:cc

Digest Algorithm

sha256

PE Digest Matches

true

92:9a:d3:e0:55:a4:57:ee:7a:2a:61:e0:f2:e0:d3:d4:53:89:6b:f8
Signer

Actual PE Digest

92:9a:d3:e0:55:a4:57:ee:7a:2a:61:e0:f2:e0:d3:d4:53:89:6b:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

EnumDynamicTimeZoneInformation
FileTimeToSystemTime
GetDynamicTimeZoneInformation
GetDynamicTimeZoneInformationEffectiveYears
GetTimeZoneInformation
GetTimeZoneInformationForYear
SetDynamicTimeZoneInformation
SetTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
SystemTimeToTzSpecificLocalTimeEx
TzSpecificLocalTimeToSystemTime
TzSpecificLocalTimeToSystemTimeEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-core-util-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:d1:ee:2d:f3:08:31:2a:32:f8:3d:80:5a:49:0f:9e:dc:7f:af:23:06:86:ac:16:8f:cc:90:55:1a:87:dd:1a
Signer

Actual PE Digest

c8:d1:ee:2d:f3:08:31:2a:32:f8:3d:80:5a:49:0f:9e:dc:7f:af:23:06:86:ac:16:8f:cc:90:55:1a:87:dd:1a

Digest Algorithm

sha256

PE Digest Matches

true

d6:0e:10:e3:38:0f:44:90:3b:f8:c5:57:c8:d5:eb:d9:38:f7:98:5f
Signer

Actual PE Digest

d6:0e:10:e3:38:0f:44:90:3b:f8:c5:57:c8:d5:eb:d9:38:f7:98:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Beep
DecodePointer
DecodeSystemPointer
EncodePointer
EncodeSystemPointer

Sections

.text
Size: 1024B - Virtual size: 553B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-conio-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:16:a3:b9:76:34:af:a0:e5:22:42:94:1b:ae:46:09:cd:ec:2f:04:9a:0a:8d:89:ca:fc:30:fd:18:ef:35:8c
Signer

Actual PE Digest

12:16:a3:b9:76:34:af:a0:e5:22:42:94:1b:ae:46:09:cd:ec:2f:04:9a:0a:8d:89:ca:fc:30:fd:18:ef:35:8c

Digest Algorithm

sha256

PE Digest Matches

true

ac:ee:fa:db:f3:f2:4d:c4:67:cd:69:a5:4e:9d:e2:61:14:fd:65:c7
Signer

Actual PE Digest

ac:ee:fa:db:f3:f2:4d:c4:67:cd:69:a5:4e:9d:e2:61:14:fd:65:c7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
_cgets
_cgets_s
_cgetws
_cgetws_s
_cputs
_cputws
_getch
_getch_nolock
_getche
_getche_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_putch
_putch_nolock
_putwch
_putwch_nolock
_ungetch
_ungetch_nolock
_ungetwch
_ungetwch_nolock

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-convert-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:1b:8e:67:38:90:17:06:4b:13:44:e4:42:21:32:c7:38:a5:96:3b:8a:98:dd:ca:04:31:b3:73:2f:c5:14:e6
Signer

Actual PE Digest

5c:1b:8e:67:38:90:17:06:4b:13:44:e4:42:21:32:c7:38:a5:96:3b:8a:98:dd:ca:04:31:b3:73:2f:c5:14:e6

Digest Algorithm

sha256

PE Digest Matches

true

fb:60:d2:7c:99:cb:dd:5e:86:f4:c1:88:b8:bf:f9:97:5c:f9:f2:d1
Signer

Actual PE Digest

fb:60:d2:7c:99:cb:dd:5e:86:f4:c1:88:b8:bf:f9:97:5c:f9:f2:d1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

__toascii
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_ecvt
_ecvt_s
_fcvt
_fcvt_s
_gcvt
_gcvt_s
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_itoa
_itoa_s
_itow
_itow_s
_ltoa
_ltoa_s
_ltow
_ltow_s
_strtod_l
_strtof_l
_strtoi64
_strtoi64_l
_strtoimax_l
_strtol_l
_strtold_l
_strtoll_l
_strtoui64
_strtoui64_l
_strtoul_l
_strtoull_l
_strtoumax_l
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_wcstod_l
_wcstof_l
_wcstoi64
_wcstoi64_l
_wcstoimax_l
_wcstol_l
_wcstold_l
_wcstoll_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcstoull_l
_wcstoumax_l
_wctomb_l
_wctomb_s_l
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wtoll
_wtoll_l
atof
atoi
atol
atoll
btowc
c16rtomb
c32rtomb
mbrtoc16
mbrtoc32
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
strtod
strtof
strtoimax
strtol
strtold
strtoll
strtoul
strtoull
strtoumax
wcrtomb
wcrtomb_s
wcsrtombs
wcsrtombs_s
wcstod
wcstof
wcstoimax
wcstol
wcstold
wcstoll
wcstombs
wcstombs_s
wcstoul
wcstoull
wcstoumax
wctob
wctomb
wctomb_s
wctrans

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-environment-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:7e:bb:d5:13:e7:c9:48:a5:98:99:b4:aa:aa:8a:e2:3d:38:d1:6a:85:ea:aa:b1:95:e2:00:82:56:b1:bb:0d
Signer

Actual PE Digest

e6:7e:bb:d5:13:e7:c9:48:a5:98:99:b4:aa:aa:8a:e2:3d:38:d1:6a:85:ea:aa:b1:95:e2:00:82:56:b1:bb:0d

Digest Algorithm

sha256

PE Digest Matches

true

ae:9d:82:09:9d:b2:6f:34:fe:88:ef:4e:ff:12:78:1b:fe:6e:41:32
Signer

Actual PE Digest

ae:9d:82:09:9d:b2:6f:34:fe:88:ef:4e:ff:12:78:1b:fe:6e:41:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

__p__environ
__p__wenviron
_dupenv_s
_putenv
_putenv_s
_searchenv
_searchenv_s
_wdupenv_s
_wgetcwd
_wgetdcwd
_wgetenv
_wgetenv_s
_wputenv
_wputenv_s
_wsearchenv
_wsearchenv_s
getenv
getenv_s

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-filesystem-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:02:f6:ca:4a:2b:db:b3:4c:45:59:61:03:a4:cc:f2:39:cc:55:84:db:86:f1:26:c4:c8:6b:85:5c:47:66:38
Signer

Actual PE Digest

d6:02:f6:ca:4a:2b:db:b3:4c:45:59:61:03:a4:cc:f2:39:cc:55:84:db:86:f1:26:c4:c8:6b:85:5c:47:66:38

Digest Algorithm

sha256

PE Digest Matches

true

8a:82:cf:c1:79:e2:5c:3d:37:da:4c:4b:6b:b8:7a:8c:80:2f:b6:1e
Signer

Actual PE Digest

8a:82:cf:c1:79:e2:5c:3d:37:da:4c:4b:6b:b8:7a:8c:80:2f:b6:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_access
_access_s
_chdir
_chdrive
_chmod
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_fullpath
_getdiskfree
_getdrive
_getdrives
_lock_file
_makepath
_makepath_s
_mkdir
_rmdir
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_umask
_umask_s
_unlink
_unlock_file
_waccess
_waccess_s
_wchdir
_wchmod
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfullpath
_wmakepath
_wmakepath_s
_wmkdir
_wremove
_wrename
_wrmdir
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wunlink
remove
rename

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-heap-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:7e:e1:b2:ef:d7:6c:2c:bb:57:f7:5f:1f:18:2a:47:ea:9b:27:5f:54:b4:68:6e:1b:82:bc:b9:12:f4:db:4b
Signer

Actual PE Digest

10:7e:e1:b2:ef:d7:6c:2c:bb:57:f7:5f:1f:18:2a:47:ea:9b:27:5f:54:b4:68:6e:1b:82:bc:b9:12:f4:db:4b

Digest Algorithm

sha256

PE Digest Matches

true

91:8b:66:5b:76:90:f7:82:34:06:8c:1e:88:ec:93:d0:7b:47:7d:c8
Signer

Actual PE Digest

91:8b:66:5b:76:90:f7:82:34:06:8c:1e:88:ec:93:d0:7b:47:7d:c8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_callnewh
_calloc_base
_expand
_free_base
_get_heap_handle
_heapchk
_heapmin
_heapwalk
_malloc_base
_msize
_query_new_handler
_query_new_mode
_realloc_base
_recalloc
_set_new_mode
calloc
free
malloc
realloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-locale-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:85:3e:2e:e5:b7:1e:99:27:7f:5e:0b:9f:2d:4d:e0:08:11:1e:09:13:76:ce:65:fa:b2:9d:f6:17:15:48:30
Signer

Actual PE Digest

91:85:3e:2e:e5:b7:1e:99:27:7f:5e:0b:9f:2d:4d:e0:08:11:1e:09:13:76:ce:65:fa:b2:9d:f6:17:15:48:30

Digest Algorithm

sha256

PE Digest Matches

true

8d:0c:52:28:e2:4a:82:00:30:95:01:ca:a1:31:b5:4d:57:55:25:1a
Signer

Actual PE Digest

8d:0c:52:28:e2:4a:82:00:30:95:01:ca:a1:31:b5:4d:57:55:25:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__initialize_lconv_for_unsigned_char
__pctype_func
__pwctype_func
_configthreadlocale
_create_locale
_free_locale
_get_current_locale
_getmbcp
_lock_locales
_setmbcp
_unlock_locales
_wcreate_locale
_wsetlocale
localeconv
setlocale

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-math-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:55:1d:27:93:53:d6:24:2d:74:90:3b:e9:48:cd:f7:e2:69:12:bc:b3:89:4e:01:36:d4:ec:75:f0:eb:5b:f2
Signer

Actual PE Digest

92:55:1d:27:93:53:d6:24:2d:74:90:3b:e9:48:cd:f7:e2:69:12:bc:b3:89:4e:01:36:d4:ec:75:f0:eb:5b:f2

Digest Algorithm

sha256

PE Digest Matches

true

9e:95:34:9b:50:83:e9:a0:b3:b9:9b:91:9a:e7:b0:d8:95:5c:60:09
Signer

Actual PE Digest

9e:95:34:9b:50:83:e9:a0:b3:b9:9b:91:9a:e7:b0:d8:95:5c:60:09

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_Cbuild
_Cmulcc
_Cmulcr
_FCbuild
_FCmulcc
_FCmulcr
_LCbuild
_LCmulcc
_LCmulcr
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__setusermatherr
_cabs
_chgsign
_chgsignf
_copysign
_copysignf
_d_int
_dclass
_dexp
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_except1
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_finite
_fpclass
_ftol
_hypot
_hypotf
_isnan
_j0
_j1
_jn
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_logb
_nextafter
_scalb
_set_SSE2_enable
_y0
_y1
_yn
acos
acosh
acoshf
acoshl
asin
asinh
asinhf
asinhl
atan
atan2
atanh
atanhf
atanhl
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
cexp
cexpf
cexpl
cimag
cimagf
cimagl
clog
clog10
clog10f
clog10l
clogf
clogl
conj
conjf
conjl
copysign
copysignf
copysignl
cos
cosh
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
erf
erfc
erfcf
erfcl
erff
erfl
exp
exp2
exp2f
exp2l
expm1
expm1f
expm1l
fabs
fdim
fdimf
fdiml
floor
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmin
fminf
fminl
fmod
frexp
hypot
ilogb
ilogbf
ilogbl
ldexp
lgamma
lgammaf
lgammal
llrint
llrintf
llrintl
llround
llroundf
llroundl
log
log10
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
lrint
lrintf
lrintl
lround
lroundf
lroundl
modf
nan
nanf
nanl
nearbyint
nearbyintf
nearbyintl
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
norm
normf
norml
pow
powf
remainder
remainderf
remainderl
remquo
remquof
remquol
rint
rintf
rintl
round
roundf
roundl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
sin
sinh
sqrt
tan
tanh
tgamma
tgammaf
tgammal
trunc
truncf
truncl

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-multibyte-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:90:d4:41:77:ff:e2:ad:76:8b:71:b8:2f:4e:f1:e1:77:81:a2:39:5d:65:d0:29:3b:73:ae:49:30:7c:7d:55
Signer

Actual PE Digest

4f:90:d4:41:77:ff:e2:ad:76:8b:71:b8:2f:4e:f1:e1:77:81:a2:39:5d:65:d0:29:3b:73:ae:49:30:7c:7d:55

Digest Algorithm

sha256

PE Digest Matches

true

c9:c1:56:2c:b7:02:9e:42:ba:a8:42:c4:40:9f:3c:66:5e:92:d5:d9
Signer

Actual PE Digest

c9:c1:56:2c:b7:02:9e:42:ba:a8:42:c4:40:9f:3c:66:5e:92:d5:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

__p__mbcasemap
__p__mbctype
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsdup
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-private-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:71:58:0d:4a:e3:67:aa:cf:e9:37:12:d7:2e:3b:af:e1:01:0d:3c:1b:4f:a7:99:c3:18:1d:1f:a6:89:db:25
Signer

Actual PE Digest

0d:71:58:0d:4a:e3:67:aa:cf:e9:37:12:d7:2e:3b:af:e1:01:0d:3c:1b:4f:a7:99:c3:18:1d:1f:a6:89:db:25

Digest Algorithm

sha256

PE Digest Matches

true

de:59:6d:66:b3:52:99:3b:b0:d0:b9:54:09:00:8f:35:eb:a7:46:1b
Signer

Actual PE Digest

de:59:6d:66:b3:52:99:3b:b0:d0:b9:54:09:00:8f:35:eb:a7:46:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__intrinsic_abnormal_termination
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_o__CIacos
_o__CIasin
_o__CIatan
_o__CIatan2
_o__CIcos
_o__CIcosh
_o__CIexp
_o__CIfmod
_o__CIlog
_o__CIlog10
_o__CIpow
_o__CIsin
_o__CIsinh
_o__CIsqrt
_o__CItan
_o__CItanh
_o__Getdays
_o__Getmonths
_o__Gettnames
_o__Strftime
_o__W_Getdays
_o__W_Getmonths
_o__W_Gettnames
_o__Wcsftime
_o____lc_codepage_func
_o____lc_collate_cp_func
_o____lc_locale_name_func
_o____mb_cur_max_func
_o___acrt_iob_func
_o___conio_common_vcprintf
_o___conio_common_vcprintf_p
_o___conio_common_vcprintf_s
_o___conio_common_vcscanf
_o___conio_common_vcwprintf
_o___conio_common_vcwprintf_p
_o___conio_common_vcwprintf_s
_o___conio_common_vcwscanf
_o___daylight
_o___dstbias
_o___fpe_flt_rounds
_o___libm_sse2_acos
_o___libm_sse2_acosf
_o___libm_sse2_asin
_o___libm_sse2_asinf
_o___libm_sse2_atan
_o___libm_sse2_atan2
_o___libm_sse2_atanf
_o___libm_sse2_cos
_o___libm_sse2_cosf
_o___libm_sse2_exp
_o___libm_sse2_expf
_o___libm_sse2_log
_o___libm_sse2_log10
_o___libm_sse2_log10f
_o___libm_sse2_logf
_o___libm_sse2_pow
_o___libm_sse2_powf
_o___libm_sse2_sin
_o___libm_sse2_sinf
_o___libm_sse2_tan
_o___libm_sse2_tanf
_o___p___argc
_o___p___argv
_o___p___wargv
_o___p__acmdln
_o___p__commode
_o___p__environ
_o___p__fmode
_o___p__mbcasemap
_o___p__mbctype
_o___p__pgmptr
_o___p__wcmdln
_o___p__wenviron
_o___p__wpgmptr
_o___pctype_func
_o___pwctype_func
_o___std_exception_copy
_o___std_exception_destroy
_o___std_type_info_destroy_list
_o___std_type_info_name
_o___stdio_common_vfprintf
_o___stdio_common_vfprintf_p
_o___stdio_common_vfprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfwprintf
_o___stdio_common_vfwprintf_p
_o___stdio_common_vfwprintf_s
_o___stdio_common_vfwscanf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsprintf_p
_o___stdio_common_vsprintf_s
_o___stdio_common_vsscanf
_o___stdio_common_vswprintf
_o___stdio_common_vswprintf_p
_o___stdio_common_vswprintf_s
_o___stdio_common_vswscanf
_o___timezone
_o___tzname
_o___wcserror
_o__access
_o__access_s
_o__aligned_free
_o__aligned_malloc
_o__aligned_msize
_o__aligned_offset_malloc
_o__aligned_offset_realloc
_o__aligned_offset_recalloc
_o__aligned_realloc
_o__aligned_recalloc
_o__atodbl
_o__atodbl_l
_o__atof_l
_o__atoflt
_o__atoflt_l
_o__atoi64
_o__atoi64_l
_o__atoi_l
_o__atol_l
_o__atoldbl
_o__atoldbl_l
_o__atoll_l
_o__beep
_o__beginthread
_o__beginthreadex
_o__cabs
_o__callnewh
_o__calloc_base
_o__cexit
_o__cgets
_o__cgets_s
_o__cgetws
_o__cgetws_s
_o__chdir
_o__chdrive
_o__chmod
_o__chsize
_o__chsize_s
_o__close
_o__commit
_o__configthreadlocale
_o__configure_narrow_argv
_o__configure_wide_argv
_o__controlfp_s
_o__cputs
_o__cputws
_o__creat
_o__create_locale
_o__crt_atexit
_o__ctime32_s
_o__ctime64_s
_o__cwait
_o__d_int
_o__dclass
_o__difftime32
_o__difftime64
_o__dlog
_o__dnorm
_o__dpcomp
_o__dpoly
_o__dscale
_o__dsign
_o__dsin
_o__dtest
_o__dunscale
_o__dup
_o__dup2
_o__dupenv_s
_o__ecvt
_o__ecvt_s
_o__endthread
_o__endthreadex
_o__eof
_o__errno
_o__except1
_o__execute_onexit_table
_o__execv
_o__execve
_o__execvp
_o__execvpe
_o__exit
_o__expand
_o__fclose_nolock
_o__fcloseall
_o__fcvt
_o__fcvt_s
_o__fd_int
_o__fdclass
_o__fdexp
_o__fdlog
_o__fdopen
_o__fdpcomp
_o__fdpoly
_o__fdscale
_o__fdsign
_o__fdsin
_o__fflush_nolock
_o__fgetc_nolock
_o__fgetchar
_o__fgetwc_nolock
_o__fgetwchar
_o__filelength
_o__filelengthi64
_o__fileno
_o__findclose
_o__findfirst32
_o__findfirst32i64
_o__findfirst64
_o__findfirst64i32
_o__findnext32
_o__findnext32i64
_o__findnext64
_o__findnext64i32
_o__flushall
_o__fpclass
_o__fputc_nolock
_o__fputchar
_o__fputwc_nolock
_o__fputwchar
_o__fread_nolock
_o__fread_nolock_s
_o__free_base
_o__free_locale
_o__fseek_nolock
_o__fseeki64
_o__fseeki64_nolock
_o__fsopen
_o__fstat32
_o__fstat32i64
_o__fstat64
_o__fstat64i32
_o__ftell_nolock
_o__ftelli64
_o__ftelli64_nolock
_o__ftime32
_o__ftime32_s
_o__ftime64
_o__ftime64_s
_o__fullpath
_o__futime32
_o__futime64
_o__fwrite_nolock
_o__gcvt
_o__gcvt_s
_o__get_daylight
_o__get_doserrno
_o__get_dstbias
_o__get_errno
_o__get_fmode
_o__get_heap_handle
_o__get_initial_narrow_environment
_o__get_initial_wide_environment
_o__get_invalid_parameter_handler
_o__get_narrow_winmain_command_line
_o__get_osfhandle
_o__get_pgmptr
_o__get_stream_buffer_pointers
_o__get_terminate
_o__get_thread_local_invalid_parameter_handler
_o__get_timezone
_o__get_tzname
_o__get_wide_winmain_command_line
_o__get_wpgmptr
_o__getc_nolock
_o__getch
_o__getch_nolock
_o__getche
_o__getche_nolock
_o__getcwd
_o__getdcwd
_o__getdiskfree
_o__getdllprocaddr
_o__getdrive
_o__getdrives
_o__getmbcp
_o__getsystime
_o__getw
_o__getwc_nolock
_o__getwch
_o__getwch_nolock
_o__getwche
_o__getwche_nolock
_o__getws
_o__getws_s
_o__gmtime32
_o__gmtime32_s
_o__gmtime64
_o__gmtime64_s
_o__heapchk
_o__heapmin
_o__hypot
_o__hypotf
_o__i64toa
_o__i64toa_s
_o__i64tow
_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__isatty
_o__isctype
_o__isctype_l
_o__isleadbyte_l
_o__ismbbalnum
_o__ismbbalnum_l
_o__ismbbalpha
_o__ismbbalpha_l
_o__ismbbblank
_o__ismbbblank_l
_o__ismbbgraph
_o__ismbbgraph_l
_o__ismbbkalnum
_o__ismbbkalnum_l
_o__ismbbkana
_o__ismbbkana_l
_o__ismbbkprint
_o__ismbbkprint_l
_o__ismbbkpunct
_o__ismbbkpunct_l
_o__ismbblead
_o__ismbblead_l
_o__ismbbprint
_o__ismbbprint_l
_o__ismbbpunct
_o__ismbbpunct_l
_o__ismbbtrail
_o__ismbbtrail_l
_o__ismbcalnum
_o__ismbcalnum_l
_o__ismbcalpha
_o__ismbcalpha_l
_o__ismbcblank
_o__ismbcblank_l
_o__ismbcdigit
_o__ismbcdigit_l
_o__ismbcgraph
_o__ismbcgraph_l
_o__ismbchira
_o__ismbchira_l
_o__ismbckata
_o__ismbckata_l
_o__ismbcl0
_o__ismbcl0_l
_o__ismbcl1
_o__ismbcl1_l
_o__ismbcl2
_o__ismbcl2_l
_o__ismbclegal
_o__ismbclegal_l
_o__ismbclower
_o__ismbclower_l
_o__ismbcprint
_o__ismbcprint_l
_o__ismbcpunct
_o__ismbcpunct_l
_o__ismbcspace
_o__ismbcspace_l
_o__ismbcsymbol
_o__ismbcsymbol_l
_o__ismbcupper
_o__ismbcupper_l
_o__ismbslead
_o__ismbslead_l
_o__ismbstrail
_o__ismbstrail_l
_o__iswctype_l
_o__itoa
_o__itoa_s
_o__itow
_o__itow_s
_o__j0
_o__j1
_o__jn
_o__kbhit
_o__ld_int
_o__ldclass
_o__ldexp
_o__ldlog
_o__ldpcomp
_o__ldpoly
_o__ldscale
_o__ldsign
_o__ldsin
_o__ldtest
_o__ldunscale
_o__lfind
_o__lfind_s
_o__libm_sse2_acos_precise
_o__libm_sse2_asin_precise
_o__libm_sse2_atan_precise
_o__libm_sse2_cos_precise
_o__libm_sse2_exp_precise
_o__libm_sse2_log10_precise
_o__libm_sse2_log_precise
_o__libm_sse2_pow_precise
_o__libm_sse2_sin_precise
_o__libm_sse2_sqrt_precise
_o__libm_sse2_tan_precise
_o__loaddll
_o__localtime32
_o__localtime32_s
_o__localtime64
_o__localtime64_s
_o__lock_file
_o__locking
_o__logb
_o__lsearch
_o__lsearch_s
_o__lseek
_o__lseeki64
_o__ltoa
_o__ltoa_s
_o__ltow
_o__ltow_s
_o__makepath
_o__makepath_s
_o__malloc_base
_o__mbbtombc
_o__mbbtombc_l
_o__mbbtype
_o__mbbtype_l
_o__mbccpy
_o__mbccpy_l
_o__mbccpy_s
_o__mbccpy_s_l
_o__mbcjistojms
_o__mbcjistojms_l
_o__mbcjmstojis
_o__mbcjmstojis_l
_o__mbclen
_o__mbclen_l
_o__mbctohira
_o__mbctohira_l
_o__mbctokata
_o__mbctokata_l
_o__mbctolower
_o__mbctolower_l
_o__mbctombb
_o__mbctombb_l

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-process-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:63:6e:87:9b:a5:cb:30:9c:9a:09:38:39:5e:35:eb:7d:71:f1:aa:40:35:51:b6:f4:d0:b2:85:34:4d:36:f6
Signer

Actual PE Digest

2e:63:6e:87:9b:a5:cb:30:9c:9a:09:38:39:5e:35:eb:7d:71:f1:aa:40:35:51:b6:f4:d0:b2:85:34:4d:36:f6

Digest Algorithm

sha256

PE Digest Matches

true

ba:d6:aa:a7:c0:ca:94:b5:e3:ea:82:f2:b9:08:2d:49:d6:96:53:93
Signer

Actual PE Digest

ba:d6:aa:a7:c0:ca:94:b5:e3:ea:82:f2:b9:08:2d:49:d6:96:53:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_beep
_cwait
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_loaddll
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_unloaddll
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-runtime-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:bc:dc:ba:b9:a8:cf:4e:2b:13:a4:72:75:80:30:32:ec:08:94:88:9b:10:46:a1:f7:2b:61:2d:c7:bb:32:33
Signer

Actual PE Digest

2a:bc:dc:ba:b9:a8:cf:4e:2b:13:a4:72:75:80:30:32:ec:08:94:88:9b:10:46:a1:f7:2b:61:2d:c7:bb:32:33

Digest Algorithm

sha256

PE Digest Matches

true

ba:ae:b0:15:09:34:f0:6e:e3:60:e8:84:c2:69:04:31:c4:0e:98:ca
Signer

Actual PE Digest

ba:ae:b0:15:09:34:f0:6e:e3:60:e8:84:c2:69:04:31:c4:0e:98:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_Exit
__control87_2
__doserrno
__fpe_flt_rounds
__fpecode
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__pgmptr
__p__wcmdln
__p__wpgmptr
__pxcptinfoptrs
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__wcserror
__wcserror_s
_assert
_beginthread
_beginthreadex
_c_exit
_cexit
_clearfp
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_crt_at_quick_exit
_crt_atexit
_crt_debugger_hook
_endthread
_endthreadex
_errno
_execute_onexit_table
_exit
_fpieee_flt
_fpreset
_get_doserrno
_get_errno
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_pgmptr
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_wide_winmain_command_line
_get_wpgmptr
_getdllprocaddr
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_query_app_type
_register_onexit_function
_register_thread_local_exe_atexit_callback
_resetstkoflw
_seh_filter_dll
_seh_filter_exe
_set_abort_behavior
_set_app_type
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_invalid_parameter_handler
_set_new_handler
_set_thread_local_invalid_parameter_handler
_seterrormode
_sleep
_statusfp
_statusfp2
_strerror
_strerror_s
_wassert
_wcserror
_wcserror_s
_wperror
_wsystem
abort
exit
feclearexcept
fegetenv
fegetexceptflag
fegetround
feholdexcept
fesetenv
fesetexceptflag
fesetround
fetestexcept
perror
quick_exit
raise
set_terminate
signal
strerror
strerror_s
system
terminate

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-stdio-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

22:00:0f:21:d9:dd:44:d3:3d:24:5b:04:35:3a:7f:d4:2b:1b:13:7d:06:5d:4c:88:4c:aa:86:f5:cd:e9:3f:bc
Signer

Actual PE Digest

22:00:0f:21:d9:dd:44:d3:3d:24:5b:04:35:3a:7f:d4:2b:1b:13:7d:06:5d:4c:88:4c:aa:86:f5:cd:e9:3f:bc

Digest Algorithm

sha256

PE Digest Matches

true

14:9e:94:d0:f7:85:bd:c1:0c:d6:3e:29:96:51:93:34:02:37:ac:06
Signer

Actual PE Digest

14:9e:94:d0:f7:85:bd:c1:0c:d6:3e:29:96:51:93:34:02:37:ac:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
_chsize
_chsize_s
_close
_commit
_creat
_dup
_dup2
_eof
_fclose_nolock
_fcloseall
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_flushall
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_ftell_nolock
_ftelli64
_ftelli64_nolock
_fwrite_nolock
_get_fmode
_get_osfhandle
_get_printf_count_output
_get_stream_buffer_pointers
_getc_nolock
_getcwd
_getdcwd
_getmaxstdio
_getw
_getwc_nolock
_getws
_getws_s
_isatty
_kbhit
_locking
_lseek
_lseeki64
_mktemp
_mktemp_s
_open
_open_osfhandle
_pclose
_pipe
_popen
_putc_nolock
_putw
_putwc_nolock
_putws
_read
_rmtmp
_set_fmode
_set_printf_count_output
_setmaxstdio
_setmode
_sopen
_sopen_dispatch
_sopen_s
_tell
_telli64
_tempnam
_ungetc_nolock
_ungetwc_nolock
_wcreat
_wfdopen
_wfopen
_wfopen_s
_wfreopen
_wfreopen_s
_wfsopen
_wmktemp
_wmktemp_s
_wopen
_wpopen
_write
_wsopen
_wsopen_dispatch
_wsopen_s
_wtempnam
_wtmpnam
_wtmpnam_s
clearerr
clearerr_s
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
fopen
fopen_s
fputc
fputs
fputwc
fputws
fread
fread_s
freopen
freopen_s
fseek
fsetpos
ftell
fwrite
getc
getchar
gets
gets_s
getwc
getwchar
putc
putchar
puts
putwc
putwchar
rewind
setbuf
setvbuf
tmpfile
tmpfile_s
tmpnam
tmpnam_s
ungetc
ungetwc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-string-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f5:7c:a4:58:8c:d4:45:bd:d9:5c:fa:a3:e9:09:03:cc:48:cf:81:60:0f:10:3b:86:e3:c8:fb:ab:e8:79:37:d4
Signer

Actual PE Digest

f5:7c:a4:58:8c:d4:45:bd:d9:5c:fa:a3:e9:09:03:cc:48:cf:81:60:0f:10:3b:86:e3:c8:fb:ab:e8:79:37:d4

Digest Algorithm

sha256

PE Digest Matches

true

b7:2b:fe:8f:d7:95:81:21:f6:7d:c0:73:31:e3:24:80:9e:2c:44:bf
Signer

Actual PE Digest

b7:2b:fe:8f:d7:95:81:21:f6:7d:c0:73:31:e3:24:80:9e:2c:44:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__strncnt
__wcsncnt
_isalnum_l
_isalpha_l
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_memccpy
_memicmp
_memicmp_l
_strcoll_l
_strdup
_stricmp
_stricmp_l
_stricoll
_stricoll_l
_strlwr
_strlwr_l
_strlwr_s
_strlwr_s_l
_strncoll
_strncoll_l
_strnicmp
_strnicmp_l
_strnicoll
_strnicoll_l
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strupr
_strupr_l
_strupr_s
_strupr_s_l
_strxfrm_l
_tolower
_tolower_l
_toupper
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsdup
_wcsicmp
_wcsicmp_l
_wcsicoll
_wcsicoll_l
_wcslwr
_wcslwr_l
_wcslwr_s
_wcslwr_s_l
_wcsncoll
_wcsncoll_l
_wcsnicmp
_wcsnicmp_l
_wcsnicoll
_wcsnicoll_l
_wcsnset
_wcsnset_s
_wcsrev
_wcsset
_wcsset_s
_wcsupr
_wcsupr_l
_wcsupr_s
_wcsupr_s_l
_wcsxfrm_l
_wctype
is_wctype
isalnum
isalpha
isblank
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswblank
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
mblen
mbrlen
memcpy_s
memmove_s
memset
strcat
strcat_s
strcmp
strcoll
strcpy
strcpy_s
strcspn
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strspn
strtok
strtok_s
strxfrm
tolower
toupper
towctrans
towlower
towupper
wcscat
wcscat_s
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcspbrk
wcsspn
wcstok
wcstok_s
wcsxfrm
wctype
wmemcpy_s
wmemmove_s

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-time-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bd:89:2a:b2:f9:9f:08:70:fb:0a:bf:9d:eb:43:fb:76:48:94:b7:25:d7:d0:90:93:46:cb:93:73:76:9b:e6:d8
Signer

Actual PE Digest

bd:89:2a:b2:f9:9f:08:70:fb:0a:bf:9d:eb:43:fb:76:48:94:b7:25:d7:d0:90:93:46:cb:93:73:76:9b:e6:d8

Digest Algorithm

sha256

PE Digest Matches

true

be:28:f1:e5:ff:79:f9:42:d7:a9:e4:bc:b5:99:e6:01:18:53:7e:97
Signer

Actual PE Digest

be:28:f1:e5:ff:79:f9:42:d7:a9:e4:bc:b5:99:e6:01:18:53:7e:97

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_Getdays
_Getmonths
_Gettnames
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__daylight
__dstbias
__timezone
__tzname
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_difftime32
_difftime64
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_futime32
_futime64
_get_daylight
_get_dstbias
_get_timezone
_get_tzname
_getsystime
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_localtime32
_localtime32_s
_localtime64
_localtime64_s
_mkgmtime32
_mkgmtime64
_mktime32
_mktime64
_setsystime
_strdate
_strdate_s
_strftime_l
_strtime
_strtime_s
_time32
_time64
_timespec32_get
_timespec64_get
_tzset
_utime32
_utime64
_wasctime
_wasctime_s
_wcsftime_l
_wctime32
_wctime32_s
_wctime64
_wctime64_s
_wstrdate
_wstrdate_s
_wstrtime
_wstrtime_s
_wutime32
_wutime64
asctime
asctime_s
clock
strftime
wcsftime

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/api-ms-win-crt-utility-l1-1-0.dll
.dll windows:10 windows x86

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:c9:c0:03:7c:02:e4:41:e7:5c:54:80:77:b3:4a:ce:6f:31:08:0b:0f:78:32:17:b5:05:44:f0:94:56:f9:81
Signer

Actual PE Digest

49:c9:c0:03:7c:02:e4:41:e7:5c:54:80:77:b3:4a:ce:6f:31:08:0b:0f:78:32:17:b5:05:44:f0:94:56:f9:81

Digest Algorithm

sha256

PE Digest Matches

true

89:42:1c:5c:0b:f3:55:88:03:1e:5f:a4:db:77:43:33:50:40:7f:1f
Signer

Actual PE Digest

89:42:1c:5c:0b:f3:55:88:03:1e:5f:a4:db:77:43:33:50:40:7f:1f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_abs64
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_lfind
_lfind_s
_lrotl
_lrotr
_lsearch
_lsearch_s
_rotl
_rotl64
_rotr
_rotr64
_swab
abs
bsearch
bsearch_s
div
imaxabs
imaxdiv
labs
ldiv
llabs
lldiv
qsort
qsort_s
rand
rand_s
srand

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/application.ini
Basilisk Portable with Flash/Bin/basilisk/basilisk.VisualElementsManifest.xml
Basilisk Portable with Flash/Bin/basilisk/basilisk.exe
.exe windows:6 windows x86

79cff5917b705b051e37b89e2c60f432

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:e8:82:de:f1:ed:bf:62:53:8e:5a:f8:d1:94:ad:93:bd:ec:ab:7b:52:56:27:06:c8:d8:8e:0c:ad:fb:e6:9f
Signer

Actual PE Digest

3d:e8:82:de:f1:ed:bf:62:53:8e:5a:f8:d1:94:ad:93:bd:ec:ab:7b:52:56:27:06:c8:d8:8e:0c:ad:fb:e6:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mozglue

?DllBlocklist_CheckStatus@@YA_NXZ
?DllBlocklist_Initialize@@YAXXZ
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
strdup

kernel32

TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileAttributesW
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
SetDllDirectoryW
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryExW
CreateFileW
ReadFile
SetFilePointerEx
CloseHandle
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter

vcruntime140

_CxxThrowException
__std_exception_destroy
__std_exception_copy
_except_handler4_common
strrchr
memcpy
memset

api-ms-win-crt-string-l1-1-0

_stricmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__p__commode
_set_fmode
fgets
fclose
_wfopen
__stdio_common_vsnprintf_s

api-ms-win-crt-environment-l1-1-0

__p__environ
getenv
_putenv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-runtime-l1-1-0

_exit
_get_initial_wide_environment
__p___argc
__p___wargv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_wide_environment
_configure_wide_argv
exit
_initterm_e
_set_app_type
_seh_filter_exe
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_initterm

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh
_set_new_mode

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/browser/VisualElements/VisualElements_150.png
.png
Basilisk Portable with Flash/Bin/basilisk/browser/VisualElements/VisualElements_70.png
.png
Basilisk Portable with Flash/Bin/basilisk/browser/blocklist.xml
.xml
Basilisk Portable with Flash/Bin/basilisk/browser/chrome.manifest
Basilisk Portable with Flash/Bin/basilisk/browser/components/browsercomps.dll
.dll windows:6 windows x86

49515796a9aec3d8365d0ca01d07c0c1

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:51:99:b7:08:15:56:8a:59:f1:06:55:96:e8:6b:e6:82:b3:10:9d:c8:f1:c9:e0:a1:2b:eb:74:67:f3:4c:b8
Signer

Actual PE Digest

bc:51:99:b7:08:15:56:8a:59:f1:06:55:96:e8:6b:e6:82:b3:10:9d:c8:f1:c9:e0:a1:2b:eb:74:67:f3:4c:b8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nss3

PR_ImplodeTime

xul

NS_GetComponentManager
NS_GetServiceManager
NS_CStringGetMutableData
NS_StringGetMutableData
NS_DebugBreak
NS_CStringToUTF16
NS_StringCopy
NS_StringSetData
NS_StringGetData
NS_CStringSetDataRange
NS_UTF16ToCString
NS_CStringContainerInit2
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_CStringCopy
NS_CStringSetData
NS_CStringGetData
NS_CStringContainerFinish
NS_CStringContainerInit
NS_StringSetDataRange

mozglue

MOZ_CrashPrintf
realloc
moz_xrealloc
moz_xmalloc
free

kernel32

IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CreateEventW
DeleteCriticalSection
LoadLibraryExA
GetModuleHandleW
VirtualQuery
VirtualProtect
GetSystemInfo
GetLastError
RaiseException
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
VerifyVersionInfoA
LoadLibraryW
FileTimeToSystemTime
VerSetConditionMask
GetEnvironmentVariableW
GetLongPathNameW
CloseHandle
CreateProcessW
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetProcAddress

user32

SetSysColors
GetSysColor
SystemParametersInfoW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
GetUserNameW

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance

shell32

ShellExecuteExW

shlwapi

SHDeleteKeyW
PathAppendW

vcruntime140

memset
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
_except_handler4_common
memcpy
memmove

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-math-l1-1-0

_except1

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm_e
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm

Exports

Exports

NSModule

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/browser/components/components.manifest
Basilisk Portable with Flash/Bin/basilisk/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
.zip
Basilisk Portable with Flash/Bin/basilisk/browser/omni.ja
Basilisk Portable with Flash/Bin/basilisk/d3dcompiler_47.dll
.dll windows:10 windows x86

7164b225185485aa67b055730bc2f969

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:0c:d1:3a:75:23:6f:db:b7:71:56:cd:72:85:95:9a:75:04:65:6a:0e:01:fb:04:68:ca:d8:10:b7:b1:0e:30
Signer

Actual PE Digest

cc:0c:d1:3a:75:23:6f:db:b7:71:56:cd:72:85:95:9a:75:04:65:6a:0e:01:fb:04:68:ca:d8:10:b7:b1:0e:30

Digest Algorithm

sha256

PE Digest Matches

true

dd:81:51:cb:b7:1f:3f:f7:c8:53:bf:ab:01:98:92:b1:c0:c1:09:17
Signer

Actual PE Digest

dd:81:51:cb:b7:1f:3f:f7:c8:53:bf:ab:01:98:92:b1:c0:c1:09:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

api-ms-win-crt-string-l1-1-0

wcsncmp
strnlen
__isascii
memset
strncmp

api-ms-win-crt-math-l1-1-0

_finite
_isnan

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_clearfp
_controlfp

api-ms-win-crt-private-l1-1-0

_o__atoi64
_o__callnewh
_o__cexit
_o__chsize_s
_o__CIacos
_o__CIasin
_o__CIatan
_o__CIatan2
_o__CIcos
_o__CIcosh
_o__CIexp
_o__CIfmod
_o__CIlog
_o__CIpow
_o__CIsin
_o__CIsinh
_o__CIsqrt
_o__CItan
_o__CItanh
_o__close
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__filelengthi64
_o__fpclass
_o__get_osfhandle
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__lseeki64
_o__mbscmp
_o__mbstrlen
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__write
_o__wsopen_s
_o__wsplitpath_s
_o__wtoi
_o_atof
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_fclose
_o_floor
_o_fread
_o_free
_o_fseek
_o_ftell
_o_getenv
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_isxdigit
_o_malloc
_o_modf
_o_qsort
_o_setlocale
_o_strcat_s
_o_strcpy_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
strrchr
strchr
_except_handler4_common
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
strstr
__unDName
wcschr
wcsrchr
__CxxFrameHandler3

kernel32

CreateFileA
FlushViewOfFile
MapViewOfFileEx
SetFilePointer
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LCMapStringW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
lstrcmpiA
LocalFree
LocalAlloc
HeapCreate
GetProcAddress
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
CloseHandle
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
GetSystemInfo
VirtualAlloc
VirtualFree
FreeLibrary
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
LoadLibraryExW
GetEnvironmentVariableA

advapi32

CryptDestroyHash
RegEnumKeyExA
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegCloseKey
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA

api-ms-win-crt-time-l1-1-0

_time32

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/defaults/pref/channel-prefs.js
Basilisk Portable with Flash/Bin/basilisk/dependentlibs.list
Basilisk Portable with Flash/Bin/basilisk/dictionaries/en-US.aff
Basilisk Portable with Flash/Bin/basilisk/dictionaries/en-US.dic
Basilisk Portable with Flash/Bin/basilisk/fonts/TwemojiMozilla.ttf
Basilisk Portable with Flash/Bin/basilisk/freebl3.chk
Basilisk Portable with Flash/Bin/basilisk/freebl3.dll
.dll windows:6 windows x86

e29d62ae222b2e248dde61071de7e7fb

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

66:96:67:38:a5:ef:29:f7:c3:fd:e1:04:8f:97:f2:c2:df:55:1f:91:74:e7:be:ee:0c:68:3d:f7:25:1e:ef:1e
Signer

Actual PE Digest

66:96:67:38:a5:ef:29:f7:c3:fd:e1:04:8f:97:f2:c2:df:55:1f:91:74:e7:be:ee:0c:68:3d:f7:25:1e:ef:1e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nss3

PR_DestroyCondVar
PR_NewCondVar
SECITEM_CompareItem_Util
SECOID_FindOIDTag_Util
PORT_ArenaAlloc_Util
SECITEM_ZfreeItem_Util
SECITEM_CopyItem_Util
SECITEM_AllocItem_Util
PORT_ArenaZAlloc_Util
PR_WaitCondVar
PR_NotifyCondVar
PR_NotifyAllCondVar
PORT_NewArena_Util
PR_GetLibraryFilePathname
PR_Open
PR_Close
PR_Read
PR_Seek
PORT_ZAllocAlignedOffset_Util
SECITEM_FreeItem_Util
PORT_FreeArena_Util
PR_GetEnvSecure
NSS_SecureMemcmp
PR_Unlock
PR_Lock
PR_DestroyLock
PR_NewLock
PORT_GetError_Util
PR_CallOnce
PORT_ZFree_Util
PORT_ZAlloc_Util
PORT_SetError_Util
PR_Free
NSS_SecureMemcmpZero
PORT_Free_Util
PORT_Alloc_Util

advapi32

SystemFunction036

mozglue

strdup
malloc
calloc
free

kernel32

QueryPerformanceCounter
GetCurrentProcess
GetVolumeInformationA
GetLogicalDrives
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GlobalMemoryStatus
GetComputerNameA
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetDiskFreeSpaceA

vcruntime140

memset
__std_type_info_destroy_list
_except_handler4_common
memcpy

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initterm
_initterm_e
_seh_filter_dll
abort
_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv
_execute_onexit_table
_crt_atexit
_cexit

Exports

Exports

FREEBL_GetVector

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/gmp-clearkey/0.1/clearkey.dll
.dll windows:6 windows x86

74f4f52ced5495b02cac895821b3e952

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VerSetConditionMask
GetModuleHandleA
GetProcAddress
VerifyVersionInfoW
GetCurrentProcess
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess

msvcp140

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?id@?$ctype@D@std@@2V0locale@2@A
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xbad_alloc@std@@YAXXZ

vcruntime140

__CxxFrameHandler3
__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
memset
memcpy
_purecall

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
calloc

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
abort
_seh_filter_dll
_initialize_narrow_environment

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-string-l1-1-0

isdigit
isalnum
isspace

Exports

Exports

GMPGetAPI
GMPInit
GMPShutdown

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/gmp-clearkey/0.1/clearkey.info
Basilisk Portable with Flash/Bin/basilisk/icudt58l.dat
Basilisk Portable with Flash/Bin/basilisk/lgpllibs.dll
.dll windows:6 windows x86

7badf2a50ee92a0c8548488b1ce63156

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:80:78:cc:5a:d8:d6:be:ec:e9:b9:ff:66:f9:e1:a2:6d:cc:1c:47:5d:de:cc:e6:46:df:52:3f:5d:00:a1:ff
Signer

Actual PE Digest

7c:80:78:cc:5a:d8:d6:be:ec:e9:b9:ff:66:f9:e1:a2:6d:cc:1c:47:5d:de:cc:e6:46:df:52:3f:5d:00:a1:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mozglue

_aligned_malloc
_aligned_free

kernel32

GetCurrentProcess
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memcpy
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
_purecall
memset

api-ms-win-crt-math-l1-1-0

_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_except1

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Exports

Exports

??0SoundTouch@soundtouch@@QAE@ABV01@@Z
??0SoundTouch@soundtouch@@QAE@XZ
??1SoundTouch@soundtouch@@UAE@XZ
??4SoundTouch@soundtouch@@QAEAAV01@ABV01@@Z
??_7SoundTouch@soundtouch@@6B@
?calcEffectiveRateAndTempo@SoundTouch@soundtouch@@AAEXXZ
?clear@SoundTouch@soundtouch@@UAEXXZ
?createSoundTouchObj@soundtouch@@YAPAVSoundTouch@1@XZ
?destroySoundTouchObj@soundtouch@@YAXPAVSoundTouch@1@@Z
?flush@SoundTouch@soundtouch@@QAEXXZ
?getSetting@SoundTouch@soundtouch@@QBEHH@Z
?getVersionId@SoundTouch@soundtouch@@SAIXZ
?getVersionString@SoundTouch@soundtouch@@SAPBDXZ
?numUnprocessedSamples@SoundTouch@soundtouch@@UBEIXZ
?putSamples@SoundTouch@soundtouch@@UAEXPBMI@Z
?setChannels@SoundTouch@soundtouch@@QAEXI@Z
?setPitch@SoundTouch@soundtouch@@QAEXM@Z
?setPitchOctaves@SoundTouch@soundtouch@@QAEXM@Z
?setPitchSemiTones@SoundTouch@soundtouch@@QAEXH@Z
?setPitchSemiTones@SoundTouch@soundtouch@@QAEXM@Z
?setRate@SoundTouch@soundtouch@@QAEXM@Z
?setRateChange@SoundTouch@soundtouch@@QAEXM@Z
?setSampleRate@SoundTouch@soundtouch@@QAEXI@Z
?setSetting@SoundTouch@soundtouch@@QAE_NHH@Z
?setTempo@SoundTouch@soundtouch@@QAEXM@Z
?setTempoChange@SoundTouch@soundtouch@@QAEXM@Z
av_rdft_calc
av_rdft_end
av_rdft_init

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 642KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/libEGL.dll
.dll windows:6 windows x86

38ae8a4913f61bfeaf7a1ffb247e8a78

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:13:fd:f3:aa:9a:16:18:b0:f8:01:72:b5:9d:8a:43:90:54:64:9c:a7:5e:81:a5:94:bc:30:87:38:b8:78:c9
Signer

Actual PE Digest

83:13:fd:f3:aa:9a:16:18:b0:f8:01:72:b5:9d:8a:43:90:54:64:9c:a7:5e:81:a5:94:bc:30:87:38:b8:78:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libglesv2

?SwapBuffers@egl@@YGIPAX0@Z
?Terminate@egl@@YGIPAX@Z
?WaitGL@egl@@YGIXZ
?WaitNative@egl@@YGIH@Z
?BindTexImage@egl@@YGIPAX0H@Z
?ReleaseTexImage@egl@@YGIPAX0H@Z
?SurfaceAttrib@egl@@YGIPAX0HH@Z
?SwapInterval@egl@@YGIPAXH@Z
?BindAPI@egl@@YGII@Z
?QueryAPI@egl@@YGIXZ
?CreatePbufferFromClientBuffer@egl@@YGPAXPAXI00PBH@Z
?ReleaseThread@egl@@YGIXZ
?WaitClient@egl@@YGIXZ
?GetCurrentContext@egl@@YGPAXXZ
?CreateSync@egl@@YGPAXPAXIPBH@Z
?DestroySync@egl@@YGIPAX0@Z
?ClientWaitSync@egl@@YGHPAX0H_K@Z
?GetSyncAttrib@egl@@YGIPAX0HPAH@Z
?CreateImage@egl@@YGPAXPAX0I0PBH@Z
?DestroyImage@egl@@YGIPAX0@Z
?GetPlatformDisplay@egl@@YGPAXIPAXPBH@Z
?CreatePlatformWindowSurface@egl@@YGPAXPAX00PBH@Z
?CreatePlatformPixmapSurface@egl@@YGPAXPAX00PBH@Z
?WaitSync@egl@@YGIPAX0H@Z
?QuerySurfacePointerANGLE@egl@@YGIPAX0HPAPAX@Z
?PostSubBufferNV@egl@@YGIPAX0HHHH@Z
?GetPlatformDisplayEXT@egl@@YGPAXIPAXPBH@Z
?QueryDisplayAttribEXT@egl@@YGIPAXHPAH@Z
?QueryDeviceAttribEXT@egl@@YGIPAXHPAH@Z
?QueryDeviceStringEXT@egl@@YGPBDPAXH@Z
?CreateImageKHR@egl@@YGPAXPAX0I0PBH@Z
?DestroyImageKHR@egl@@YGIPAX0@Z
?CreateDeviceANGLE@egl@@YGPAXHPAXPBH@Z
?ReleaseDeviceANGLE@egl@@YGIPAX@Z
?CreateStreamKHR@egl@@YGPAXPAXPBH@Z
?DestroyStreamKHR@egl@@YGIPAX0@Z
?StreamAttribKHR@egl@@YGIPAX0IH@Z
?QueryStreamKHR@egl@@YGIPAX0IPAH@Z
?QueryStreamu64KHR@egl@@YGIPAX0IPA_K@Z
?StreamConsumerGLTextureExternalKHR@egl@@YGIPAX0@Z
?StreamConsumerAcquireKHR@egl@@YGIPAX0@Z
?StreamConsumerReleaseKHR@egl@@YGIPAX0@Z
?StreamConsumerGLTextureExternalAttribsNV@egl@@YGIPAX0PBH@Z
?CreateStreamProducerD3DTextureNV12ANGLE@egl@@YGIPAX0PBH@Z
?StreamPostD3DTextureNV12ANGLE@egl@@YGIPAX00PBH@Z
?CopyBuffers@egl@@YGIPAX0PAUHBITMAP__@@@Z
?CreateContext@egl@@YGPAXPAX00PBH@Z
?CreatePbufferSurface@egl@@YGPAXPAX0PBH@Z
?CreatePixmapSurface@egl@@YGPAXPAX0PAUHBITMAP__@@PBH@Z
?CreateWindowSurface@egl@@YGPAXPAX0PAUHWND__@@PBH@Z
?DestroyContext@egl@@YGIPAX0@Z
?DestroySurface@egl@@YGIPAX0@Z
?GetConfigAttrib@egl@@YGIPAX0HPAH@Z
?QuerySurface@egl@@YGIPAX0HPAH@Z
?QueryString@egl@@YGPBDPAXH@Z
?QueryContext@egl@@YGIPAX0HPAH@Z
?MakeCurrent@egl@@YGIPAX000@Z
?Initialize@egl@@YGIPAXPAH1@Z
?GetProcAddress@egl@@YGP6AXXZPBD@Z
?GetError@egl@@YGHXZ
?GetDisplay@egl@@YGPAXPAUHDC__@@@Z
?GetCurrentSurface@egl@@YGPAXH@Z
?GetCurrentDisplay@egl@@YGPAXXZ
?GetConfigs@egl@@YGIPAXPAPAXHPAH@Z
?ChooseConfig@egl@@YGIPAXPBHPAPAXHPAH@Z

mozglue

moz_xmalloc
?moz_Xout_of_range@std@@YAXPBD@Z
?moz_Xlength_error@std@@YAXPBD@Z
free

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentThreadId
DeleteCriticalSection
CloseHandle
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentProcess
CreateEventW
GetCurrentProcessId
QueryPerformanceCounter
GetProcAddress
TerminateProcess

msvcp140

?_Xbad_alloc@std@@YAXXZ

vcruntime140

__vcrt_InitializeCriticalSectionEx
_except_handler4_common
__std_type_info_destroy_list
memcpy
memset
__CxxFrameHandler3
memmove

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo_noreturn
_initterm

api-ms-win-crt-math-l1-1-0

_except1
_libm_sse2_pow_precise

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglCopyBuffers
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformWindowSurface
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureNV12ANGLE
eglCreateSync
eglCreateWindowSurface
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglInitialize
eglMakeCurrent
eglPostSubBufferNV
eglQueryAPI
eglQueryContext
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQuerySurface
eglQuerySurfacePointerANGLE
eglReleaseDeviceANGLE
eglReleaseTexImage
eglReleaseThread
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureNV12ANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/libGLESv2.dll
.dll windows:6 windows x86

015e9a6388cb14e850b9f02754e1eae3

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:cb:c1:9d:ed:aa:10:f7:e6:fa:63:5b:68:05:00:ba:17:71:ed:3e:02:de:9d:ea:5e:9c:09:f8:4c:c4:74:47
Signer

Actual PE Digest

f8:cb:c1:9d:ed:aa:10:f7:e6:fa:63:5b:68:05:00:ba:17:71:ed:3e:02:de:9d:ea:5e:9c:09:f8:4c:c4:74:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mozglue

?moz_Xoverflow_error@std@@YAXPBD@Z
realloc
malloc
moz_xmalloc
?moz_Xout_of_range@std@@YAXPBD@Z
?moz_Xlength_error@std@@YAXPBD@Z
free

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
GetModuleHandleExA
GetProcAddress
LoadLibraryA
GetTempPathA
GetTempFileNameA
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
VerSetConditionMask
QueryPerformanceCounter
VerifyVersionInfoW
GetModuleHandleA
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
QueryPerformanceFrequency
TerminateProcess

user32

WindowFromDC
IsWindow
IsIconic
GetClientRect
CreateWindowExA
DestroyWindow
InvalidateRect

d3d9

D3DPERF_EndEvent
D3DPERF_SetMarker
D3DPERF_GetStatus
Direct3DCreate9
D3DPERF_BeginEvent

msvcp140

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?_Xbad_alloc@std@@YAXXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?classic@locale@std@@SAABV12@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z

vcruntime140

memchr
__CxxFrameHandler3
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
__std_type_info_destroy_list
_purecall
memset
strstr
memcpy
memmove

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_errno
exit
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-string-l1-1-0

strncmp
strncpy

api-ms-win-crt-math-l1-1-0

ceil
_libm_sse2_tan_precise
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
floor
_libm_sse2_acos_precise
_CItanh
_CIsinh
_CIcosh
_except1
_CIatan2
_libm_sse2_log_precise
_libm_sse2_pow_precise
truncf
_libm_sse2_asin_precise
round
ldexp
modf
acoshf
roundf
atanhf
exp2f
asinhf

api-ms-win-crt-stdio-l1-1-0

fclose
fopen
__stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf
fwrite

api-ms-win-crt-convert-l1-1-0

mbstowcs_s
atoi
wcstombs

Exports

Exports

?ActiveShaderProgram@gl@@YGXII@Z
?ActiveTexture@gl@@YGXI@Z
?AttachShader@gl@@YGXII@Z
?BeginQuery@gl@@YGXII@Z
?BeginQueryEXT@gl@@YGXII@Z
?BeginTransformFeedback@gl@@YGXI@Z
?BindAPI@egl@@YGII@Z
?BindAttribLocation@gl@@YGXIIPBD@Z
?BindBuffer@gl@@YGXII@Z
?BindBufferBase@gl@@YGXIII@Z
?BindBufferRange@gl@@YGXIIIJJ@Z
?BindFragmentInputLocationCHROMIUM@gl@@YGXIHPBD@Z
?BindFramebuffer@gl@@YGXII@Z
?BindImageTexture@gl@@YGXIIHEHII@Z
?BindProgramPipeline@gl@@YGXI@Z
?BindRenderbuffer@gl@@YGXII@Z
?BindSampler@gl@@YGXII@Z
?BindTexImage@egl@@YGIPAX0H@Z
?BindTexture@gl@@YGXII@Z
?BindTransformFeedback@gl@@YGXII@Z
?BindUniformLocationCHROMIUM@gl@@YGXIHPBD@Z
?BindVertexArray@gl@@YGXI@Z
?BindVertexArrayOES@gl@@YGXI@Z
?BindVertexBuffer@gl@@YGXIIJH@Z
?BlendColor@gl@@YGXMMMM@Z
?BlendEquation@gl@@YGXI@Z
?BlendEquationSeparate@gl@@YGXII@Z
?BlendFunc@gl@@YGXII@Z
?BlendFuncSeparate@gl@@YGXIIII@Z
?BlitFramebuffer@gl@@YGXHHHHHHHHII@Z
?BlitFramebufferANGLE@gl@@YGXHHHHHHHHII@Z
?BufferData@gl@@YGXIJPBXI@Z
?BufferSubData@gl@@YGXIJJPBX@Z
?CheckFramebufferStatus@gl@@YGII@Z
?ChooseConfig@egl@@YGIPAXPBHPAPAXHPAH@Z
?Clear@gl@@YGXI@Z
?ClearBufferfi@gl@@YGXIHMH@Z
?ClearBufferfv@gl@@YGXIHPBM@Z
?ClearBufferiv@gl@@YGXIHPBH@Z
?ClearBufferuiv@gl@@YGXIHPBI@Z
?ClearColor@gl@@YGXMMMM@Z
?ClearDepthf@gl@@YGXM@Z
?ClearStencil@gl@@YGXH@Z
?ClientWaitSync@egl@@YGHPAX0H_K@Z
?ClientWaitSync@gl@@YGIPAU__GLsync@@I_K@Z
?ColorMask@gl@@YGXEEEE@Z
?CompileShader@gl@@YGXI@Z
?CompressedTexImage2D@gl@@YGXIHIHHHHPBX@Z
?CompressedTexImage3D@gl@@YGXIHIHHHHHPBX@Z
?CompressedTexSubImage2D@gl@@YGXIHHHHHIHPBX@Z
?CompressedTexSubImage3D@gl@@YGXIHHHHHHHIHPBX@Z
?CopyBufferSubData@gl@@YGXIIJJJ@Z
?CopyBuffers@egl@@YGIPAX0PAUHBITMAP__@@@Z
?CopySubTextureCHROMIUM@gl@@YGXIIHHHHHHEEE@Z
?CopyTexImage2D@gl@@YGXIHIHHHHH@Z
?CopyTexSubImage2D@gl@@YGXIHHHHHHH@Z
?CopyTexSubImage3D@gl@@YGXIHHHHHHHH@Z
?CopyTextureCHROMIUM@gl@@YGXIIHIEEE@Z
?CoverFillPathCHROMIUM@gl@@YGXII@Z
?CoverFillPathInstancedCHROMIUM@gl@@YGXHIPBXIIIPBM@Z
?CoverStrokePathCHROMIUM@gl@@YGXII@Z
?CoverStrokePathInstancedCHROMIUM@gl@@YGXHIPBXIIIPBM@Z
?CoverageModulationCHROMIUM@gl@@YGXI@Z
?CreateContext@egl@@YGPAXPAX00PBH@Z
?CreateDeviceANGLE@egl@@YGPAXHPAXPBH@Z
?CreateImage@egl@@YGPAXPAX0I0PBH@Z
?CreateImageKHR@egl@@YGPAXPAX0I0PBH@Z
?CreatePbufferFromClientBuffer@egl@@YGPAXPAXI00PBH@Z
?CreatePbufferSurface@egl@@YGPAXPAX0PBH@Z
?CreatePixmapSurface@egl@@YGPAXPAX0PAUHBITMAP__@@PBH@Z
?CreatePlatformPixmapSurface@egl@@YGPAXPAX00PBH@Z
?CreatePlatformWindowSurface@egl@@YGPAXPAX00PBH@Z
?CreateProgram@gl@@YGIXZ
?CreateShader@gl@@YGII@Z
?CreateShaderProgramv@gl@@YGIIHPBQBD@Z
?CreateStreamKHR@egl@@YGPAXPAXPBH@Z
?CreateStreamProducerD3DTextureNV12ANGLE@egl@@YGIPAX0PBH@Z
?CreateSync@egl@@YGPAXPAXIPBH@Z
?CreateWindowSurface@egl@@YGPAXPAX0PAUHWND__@@PBH@Z
?CullFace@gl@@YGXI@Z
?DebugMessageCallbackKHR@gl@@YGXP6GXIIIIHPBDPBX@Z1@Z
?DebugMessageControlKHR@gl@@YGXIIIHPBIE@Z
?DebugMessageInsertKHR@gl@@YGXIIIIHPBD@Z
?DeleteBuffers@gl@@YGXHPBI@Z
?DeleteFencesNV@gl@@YGXHPBI@Z
?DeleteFramebuffers@gl@@YGXHPBI@Z
?DeletePathsCHROMIUM@gl@@YGXIH@Z
?DeleteProgram@gl@@YGXI@Z
?DeleteProgramPipelines@gl@@YGXHPBI@Z
?DeleteQueries@gl@@YGXHPBI@Z
?DeleteQueriesEXT@gl@@YGXHPBI@Z
?DeleteRenderbuffers@gl@@YGXHPBI@Z
?DeleteSamplers@gl@@YGXHPBI@Z
?DeleteShader@gl@@YGXI@Z
?DeleteSync@gl@@YGXPAU__GLsync@@@Z
?DeleteTextures@gl@@YGXHPBI@Z
?DeleteTransformFeedbacks@gl@@YGXHPBI@Z
?DeleteVertexArrays@gl@@YGXHPBI@Z
?DeleteVertexArraysOES@gl@@YGXHPBI@Z
?DepthFunc@gl@@YGXI@Z
?DepthMask@gl@@YGXE@Z
?DepthRangef@gl@@YGXMM@Z
?DestroyContext@egl@@YGIPAX0@Z
?DestroyImage@egl@@YGIPAX0@Z
?DestroyImageKHR@egl@@YGIPAX0@Z
?DestroyStreamKHR@egl@@YGIPAX0@Z
?DestroySurface@egl@@YGIPAX0@Z
?DestroySync@egl@@YGIPAX0@Z
?DetachShader@gl@@YGXII@Z
?Disable@gl@@YGXI@Z
?DisableVertexAttribArray@gl@@YGXI@Z
?DiscardFramebufferEXT@gl@@YGXIHPBI@Z
?DispatchCompute@gl@@YGXIII@Z
?DispatchComputeIndirect@gl@@YGXJ@Z
?DrawArrays@gl@@YGXIHH@Z
?DrawArraysIndirect@gl@@YGXIPBX@Z
?DrawArraysInstanced@gl@@YGXIHHH@Z
?DrawArraysInstancedANGLE@gl@@YGXIHHH@Z
?DrawBuffers@gl@@YGXHPBI@Z
?DrawBuffersEXT@gl@@YGXHPBI@Z
?DrawElements@gl@@YGXIHIPBX@Z
?DrawElementsIndirect@gl@@YGXIIPBX@Z
?DrawElementsInstanced@gl@@YGXIHIPBXH@Z
?DrawElementsInstancedANGLE@gl@@YGXIHIPBXH@Z
?DrawRangeElements@gl@@YGXIIIHIPBX@Z
?EGLImageTargetRenderbufferStorageOES@gl@@YGXIPAX@Z
?EGLImageTargetTexture2DOES@gl@@YGXIPAX@Z
?Enable@gl@@YGXI@Z
?EnableVertexAttribArray@gl@@YGXI@Z
?EndQuery@gl@@YGXI@Z
?EndQueryEXT@gl@@YGXI@Z
?EndTransformFeedback@gl@@YGXXZ
?FenceSync_@gl@@YGPAU__GLsync@@II@Z
?Finish@gl@@YGXXZ
?FinishFenceNV@gl@@YGXI@Z
?Flush@gl@@YGXXZ
?FlushMappedBufferRange@gl@@YGXIJJ@Z
?FlushMappedBufferRangeEXT@gl@@YGXIJJ@Z
?FramebufferParameteri@gl@@YGXIIH@Z
?FramebufferRenderbuffer@gl@@YGXIIII@Z
?FramebufferTexture2D@gl@@YGXIIIIH@Z
?FramebufferTextureLayer@gl@@YGXIIIHH@Z
?FrontFace@gl@@YGXI@Z
?GenBuffers@gl@@YGXHPAI@Z
?GenFencesNV@gl@@YGXHPAI@Z
?GenFramebuffers@gl@@YGXHPAI@Z
?GenPathsCHROMIUM@gl@@YGIH@Z
?GenProgramPipelines@gl@@YGXHPAI@Z
?GenQueries@gl@@YGXHPAI@Z
?GenQueriesEXT@gl@@YGXHPAI@Z
?GenRenderbuffers@gl@@YGXHPAI@Z
?GenSamplers@gl@@YGXHPAI@Z
?GenTextures@gl@@YGXHPAI@Z
?GenTransformFeedbacks@gl@@YGXHPAI@Z
?GenVertexArrays@gl@@YGXHPAI@Z
?GenVertexArraysOES@gl@@YGXHPAI@Z
?GenerateMipmap@gl@@YGXI@Z
?GetActiveAttrib@gl@@YGXIIHPAH0PAIPAD@Z
?GetActiveUniform@gl@@YGXIIHPAH0PAIPAD@Z
?GetActiveUniformBlockName@gl@@YGXIIHPAHPAD@Z
?GetActiveUniformBlockiv@gl@@YGXIIIPAH@Z
?GetActiveUniformsiv@gl@@YGXIHPBIIPAH@Z
?GetAttachedShaders@gl@@YGXIHPAHPAI@Z
?GetAttribLocation@gl@@YGHIPBD@Z
?GetBooleani_v@gl@@YGXIIPAE@Z
?GetBooleanv@gl@@YGXIPAE@Z
?GetBufferParameteri64v@gl@@YGXIIPA_J@Z
?GetBufferParameteriv@gl@@YGXIIPAH@Z
?GetBufferPointerv@gl@@YGXIIPAPAX@Z
?GetBufferPointervOES@gl@@YGXIIPAPAX@Z
?GetConfigAttrib@egl@@YGIPAX0HPAH@Z
?GetConfigs@egl@@YGIPAXPAPAXHPAH@Z
?GetCurrentContext@egl@@YGPAXXZ
?GetCurrentDisplay@egl@@YGPAXXZ
?GetCurrentSurface@egl@@YGPAXH@Z
?GetDebugMessageLogKHR@gl@@YGIIHPAI000PAHPAD@Z
?GetDisplay@egl@@YGPAXPAUHDC__@@@Z
?GetError@egl@@YGHXZ
?GetError@gl@@YGIXZ
?GetFenceivNV@gl@@YGXIIPAH@Z
?GetFloatv@gl@@YGXIPAM@Z
?GetFragDataLocation@gl@@YGHIPBD@Z
?GetFramebufferAttachmentParameteriv@gl@@YGXIIIPAH@Z
?GetFramebufferParameteriv@gl@@YGXIIPAH@Z
?GetGraphicsResetStatusEXT@gl@@YGIXZ
?GetInteger64i_v@gl@@YGXIIPA_J@Z
?GetInteger64v@gl@@YGXIPA_J@Z
?GetIntegeri_v@gl@@YGXIIPAH@Z
?GetIntegerv@gl@@YGXIPAH@Z
?GetInternalformativ@gl@@YGXIIIHPAH@Z
?GetMultisamplefv@gl@@YGXIIPAM@Z
?GetObjectLabelKHR@gl@@YGXIIHPAHPAD@Z
?GetObjectPtrLabelKHR@gl@@YGXPBXHPAHPAD@Z
?GetPathParameterfCHROMIUM@gl@@YGXIIPAM@Z
?GetPathParameteriCHROMIUM@gl@@YGXIIPAH@Z
?GetPlatformDisplay@egl@@YGPAXIPAXPBH@Z
?GetPlatformDisplayEXT@egl@@YGPAXIPAXPBH@Z
?GetPointervKHR@gl@@YGXIPAPAX@Z
?GetProcAddress@egl@@YGP6AXXZPBD@Z
?GetProgramBinary@gl@@YGXIHPAHPAIPAX@Z
?GetProgramBinaryOES@gl@@YGXIHPAHPAIPAX@Z
?GetProgramInfoLog@gl@@YGXIHPAHPAD@Z
?GetProgramInterfaceiv@gl@@YGXIIIPAH@Z
?GetProgramPipelineInfoLog@gl@@YGXIHPAHPAD@Z
?GetProgramPipelineiv@gl@@YGXIIPAH@Z
?GetProgramResourceIndex@gl@@YGIIIPBD@Z
?GetProgramResourceLocation@gl@@YGHIIPBD@Z
?GetProgramResourceName@gl@@YGXIIIHPAHPAD@Z
?GetProgramResourceiv@gl@@YGXIIIHPBIHPAH1@Z
?GetProgramiv@gl@@YGXIIPAH@Z
?GetQueryObjecti64vEXT@gl@@YGXIIPA_J@Z
?GetQueryObjectivEXT@gl@@YGXIIPAH@Z
?GetQueryObjectui64vEXT@gl@@YGXIIPA_K@Z
?GetQueryObjectuiv@gl@@YGXIIPAI@Z
?GetQueryObjectuivEXT@gl@@YGXIIPAI@Z
?GetQueryiv@gl@@YGXIIPAH@Z
?GetQueryivEXT@gl@@YGXIIPAH@Z
?GetRenderbufferParameteriv@gl@@YGXIIPAH@Z
?GetSamplerParameterfv@gl@@YGXIIPAM@Z
?GetSamplerParameteriv@gl@@YGXIIPAH@Z
?GetShaderInfoLog@gl@@YGXIHPAHPAD@Z
?GetShaderPrecisionFormat@gl@@YGXIIPAH0@Z
?GetShaderSource@gl@@YGXIHPAHPAD@Z
?GetShaderiv@gl@@YGXIIPAH@Z
?GetString@gl@@YGPBEI@Z
?GetStringi@gl@@YGPBEII@Z
?GetSyncAttrib@egl@@YGIPAX0HPAH@Z
?GetSynciv@gl@@YGXPAU__GLsync@@IHPAH1@Z
?GetTexLevelParameterfv@gl@@YGXIHIPAM@Z
?GetTexLevelParameteriv@gl@@YGXIHIPAH@Z
?GetTexParameterfv@gl@@YGXIIPAM@Z
?GetTexParameteriv@gl@@YGXIIPAH@Z
?GetTransformFeedbackVarying@gl@@YGXIIHPAH0PAIPAD@Z
?GetTranslatedShaderSourceANGLE@gl@@YGXIHPAHPAD@Z
?GetUniformBlockIndex@gl@@YGIIPBD@Z
?GetUniformIndices@gl@@YGXIHPBQBDPAI@Z
?GetUniformLocation@gl@@YGHIPBD@Z
?GetUniformfv@gl@@YGXIHPAM@Z
?GetUniformiv@gl@@YGXIHPAH@Z
?GetUniformuiv@gl@@YGXIHPAI@Z
?GetVertexAttribIiv@gl@@YGXIIPAH@Z
?GetVertexAttribIuiv@gl@@YGXIIPAI@Z
?GetVertexAttribPointerv@gl@@YGXIIPAPAX@Z
?GetVertexAttribfv@gl@@YGXIIPAM@Z
?GetVertexAttribiv@gl@@YGXIIPAH@Z
?GetnUniformfvEXT@gl@@YGXIHHPAM@Z
?GetnUniformivEXT@gl@@YGXIHHPAH@Z
?Hint@gl@@YGXII@Z
?Initialize@egl@@YGIPAXPAH1@Z
?InsertEventMarkerEXT@gl@@YGXHPBD@Z
?InvalidateFramebuffer@gl@@YGXIHPBI@Z
?InvalidateSubFramebuffer@gl@@YGXIHPBIHHHH@Z
?IsBuffer@gl@@YGEI@Z
?IsEnabled@gl@@YGEI@Z
?IsFenceNV@gl@@YGEI@Z
?IsFramebuffer@gl@@YGEI@Z
?IsPathCHROMIUM@gl@@YGEI@Z
?IsProgram@gl@@YGEI@Z
?IsProgramPipeline@gl@@YGEI@Z
?IsQuery@gl@@YGEI@Z
?IsQueryEXT@gl@@YGEI@Z
?IsRenderbuffer@gl@@YGEI@Z
?IsSampler@gl@@YGEI@Z
?IsShader@gl@@YGEI@Z
?IsSync@gl@@YGEPAU__GLsync@@@Z
?IsTexture@gl@@YGEI@Z
?IsTransformFeedback@gl@@YGEI@Z
?IsVertexArray@gl@@YGEI@Z
?IsVertexArrayOES@gl@@YGEI@Z
?LineWidth@gl@@YGXM@Z
?LinkProgram@gl@@YGXI@Z
?MakeCurrent@egl@@YGIPAX000@Z
?MapBufferOES@gl@@YGPAXII@Z
?MapBufferRange@gl@@YGPAXIJJI@Z
?MapBufferRangeEXT@gl@@YGPAXIJJI@Z
?MatrixLoadIdentityCHROMIUM@gl@@YGXI@Z
?MatrixLoadfCHROMIUM@gl@@YGXIPBM@Z
?MemoryBarrier@gl@@YGXI@Z
?MemoryBarrierByRegion@gl@@YGXI@Z
?ObjectLabelKHR@gl@@YGXIIHPBD@Z
?ObjectPtrLabelKHR@gl@@YGXPBXHPBD@Z
?PathCommandsCHROMIUM@gl@@YGXIHPBEHIPBX@Z
?PathParameterfCHROMIUM@gl@@YGXIIM@Z
?PathParameteriCHROMIUM@gl@@YGXIIH@Z
?PathStencilFuncCHROMIUM@gl@@YGXIHI@Z
?PauseTransformFeedback@gl@@YGXXZ
?PixelStorei@gl@@YGXIH@Z
?PolygonOffset@gl@@YGXMM@Z
?PopDebugGroupKHR@gl@@YGXXZ
?PopGroupMarkerEXT@gl@@YGXXZ
?PostSubBufferNV@egl@@YGIPAX0HHHH@Z
?ProgramBinary@gl@@YGXIIPBXH@Z
?ProgramBinaryOES@gl@@YGXIIPBXH@Z
?ProgramParameteri@gl@@YGXIIH@Z
?ProgramPathFragmentInputGenCHROMIUM@gl@@YGXIHIHPBM@Z
?ProgramUniform1f@gl@@YGXIHM@Z
?ProgramUniform1fv@gl@@YGXIHHPBM@Z
?ProgramUniform1i@gl@@YGXIHH@Z
?ProgramUniform1iv@gl@@YGXIHHPBH@Z
?ProgramUniform1ui@gl@@YGXIHI@Z
?ProgramUniform1uiv@gl@@YGXIHHPBI@Z
?ProgramUniform2f@gl@@YGXIHMM@Z
?ProgramUniform2fv@gl@@YGXIHHPBM@Z
?ProgramUniform2i@gl@@YGXIHHH@Z
?ProgramUniform2iv@gl@@YGXIHHPBH@Z
?ProgramUniform2ui@gl@@YGXIHII@Z
?ProgramUniform2uiv@gl@@YGXIHHPBI@Z
?ProgramUniform3f@gl@@YGXIHMMM@Z
?ProgramUniform3fv@gl@@YGXIHHPBM@Z
?ProgramUniform3i@gl@@YGXIHHHH@Z
?ProgramUniform3iv@gl@@YGXIHHPBH@Z
?ProgramUniform3ui@gl@@YGXIHIII@Z
?ProgramUniform3uiv@gl@@YGXIHHPBI@Z
?ProgramUniform4f@gl@@YGXIHMMMM@Z
?ProgramUniform4fv@gl@@YGXIHHPBM@Z
?ProgramUniform4i@gl@@YGXIHHHHH@Z
?ProgramUniform4iv@gl@@YGXIHHPBH@Z
?ProgramUniform4ui@gl@@YGXIHIIII@Z
?ProgramUniform4uiv@gl@@YGXIHHPBI@Z
?ProgramUniformMatrix2fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix2x3fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix2x4fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix3fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix3x2fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix3x4fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix4fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix4x2fv@gl@@YGXIHHEPBM@Z
?ProgramUniformMatrix4x3fv@gl@@YGXIHHEPBM@Z
?PushDebugGroupKHR@gl@@YGXIIHPBD@Z
?PushGroupMarkerEXT@gl@@YGXHPBD@Z
?QueryAPI@egl@@YGIXZ
?QueryContext@egl@@YGIPAX0HPAH@Z
?QueryCounterEXT@gl@@YGXII@Z
?QueryDeviceAttribEXT@egl@@YGIPAXHPAH@Z
?QueryDeviceStringEXT@egl@@YGPBDPAXH@Z
?QueryDisplayAttribEXT@egl@@YGIPAXHPAH@Z
?QueryStreamKHR@egl@@YGIPAX0IPAH@Z
?QueryStreamu64KHR@egl@@YGIPAX0IPA_K@Z
?QueryString@egl@@YGPBDPAXH@Z
?QuerySurface@egl@@YGIPAX0HPAH@Z
?QuerySurfacePointerANGLE@egl@@YGIPAX0HPAPAX@Z
?ReadBuffer@gl@@YGXI@Z
?ReadPixels@gl@@YGXHHHHIIPAX@Z
?ReadnPixelsEXT@gl@@YGXHHHHIIHPAX@Z
?ReleaseDeviceANGLE@egl@@YGIPAX@Z
?ReleaseShaderCompiler@gl@@YGXXZ
?ReleaseTexImage@egl@@YGIPAX0H@Z
?ReleaseThread@egl@@YGIXZ
?RenderbufferStorage@gl@@YGXIIHH@Z
?RenderbufferStorageMultisample@gl@@YGXIHIHH@Z
?RenderbufferStorageMultisampleANGLE@gl@@YGXIHIHH@Z
?ResumeTransformFeedback@gl@@YGXXZ
?SampleCoverage@gl@@YGXME@Z
?SampleMaski@gl@@YGXII@Z
?SamplerParameterf@gl@@YGXIIM@Z
?SamplerParameterfv@gl@@YGXIIPBM@Z
?SamplerParameteri@gl@@YGXIIH@Z
?SamplerParameteriv@gl@@YGXIIPBH@Z
?Scissor@gl@@YGXHHHH@Z
?SetFenceNV@gl@@YGXII@Z
?ShaderBinary@gl@@YGXHPBIIPBXH@Z
?ShaderSource@gl@@YGXIHPBQBDPBH@Z
?StencilFillPathCHROMIUM@gl@@YGXIII@Z
?StencilFillPathInstancedCHROMIUM@gl@@YGXHIPBXIIIIPBM@Z
?StencilFunc@gl@@YGXIHI@Z
?StencilFuncSeparate@gl@@YGXIIHI@Z
?StencilMask@gl@@YGXI@Z
?StencilMaskSeparate@gl@@YGXII@Z
?StencilOp@gl@@YGXIII@Z
?StencilOpSeparate@gl@@YGXIIII@Z
?StencilStrokePathCHROMIUM@gl@@YGXIHI@Z
?StencilStrokePathInstancedCHROMIUM@gl@@YGXHIPBXIHIIPBM@Z
?StencilThenCoverFillPathCHROMIUM@gl@@YGXIIII@Z
?StencilThenCoverFillPathInstancedCHROMIUM@gl@@YGXHIPBXIIIIIPBM@Z
?StencilThenCoverStrokePathCHROMIUM@gl@@YGXIHII@Z
?StencilThenCoverStrokePathInstancedCHROMIUM@gl@@YGXHIPBXIHIIIPBM@Z
?StreamAttribKHR@egl@@YGIPAX0IH@Z
?StreamConsumerAcquireKHR@egl@@YGIPAX0@Z
?StreamConsumerGLTextureExternalAttribsNV@egl@@YGIPAX0PBH@Z
?StreamConsumerGLTextureExternalKHR@egl@@YGIPAX0@Z
?StreamConsumerReleaseKHR@egl@@YGIPAX0@Z
?StreamPostD3DTextureNV12ANGLE@egl@@YGIPAX00PBH@Z
?SurfaceAttrib@egl@@YGIPAX0HH@Z
?SwapBuffers@egl@@YGIPAX0@Z
?SwapInterval@egl@@YGIPAXH@Z
?Terminate@egl@@YGIPAX@Z
?TestFenceNV@gl@@YGEI@Z
?TexImage2D@gl@@YGXIHHHHHIIPBX@Z
?TexImage3D@gl@@YGXIHHHHHHIIPBX@Z
?TexParameterf@gl@@YGXIIM@Z
?TexParameterfv@gl@@YGXIIPBM@Z
?TexParameteri@gl@@YGXIIH@Z
?TexParameteriv@gl@@YGXIIPBH@Z
?TexStorage2D@gl@@YGXIHIHH@Z
?TexStorage2DEXT@gl@@YGXIHIHH@Z
?TexStorage2DMultisample@gl@@YGXIHIHHE@Z
?TexStorage3D@gl@@YGXIHIHHH@Z
?TexSubImage2D@gl@@YGXIHHHHHIIPBX@Z
?TexSubImage3D@gl@@YGXIHHHHHHHIIPBX@Z
?TransformFeedbackVaryings@gl@@YGXIHPBQBDI@Z
?Uniform1f@gl@@YGXHM@Z
?Uniform1fv@gl@@YGXHHPBM@Z
?Uniform1i@gl@@YGXHH@Z
?Uniform1iv@gl@@YGXHHPBH@Z
?Uniform1ui@gl@@YGXHI@Z
?Uniform1uiv@gl@@YGXHHPBI@Z
?Uniform2f@gl@@YGXHMM@Z
?Uniform2fv@gl@@YGXHHPBM@Z
?Uniform2i@gl@@YGXHHH@Z
?Uniform2iv@gl@@YGXHHPBH@Z
?Uniform2ui@gl@@YGXHII@Z
?Uniform2uiv@gl@@YGXHHPBI@Z
?Uniform3f@gl@@YGXHMMM@Z
?Uniform3fv@gl@@YGXHHPBM@Z
?Uniform3i@gl@@YGXHHHH@Z
?Uniform3iv@gl@@YGXHHPBH@Z
?Uniform3ui@gl@@YGXHIII@Z
?Uniform3uiv@gl@@YGXHHPBI@Z
?Uniform4f@gl@@YGXHMMMM@Z
?Uniform4fv@gl@@YGXHHPBM@Z
?Uniform4i@gl@@YGXHHHHH@Z
?Uniform4iv@gl@@YGXHHPBH@Z
?Uniform4ui@gl@@YGXHIIII@Z
?Uniform4uiv@gl@@YGXHHPBI@Z
?UniformBlockBinding@gl@@YGXIII@Z
?UniformMatrix2fv@gl@@YGXHHEPBM@Z
?UniformMatrix2x3fv@gl@@YGXHHEPBM@Z
?UniformMatrix2x4fv@gl@@YGXHHEPBM@Z
?UniformMatrix3fv@gl@@YGXHHEPBM@Z
?UniformMatrix3x2fv@gl@@YGXHHEPBM@Z
?UniformMatrix3x4fv@gl@@YGXHHEPBM@Z
?UniformMatrix4fv@gl@@YGXHHEPBM@Z
?UniformMatrix4x2fv@gl@@YGXHHEPBM@Z
?UniformMatrix4x3fv@gl@@YGXHHEPBM@Z
?UnmapBuffer@gl@@YGEI@Z
?UnmapBufferOES@gl@@YGEI@Z
?UseProgram@gl@@YGXI@Z
?UseProgramStages@gl@@YGXIII@Z
?ValidateProgram@gl@@YGXI@Z
?ValidateProgramPipeline@gl@@YGXI@Z
?VertexAttrib1f@gl@@YGXIM@Z
?VertexAttrib1fv@gl@@YGXIPBM@Z
?VertexAttrib2f@gl@@YGXIMM@Z
?VertexAttrib2fv@gl@@YGXIPBM@Z
?VertexAttrib3f@gl@@YGXIMMM@Z
?VertexAttrib3fv@gl@@YGXIPBM@Z
?VertexAttrib4f@gl@@YGXIMMMM@Z
?VertexAttrib4fv@gl@@YGXIPBM@Z
?VertexAttribBinding@gl@@YGXII@Z
?VertexAttribDivisor@gl@@YGXII@Z
?VertexAttribDivisorANGLE@gl@@YGXII@Z
?VertexAttribFormat@gl@@YGXIHIEI@Z
?VertexAttribI4i@gl@@YGXIHHHH@Z
?VertexAttribI4iv@gl@@YGXIPBH@Z
?VertexAttribI4ui@gl@@YGXIIIII@Z
?VertexAttribI4uiv@gl@@YGXIPBI@Z
?VertexAttribIFormat@gl@@YGXIHII@Z
?VertexAttribIPointer@gl@@YGXIHIHPBX@Z
?VertexAttribPointer@gl@@YGXIHIEHPBX@Z
?VertexBindingDivisor@gl@@YGXII@Z
?Viewport@gl@@YGXHHHH@Z
?WaitClient@egl@@YGIXZ
?WaitGL@egl@@YGIXZ
?WaitNative@egl@@YGIH@Z
?WaitSync@egl@@YGIPAX0H@Z
?WaitSync@gl@@YGXPAU__GLsync@@I_K@Z
ANGLEPlatformCurrent
ANGLEPlatformInitialize
ANGLEPlatformShutdown
glActiveShaderProgram
glActiveTexture
glAttachShader
glBeginQuery
glBeginQueryEXT
glBeginTransformFeedback
glBindAttribLocation
glBindBuffer
glBindBufferBase
glBindBufferRange
glBindFragmentInputLocationCHROMIUM
glBindFramebuffer
glBindImageTexture
glBindProgramPipeline
glBindRenderbuffer
glBindSampler
glBindTexture
glBindTransformFeedback
glBindUniformLocationCHROMIUM
glBindVertexArray
glBindVertexArrayOES
glBindVertexBuffer
glBlendColor
glBlendEquation
glBlendEquationSeparate
glBlendFunc
glBlendFuncSeparate
glBlitFramebuffer
glBlitFramebufferANGLE
glBufferData
glBufferSubData

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/mozavcodec.dll
.dll windows:6 windows x86

d0310e034e883cafbd3fbdef834ff44f

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:ec:dc:4b:0e:e9:e9:4e:bb:0e:cf:39:16:28:6d:37:68:e7:e7:1a:86:55:cd:77:b9:d2:55:c5:3f:73:ee:70
Signer

Actual PE Digest

b0:ec:dc:4b:0e:e9:e9:4e:bb:0e:cf:39:16:28:6d:37:68:e7:e7:1a:86:55:cd:77:b9:d2:55:c5:3f:73:ee:70

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mozavutil

av_frame_copy_props
av_frame_new_side_data
av_frame_apply_cropping
av_hwframe_get_buffer
av_pix_fmt_desc_get
av_pix_fmt_count_planes
av_get_pix_fmt_name
av_image_fill_linesizes
av_image_fill_pointers
av_image_check_size2
av_image_check_sar
av_get_channel_layout_nb_channels
av_crc_get_table
av_crc
av_fast_realloc
av_fast_malloc
avpriv_report_missing_feature
av_get_bytes_per_sample
av_samples_fill_arrays
av_default_item_name
av_opt_set
av_opt_copy
av_reallocp_array
av_cpu_count
avpriv_slicethread_create
av_frame_free
avpriv_slicethread_free
av_get_media_type_string
av_log_get_level
av_dict_copy
av_reduce
av_gcd
av_fourcc_make_string
av_strlcat
av_strlcatf
av_match_list
av_get_channel_layout_string
av_get_planar_sample_fmt
av_get_colorspace_name
av_frame_ref
av_color_range_name
av_color_primaries_name
av_color_transfer_name
av_color_space_name
av_chroma_location_name
av_opt_set_dict
avpriv_request_sample
av_get_cpu_flags
av_buffer_realloc
av_buffer_unref
av_buffer_ref
av_frame_alloc
av_samples_copy
av_samples_get_buffer_size
av_sample_fmt_is_planar
av_buffer_pool_get
av_buffer_pool_uninit
av_buffer_pool_init
av_buffer_allocz
av_frame_move_ref
av_bprint_clear
av_get_token
avpriv_set_systematic_pal2
av_mul_q
av_realloc_array
av_mallocz_array
av_bprint_finalize
av_bprintf
av_bprint_init
av_opt_free
av_opt_set_defaults
av_dict_free
av_get_sample_fmt_name
av_frame_unref
avpriv_slicethread_execute
av_strdup
av_buffer_default_free
av_buffer_create
av_buffer_alloc
av_rescale_q
av_dict_set
av_dict_get
av_log
av_freep
av_free
av_realloc
av_malloc_array
av_mallocz
av_opt_set_defaults2
av_malloc

kernel32

TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
WaitForSingleObjectEx
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
CloseHandle
InitOnceComplete
InitOnceBeginInitialize
GetCurrentProcess

vcruntime140

memset
strchr
__std_type_info_destroy_list
_except_handler4_common
memcpy

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm
_beginthreadex
_register_onexit_function
abort
_execute_onexit_table
_crt_atexit
_cexit
_initterm_e

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

Exports

Exports

av_codec_ffversion
av_codec_get_chroma_intra_matrix
av_codec_get_codec_descriptor
av_codec_get_codec_properties
av_codec_get_lowres
av_codec_get_max_lowres
av_codec_get_pkt_timebase
av_codec_get_seek_preroll
av_codec_is_decoder
av_codec_is_encoder
av_codec_next
av_codec_set_chroma_intra_matrix
av_codec_set_codec_descriptor
av_codec_set_lowres
av_codec_set_pkt_timebase
av_codec_set_seek_preroll
av_copy_packet
av_copy_packet_side_data
av_dup_packet
av_fast_padded_malloc
av_fast_padded_mallocz
av_free_packet
av_get_audio_frame_duration
av_get_bits_per_sample
av_get_codec_tag_string
av_get_exact_bits_per_sample
av_get_pcm_codec
av_get_profile_name
av_grow_packet
av_hwaccel_next
av_init_packet
av_lockmgr_register
av_new_packet
av_packet_copy_props
av_packet_free_side_data
av_packet_from_data
av_packet_get_side_data
av_packet_merge_side_data
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_shrink_side_data
av_packet_side_data_name
av_packet_split_side_data
av_packet_unpack_dictionary
av_packet_unref
av_parser_change
av_parser_close
av_parser_init
av_parser_next
av_parser_parse2
av_register_codec_parser
av_register_hwaccel
av_shrink_packet
av_vorbis_parse_frame
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_align_dimensions
avcodec_align_dimensions2
avcodec_alloc_context3
avcodec_chroma_pos_to_enum
avcodec_close
avcodec_configuration
avcodec_copy_context
avcodec_decode_audio4
avcodec_decode_subtitle2
avcodec_decode_video2
avcodec_default_execute
avcodec_default_execute2
avcodec_default_get_buffer2
avcodec_default_get_format
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_enum_to_chroma_pos
avcodec_fill_audio_frame
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_free_context
avcodec_get_class
avcodec_get_context_defaults3
avcodec_get_frame_class
avcodec_get_name
avcodec_get_subtitle_rect_class
avcodec_get_type
avcodec_is_open
avcodec_license
avcodec_open2
avcodec_receive_frame
avcodec_register
avcodec_register_all
avcodec_send_packet
avcodec_string
avcodec_version
avpriv_pix_fmt_bps_avi
avpriv_pix_fmt_bps_mov
avsubtitle_free

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/mozavutil.dll
.dll windows:6 windows x86

ea38e28ab25c36f462554fd42dbdff41

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

32:0d:5a:44:35:f0:d8:57:fd:c5:a4:36:15:33:c5:92:ca:27:3a:48:8d:34:a8:0c:b7:1c:dc:40:b4:24:23:eb
Signer

Actual PE Digest

32:0d:5a:44:35:f0:d8:57:fd:c5:a4:36:15:33:c5:92:ca:27:3a:48:8d:34:a8:0c:b7:1c:dc:40:b4:24:23:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentProcess
GetProcessAffinityMask
InitOnceBeginInitialize
InitOnceComplete
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CloseHandle
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
WaitForSingleObjectEx
Sleep
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess

vcruntime140

_except_handler4_common
strchr
strrchr
memcpy
memset
memmove
memchr
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsscanf
_isatty
__stdio_common_vsprintf
__acrt_iob_func
fputs

api-ms-win-crt-string-l1-1-0

strspn
strncmp
strcspn

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
abort
_errno
_beginthreadex

api-ms-win-crt-time-l1-1-0

_localtime64
_gmtime64
_mktime64
strftime

api-ms-win-crt-convert-l1-1-0

strtol
strtoul
strtod
strtoll

api-ms-win-crt-math-l1-1-0

sinh
tan
cosh
_dclass
exp2
hypot
cos
trunc
sin
asin
_CIatan2
_libm_sse2_exp_precise
ceil
floor
acos
_libm_sse2_sqrt_precise
_libm_sse2_pow_precise
log
fabs
atan
round
exp
tanh
frexp
llrint
_except1

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
_aligned_free
_aligned_realloc

api-ms-win-crt-utility-l1-1-0

bsearch

Exports

Exports

av_add_q
av_add_stable
av_append_path_component
av_asprintf
av_basename
av_bprint_append_data
av_bprint_channel_layout
av_bprint_chars
av_bprint_clear
av_bprint_escape
av_bprint_finalize
av_bprint_get_buffer
av_bprint_init
av_bprint_init_for_buffer
av_bprint_strftime
av_bprintf
av_buffer_alloc
av_buffer_allocz
av_buffer_create
av_buffer_default_free
av_buffer_get_opaque
av_buffer_get_ref_count
av_buffer_is_writable
av_buffer_make_writable
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_uninit
av_buffer_realloc
av_buffer_ref
av_buffer_unref
av_calloc
av_channel_layout_extract_channel
av_chroma_location_name
av_color_primaries_name
av_color_range_name
av_color_space_name
av_color_transfer_name
av_compare_mod
av_compare_ts
av_cpu_count
av_crc
av_crc_get_table
av_crc_init
av_d2q
av_d2str
av_default_get_category
av_default_item_name
av_dict_copy
av_dict_count
av_dict_free
av_dict_get
av_dict_get_string
av_dict_parse_string
av_dict_set
av_dict_set_int
av_dirname
av_div_q
av_dynarray2_add
av_dynarray_add
av_dynarray_add_nofree
av_escape
av_expr_eval
av_expr_free
av_expr_parse
av_expr_parse_and_eval
av_fast_malloc
av_fast_realloc
av_fifo_alloc
av_fifo_alloc_array
av_fifo_drain
av_fifo_free
av_fifo_freep
av_fifo_generic_peek
av_fifo_generic_read
av_fifo_generic_write
av_fifo_grow
av_fifo_realloc2
av_fifo_reset
av_fifo_size
av_fifo_space
av_find_best_pix_fmt_of_2
av_find_info_tag
av_find_nearest_q_idx
av_force_cpu_flags
av_fourcc_make_string
av_frame_alloc
av_frame_apply_cropping
av_frame_clone
av_frame_copy
av_frame_copy_props
av_frame_free
av_frame_get_best_effort_timestamp
av_frame_get_buffer
av_frame_get_channel_layout
av_frame_get_channels
av_frame_get_color_range
av_frame_get_colorspace
av_frame_get_decode_error_flags
av_frame_get_metadata
av_frame_get_pkt_duration
av_frame_get_pkt_pos
av_frame_get_pkt_size
av_frame_get_plane_buffer
av_frame_get_qp_table
av_frame_get_sample_rate
av_frame_get_side_data
av_frame_is_writable
av_frame_make_writable
av_frame_move_ref
av_frame_new_side_data
av_frame_ref
av_frame_remove_side_data
av_frame_set_best_effort_timestamp
av_frame_set_channel_layout
av_frame_set_channels
av_frame_set_color_range
av_frame_set_colorspace
av_frame_set_decode_error_flags
av_frame_set_metadata
av_frame_set_pkt_duration
av_frame_set_pkt_pos
av_frame_set_pkt_size
av_frame_set_qp_table
av_frame_set_sample_rate
av_frame_side_data_name
av_frame_unref
av_free
av_freep
av_gcd
av_get_alt_sample_fmt
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_channel_description
av_get_channel_layout
av_get_channel_layout_channel_index
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_channel_name
av_get_colorspace_name
av_get_cpu_flags
av_get_default_channel_layout
av_get_known_color_name
av_get_media_type_string
av_get_packed_sample_fmt
av_get_padded_bits_per_pixel
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_loss
av_get_pix_fmt_name
av_get_pix_fmt_string
av_get_planar_sample_fmt
av_get_sample_fmt
av_get_sample_fmt_name
av_get_sample_fmt_string
av_get_standard_channel_layout
av_get_time_base_q
av_get_token
av_gettime
av_gettime_relative
av_gettime_relative_is_monotonic
av_hwdevice_get_type_name
av_hwframe_ctx_alloc
av_hwframe_ctx_init
av_hwframe_get_buffer
av_image_alloc
av_image_check_sar
av_image_check_size
av_image_check_size2
av_image_copy
av_image_copy_plane
av_image_copy_to_buffer
av_image_fill_arrays
av_image_fill_linesizes
av_image_fill_max_pixsteps
av_image_fill_pointers
av_image_get_buffer_size
av_image_get_linesize
av_int_list_length_for_size
av_log
av_log2
av_log2_16bit
av_log_default_callback
av_log_format_line
av_log_get_flags
av_log_get_level
av_log_set_callback
av_log_set_flags
av_log_set_level
av_malloc
av_malloc_array
av_mallocz
av_mallocz_array
av_match_list
av_match_name
av_max_alloc
av_memcpy_backptr
av_memdup
av_mul_q
av_nearer_q
av_opt_child_class_next
av_opt_child_next
av_opt_copy
av_opt_eval_double
av_opt_eval_flags
av_opt_eval_float
av_opt_eval_int
av_opt_eval_int64
av_opt_eval_q
av_opt_find
av_opt_find2
av_opt_flag_is_set
av_opt_free
av_opt_freep_ranges
av_opt_get
av_opt_get_channel_layout
av_opt_get_dict_val
av_opt_get_double
av_opt_get_image_size
av_opt_get_int
av_opt_get_key_value
av_opt_get_pixel_fmt
av_opt_get_q
av_opt_get_sample_fmt
av_opt_get_video_rate
av_opt_is_set_to_default
av_opt_is_set_to_default_by_name
av_opt_next
av_opt_ptr
av_opt_query_ranges
av_opt_query_ranges_default
av_opt_serialize
av_opt_set
av_opt_set_bin
av_opt_set_channel_layout
av_opt_set_defaults
av_opt_set_defaults2
av_opt_set_dict
av_opt_set_dict2
av_opt_set_dict_val
av_opt_set_double
av_opt_set_from_string
av_opt_set_image_size
av_opt_set_int
av_opt_set_pixel_fmt
av_opt_set_q
av_opt_set_sample_fmt
av_opt_set_video_rate
av_opt_show2
av_parse_color
av_parse_cpu_caps
av_parse_cpu_flags
av_parse_ratio
av_parse_time
av_parse_video_rate
av_parse_video_size
av_pix_fmt_count_planes
av_pix_fmt_desc_get
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_pix_fmt_get_chroma_sub_sample
av_pix_fmt_swap_endianness
av_q2intfloat
av_read_image_line
av_realloc
av_realloc_array
av_realloc_f
av_reallocp
av_reallocp_array
av_reduce
av_rescale
av_rescale_delta
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_sample_fmt_is_planar
av_samples_alloc
av_samples_alloc_array_and_samples
av_samples_copy
av_samples_fill_arrays
av_samples_get_buffer_size
av_samples_set_silence
av_set_cpu_flags_mask
av_set_options_string
av_small_strptime
av_strcasecmp
av_strdup
av_strerror
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strncasecmp
av_strndup
av_strnstr
av_strstart
av_strtod
av_strtok
av_sub_q
av_timegm
av_usleep
av_utf8_decode
av_util_ffversion
av_vbprintf
av_version_info
av_vlog
av_write_image_line
avpriv_alloc_fixed_dsp
avpriv_emms_asm
avpriv_float_dsp_alloc
avpriv_report_missing_feature
avpriv_request_sample
avpriv_scalarproduct_float_c
avpriv_set_systematic_pal2
avpriv_slicethread_create
avpriv_slicethread_execute
avpriv_slicethread_free
avutil_configuration
avutil_license
avutil_version

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/mozglue.dll
.dll windows:6 windows x86

816d6fed783b1725ff48b1982cc7f182

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:28:f8:f1:f3:34:0f:06:40:08:4f:07:91:1f:9e:8a:0f:65:d2:27:db:27:87:85:58:80:5f:ed:a0:64:ea:c6
Signer

Actual PE Digest

7f:28:f8:f1:f3:34:0f:06:40:08:4f:07:91:1f:9e:8a:0f:65:d2:27:db:27:87:85:58:80:5f:ed:a0:64:ea:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
OutputDebugStringA
EncodePointer
DecodePointer
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
GetCurrentThreadId
FlushInstructionCache
GetSystemInfo
VirtualAllocEx
VirtualProtectEx
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExA
VerifyVersionInfoA
TerminateProcess
GetEnvironmentVariableA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WriteFile
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
DuplicateHandle
GetLastError
SetEvent
WaitForSingleObject
CreateEventA
SignalObjectAndWait
GetCurrentThread
SuspendThread
ResumeThread
GetThreadContext
LocalFree
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcessTimes
GetSystemTime
GetTickCount64
GetSystemTimeAdjustment
SystemTimeToFileTime
CreateFileW
SearchPathW
TlsAlloc
VerSetConditionMask
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
FreeLibrary
VirtualQuery
VirtualProtect
RaiseException
InitializeSListHead

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

dbghelp

SymLoadModule64
SymFromAddr
SymInitialize
SymGetLineFromAddr64
SymGetModuleBase64
SymGetModuleInfo64
SymFunctionTableAccess64
EnumerateLoadedModules64
SymSetOptions
StackWalk64

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

msvcp140

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_BADOFF@std@@3_JB
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z

vcruntime140

memcpy
__std_type_info_destroy_list
_except_handler4_common
memmove
strchr
_except_handler3
memset

api-ms-win-crt-runtime-l1-1-0

_errno
_cexit
_beginthreadex
_initterm
_crt_atexit
_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

wcsncpy
strncpy
_stricmp
isxdigit
_wcsnicmp
wcstok_s
_strnicmp

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fflush
_write
fclose
fputs
__stdio_common_vfprintf
_dup
__stdio_common_vsprintf

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-convert-l1-1-0

_strtoui64
_ltoa

api-ms-win-crt-math-l1-1-0

_dtest
ceil
_fdopen
_except1

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0Decimal@blink@@QAE@ABV01@@Z
??0Decimal@blink@@QAE@ABVEncodedData@01@@Z
??0Decimal@blink@@QAE@H@Z
??0Decimal@blink@@QAE@W4Sign@01@H_K@Z
??0SHA1Sum@mozilla@@QAE@XZ
??0TimeStampValue@mozilla@@AAE@_K0_N@Z
??4Decimal@blink@@QAEAAV01@ABV01@@Z
??8Decimal@blink@@QBE_NABV01@@Z
??9Decimal@blink@@QBE_NABV01@@Z
??DDecimal@blink@@QBE?AV01@ABV01@@Z
??GDecimal@blink@@QBE?AV01@ABV01@@Z
??GDecimal@blink@@QBE?AV01@XZ
??GTimeStampValue@mozilla@@QBE_KABV01@@Z
??HDecimal@blink@@QBE?AV01@ABV01@@Z
??KDecimal@blink@@QBE?AV01@ABV01@@Z
??MDecimal@blink@@QBE_NABV01@@Z
??NDecimal@blink@@QBE_NABV01@@Z
??ODecimal@blink@@QBE_NABV01@@Z
??PDecimal@blink@@QBE_NABV01@@Z
??XDecimal@blink@@QAEAAV01@ABV01@@Z
??YDecimal@blink@@QAEAAV01@ABV01@@Z
??YTimeStampValue@mozilla@@QAEAAV01@_J@Z
??ZDecimal@blink@@QAEAAV01@ABV01@@Z
??ZTimeStampValue@mozilla@@QAEAAV01@_J@Z
??_0Decimal@blink@@QAEAAV01@ABV01@@Z
??_FDecimal@blink@@QAEXXZ
?AcquireStackWalkWorkaroundLock@@YAXXZ
?CheckQPC@TimeStampValue@mozilla@@ABE_KABV12@@Z
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z
?DllBlocklist_CheckStatus@@YA_NXZ
?DllBlocklist_Initialize@@YAXXZ
?DllBlocklist_SetInXPCOMLoadOnMainThread@@YAX_N@Z
?DllBlocklist_WriteNotes@@YAXPAX@Z
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z
?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ
?FramePointerStackWalk@mozilla@@YA_NP6AXIPAX00@ZII0PAPAX0@Z
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z
?HashBytes@mozilla@@YAIPBXI@Z
?IsFloat32Representable@mozilla@@YA_NN@Z
?MozDescribeCodeAddress@@YA_NPAXPAUMozCodeAddressDetails@@@Z
?MozFormatCodeAddress@@YAXPADIIPBXPBD2H2I@Z
?MozFormatCodeAddressDetails@@YAXPADIIPAXPBUMozCodeAddressDetails@@@Z
?MozStackWalk@@YA_NP6AXIPAX00@ZII0I0@Z
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@AA_N@Z
?RecordProcessRestart@TimeStamp@mozilla@@SAXXZ
?ReleaseStackWalkWorkaroundLock@@YAXXZ
?ResolutionInTicks@BaseTimeDurationPlatformUtils@mozilla@@SA_JXZ
?Shutdown@TimeStamp@mozilla@@SAXXZ
?StackWalkInitCriticalAddress@@YAXXZ
?Startup@TimeStamp@mozilla@@SAXXZ
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z
?ToExponential@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
?ToFixed@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPA_NPAVStringBuilder@2@@Z
?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToSecondsSigDigits@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z
?TryAcquireStackWalkWorkaroundLock@@YA_NXZ
?Unused@mozilla@@3Uunused_t@1@B
?abs@Decimal@blink@@QBE?AV12@XZ
?alignOperands@Decimal@blink@@CA?AUAlignedOperands@12@ABV12@0@Z
?avx2_enabled@sse_private@mozilla@@3_NA
?avx_enabled@sse_private@mozilla@@3_NA
?ceil@Decimal@blink@@QBE?AV12@XZ
?compareTo@Decimal@blink@@ABE?AV12@ABV12@@Z
?compress@LZ4@Compression@mozilla@@SAIPBDIPAD@Z
?compressLimitedOutput@LZ4@Compression@mozilla@@SAIPBDIPADI@Z
?decompress@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
?decompress@LZ4@Compression@mozilla@@SA_NPBDPADI@Z
?decompressPartial@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
?finish@SHA1Sum@mozilla@@QAEXAAY0BE@E@Z
?floor@Decimal@blink@@QBE?AV12@XZ
?fromDouble@Decimal@blink@@SA?AV12@N@Z
?fromString@Decimal@blink@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?gChaosFeatures@detail@mozilla@@3W4ChaosFeature@2@A
?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
?gTwoCharEscapes@detail@mozilla@@3QBDB
?infinity@Decimal@blink@@SA?AV12@W4Sign@12@@Z
?kBase10MaximalLength@DoubleToStringConverter@double_conversion@@2HB
?mmx_enabled@sse_private@mozilla@@3_NA
?moz_Xbad_function_call@std@@YAXXZ
?moz_Xinvalid_argument@std@@YAXPBD@Z
?moz_Xlength_error@std@@YAXPBD@Z
?moz_Xout_of_range@std@@YAXPBD@Z
?moz_Xoverflow_error@std@@YAXPBD@Z
?moz_Xruntime_error@std@@YAXPBD@Z
?mozalloc_abort@@YAXQBD@Z
?mozalloc_handle_oom@@YAXI@Z
?mozalloc_set_oom_abort_handler@@YAXP6AXI@Z@Z
?nan@Decimal@blink@@SA?AV12@XZ
?remainder@Decimal@blink@@QBE?AV12@ABV12@@Z
?round@Decimal@blink@@QBE?AV12@XZ
?sse3_enabled@sse_private@mozilla@@3_NA
?sse4_1_enabled@sse_private@mozilla@@3_NA
?sse4_2_enabled@sse_private@mozilla@@3_NA
?sse4a_enabled@sse_private@mozilla@@3_NA
?ssse3_enabled@sse_private@mozilla@@3_NA
?toDouble@Decimal@blink@@QBENXZ
?toString@Decimal@blink@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?toString@Decimal@blink@@QBE_NPADI@Z
?update@SHA1Sum@mozilla@@QAEXPBXI@Z
?zero@Decimal@blink@@SA?AV12@W4Sign@12@@Z
MOZ_CrashOOL
MOZ_CrashPrintf
_HeapAlloc@12
_HeapFree@12
_HeapReAlloc@16
_aligned_free
_aligned_malloc
_expand
_malloc_message
_malloc_options
_msize
_recalloc
_strdup
_wcsdup
calloc
free
frex
gMozCrashReason
gMozillaPoisonBase
gMozillaPoisonSize
gMozillaPoisonValue
jemalloc_free_dirty_pages
jemalloc_purge_freed_pages
jemalloc_stats
malloc
malloc_good_size
malloc_usable_size
mozPoisonValueInit
moz_malloc_size_of
moz_malloc_usable_size
moz_xcalloc
moz_xmalloc
moz_xrealloc
moz_xstrdup
posix_memalign
realloc
strdup
strndup
wcsdup

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/mozsqlite3.dll
.dll windows:6 windows x86

4640ef3fbba2828c9df711efbd5a1bb3

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:50:fd:38:c1:26:93:25:60:8f:ae:4e:6a:05:8c:7c:3a:18:5f:d0:8a:49:dd:1e:ea:36:22:cc:11:b2:9d:26
Signer

Actual PE Digest

ee:50:fd:38:c1:26:93:25:60:8f:ae:4e:6a:05:8c:7c:3a:18:5f:d0:8a:49:dd:1e:ea:36:22:cc:11:b2:9d:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mozglue

malloc_usable_size
realloc
malloc
free
_HeapFree@12
_HeapReAlloc@16
_HeapAlloc@12

kernel32

GetFullPathNameA
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
CreateFileMappingA
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
LoadLibraryW
GetSystemInfo
CloseHandle
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
TerminateProcess
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
DisableThreadLibraryCalls
IsProcessorFeaturePresent

vcruntime140

memcpy
memset
__std_type_info_destroy_list
_except_handler4_common
memmove
strrchr

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncmp
strcspn

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_endthreadex
_beginthreadex
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

sqlite3_aggregate_context
sqlite3_auto_extension
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_module
sqlite3_data_count
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expanded_sql
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_load_extension
sqlite3_malloc
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_progress_handler
sqlite3_realloc
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_rollback_hook
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_sql
sqlite3_status
sqlite3_step
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_total_changes
sqlite3_trace_v2
sqlite3_unlock_notify
sqlite3_update_hook
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf

Sections

.text
Size: 657KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/msvcp140.dll
.dll windows:6 windows x86

7d4a94e128dda6c7a10e11a890bebd9e

Code Sign

33:00:00:00:99:aa:c5:81:9f:8c:a2:7d:8a:00:00:00:00:00:99
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/03/2016, 19:21

Not After

30/06/2017, 19:21

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:b9:8e:40:3f:15:86:81:bd:c9:50:ec:34:f2:e6:ad:33:4a:89:57:f8:6e:ee:1b:c3:c9:c0:8b:96:39:ca:cd
Signer

Actual PE Digest

4f:b9:8e:40:3f:15:86:81:bd:c9:50:ec:34:f2:e6:ad:33:4a:89:57:f8:6e:ee:1b:c3:c9:c0:8b:96:39:ca:cd

Digest Algorithm

sha256

PE Digest Matches

true

00:c2:4d:15:5f:a1:32:99:d4:53:bc:1d:f5:75:23:ca:45:54:10:1d
Signer

Actual PE Digest

00:c2:4d:15:5f:a1:32:99:d4:53:bc:1d:f5:75:23:ca:45:54:10:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vcruntime140

memchr
__std_type_info_destroy_list
_except_handler4_common
memset
memcmp
_CxxThrowException
__std_exception_destroy
__current_exception
__uncaught_exception
__AdjustPointer
__std_exception_copy
__CxxFrameHandler3
__uncaught_exceptions
_purecall
__std_terminate
memcpy
memmove
__processing_throw

api-ms-win-crt-string-l1-1-0

isspace
islower
wcscpy_s
wcsnlen
__strncnt
_wcsdup
iswctype
strcspn
tolower
isalnum
isxdigit
isdigit
isupper

api-ms-win-crt-heap-l1-1-0

_calloc_base
malloc
_realloc_base
_free_base
free
_callnewh
calloc
_malloc_base

api-ms-win-crt-locale-l1-1-0

_lock_locales
setlocale
___lc_locale_name_func
localeconv
___lc_collate_cp_func
__pctype_func
___lc_codepage_func
_unlock_locales
___mb_cur_max_func

api-ms-win-crt-runtime-l1-1-0

terminate
abort
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_endthreadex
_errno
_beginthreadex
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_set_new_handler

api-ms-win-crt-stdio-l1-1-0

fputwc
__stdio_common_vsprintf_s
fputs
_fsopen
fseek
_wfsopen
_get_stream_buffer_pointers
fgetwc
_fseeki64
__acrt_iob_func
fputc
fsetpos
ungetc
setvbuf
fgetpos
fwrite
ungetwc
fgetc
fflush
fclose

api-ms-win-crt-math-l1-1-0

_CIpow
_CIlog
ldexp
frexp

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

api-ms-win-crt-convert-l1-1-0

btowc
strtod
strtof

api-ms-win-crt-time-l1-1-0

_Gettnames
_Getmonths
_Wcsftime
_Strftime
_Getdays
_W_Getdays
_W_Gettnames
_W_Getmonths

api-ms-win-crt-filesystem-l1-1-0

_wrename
_wrmdir
_lock_file
_wremove
_unlock_file
_wchdir

api-ms-win-crt-environment-l1-1-0

_wgetcwd

api-ms-win-crt-utility-l1-1-0

rand_s

kernel32

RtlCaptureStackBackTrace
Sleep
GetExitCodeThread
DuplicateHandle
GetCurrentThreadId
GetCurrentProcess
WaitForSingleObjectEx
CloseHandle
GetNativeSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
GetStringTypeW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
EncodePointer
RaiseException
DecodePointer
GetCPInfo
CompareStringW
GetLocaleInfoW
LCMapStringW
LoadLibraryExA
FreeLibrary
VirtualQuery
VirtualProtect
AreFileApisANSI
GetSystemInfo
CreateDirectoryW
FindFirstFileExW
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
TerminateProcess
FindNextFileW
SetEndOfFile
GetTempPathW
CreateHardLinkW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FindClose
GetProcAddress
CreateFileW
SetFileAttributesW
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
QueueUserWorkItem
GetFileInformationByHandle
GetLastError
IsProcessorFeaturePresent
GetCurrentThread
TryEnterCriticalSection
FormatMessageW
CopyFileW
SetFilePointerEx
GetDiskFreeSpaceExW
GetFileAttributesExW

Exports

Exports

??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??0?$_Yarn@D@std@@QAE@ABV01@@Z
??0?$_Yarn@D@std@@QAE@PBD@Z
??0?$_Yarn@D@std@@QAE@XZ
??0?$_Yarn@G@std@@QAE@ABV01@@Z
??0?$_Yarn@G@std@@QAE@PBG@Z
??0?$_Yarn@G@std@@QAE@XZ
??0?$_Yarn@_W@std@@QAE@ABV01@@Z
??0?$_Yarn@_W@std@@QAE@PB_W@Z
??0?$_Yarn@_W@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$codecvt@DDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Facet_base@std@@QAE@ABV01@@Z
??0_Facet_base@std@@QAE@XZ
??0_Init_locks@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locimp@locale@std@@AAE@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0task_continuation_context@Concurrency@@AAE@XZ
??0time_base@std@@QAE@I@Z
??1?$_Yarn@D@std@@QAE@XZ
??1?$_Yarn@G@std@@QAE@XZ
??1?$_Yarn@_W@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$codecvt@DDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_SDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_UDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Facet_base@std@@UAE@XZ
??1_Init_locks@std@@QAE@XZ
??1_Locimp@locale@std@@MAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@MAE@XZ
??1ios_base@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Iosb@H@std@@QAEAAV01@$$QAV01@@Z
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??4?$_Yarn@G@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@G@std@@QAEAAV01@PBG@Z
??4?$_Yarn@_W@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@_W@std@@QAEAAV01@PB_W@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Crt_new_delete@std@@QAEAAU01@$$QAU01@@Z
??4_Crt_new_delete@std@@QAEAAU01@ABU01@@Z
??4_Facet_base@std@@QAEAAV01@ABV01@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??7ios_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBE_NXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDU_Mbstatet@@@std@@6B@
??_7?$codecvt@GDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_SDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_UDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Facet_base@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_F?$codecvt@DDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@GDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_SDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_UDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_WDU_Mbstatet@@@std@@QAEXXZ
??_F?$ctype@D@std@@QAEXXZ
??_F?$ctype@G@std@@QAEXXZ
??_F?$ctype@_W@std@@QAEXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F_Locinfo@std@@QAEXXZ
??_F_Timevec@std@@QAEXXZ
??_Fcodecvt_base@std@@QAEXXZ
??_Fctype_base@std@@QAEXXZ
??_Ffacet@locale@std@@QAEXXZ
??_Fid@locale@std@@QAEXXZ
??_Ftime_base@std@@QAEXXZ
?CaptureCallstack@platform@details@Concurrency@@YAIPAPAXII@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?GetNextAsyncId@platform@details@Concurrency@@YAIXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Addstd@ios_base@std@@SAXPAV12@@Z
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?_C_str@?$_Yarn@G@std@@QBEPBGXZ
?_C_str@?$_Yarn@_W@std@@QBEPB_WXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Callfns@ios_base@std@@AAEXW4event@12@@Z
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Clocptr@_Locimp@locale@std@@0PAV123@A
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Donarrow@?$ctype@G@std@@IBEDGD@Z
?_Donarrow@?$ctype@_W@std@@IBED_WD@Z
?_Dowiden@?$ctype@G@std@@IBEGD@Z
?_Dowiden@?$ctype@_W@std@@IBE_WD@Z
?_Empty@?$_Yarn@D@std@@QBE_NXZ
?_Empty@?$_Yarn@G@std@@QBE_NXZ
?_Empty@?$_Yarn@_W@std@@QBE_NXZ
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z
?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDI@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDI@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDI@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_SDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_UDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QBEHXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAHABV?$ctype@D@2@@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAHABV?$ctype@G@2@@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAHABV?$ctype@_W@2@@Z
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
?_Getptr@_Timevec@std@@QBEPAXXZ
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Index@ios_base@std@@0HA

Sections

.text
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/nss3.dll
.dll windows:6 windows x86

e1c6d377ac9bf94bdaa4227846e586ea

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

22:39:db:9c:49:0b:d3:a4:48:d1:28:71:25:ce:d6:45:81:87:4e:7f:f9:b1:15:0c:4a:22:f0:b2:dc:03:a2:5a
Signer

Actual PE Digest

22:39:db:9c:49:0b:d3:a4:48:d1:28:71:25:ce:d6:45:81:87:4e:7f:f9:b1:15:0c:4a:22:f0:b2:dc:03:a2:5a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mozglue

realloc
malloc
calloc
strdup
free

kernel32

WaitForSingleObject
CreateMutexA
GetCurrentThreadId
CreatePipe
GetStdHandle
DebugBreak
OutputDebugStringA
EnterCriticalSection
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetSystemInfo
GetThreadContext
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
TerminateProcess
GetExitCodeProcess
CreateProcessA
GetSystemTime
GetVersionExA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
FormatMessageA
CreateFileMappingA
SystemTimeToFileTime
GetCurrentProcess
ReleaseSemaphore
CreateSemaphoreA
OpenSemaphoreA
QueryPerformanceCounter
ReleaseMutex
DuplicateHandle
OpenFileMappingA
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TlsGetValue
CreateDirectoryA
CreateFileA
DeleteFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesExA
GetFileInformationByHandle
LockFile
ReadFile
RemoveDirectoryA
SetFilePointer
UnlockFile
WriteFile
GetHandleInformation
SetHandleInformation
MoveFileA
Sleep
IsDebuggerPresent
RaiseException
GetCurrentThread
SetThreadPriority
SuspendThread
ResumeThread
TlsAlloc
TlsSetValue
TlsFree
GlobalMemoryStatusEx
DeleteCriticalSection
GetLastError
CloseHandle
MultiByteToWideChar
MoveFileW
DeleteFileW
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetTickCount
UnhandledExceptionFilter

winmm

timeGetTime

wsock32

gethostbyaddr
gethostbyname
getprotobynumber
getprotobyname
closesocket
bind
ntohl
WSAStartup
select
__WSAFDIsSet
gethostname
WSAGetLastError
ntohs
getsockopt
htonl
WSACleanup
htons
socket
shutdown
setsockopt
sendto
send
recvfrom
recv
listen
getsockname
getpeername
inet_ntoa
accept
connect

advapi32

OpenProcessToken
AllocateAndInitializeSid
CopySid
FreeSid
GetLengthSid
GetTokenInformation
InitializeAcl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
AddAccessAllowedAce

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
_except_handler3
memchr
strstr
strrchr
strchr
memmove
memcmp
memset
memcpy

api-ms-win-crt-string-l1-1-0

strcmp
strlen
strncpy
strncat
isspace
isalpha
strcat
strncmp
isalnum
strcpy
isdigit
tolower
toupper
strpbrk
_stricmp

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fputs
_close
fwrite
__stdio_common_vfprintf
feof
__stdio_common_vsprintf
__stdio_common_vsscanf
setvbuf
ftell
_wopen
fclose
_wfopen
fopen
fflush
fgets

api-ms-win-crt-math-l1-1-0

_fdopen
_except1

api-ms-win-crt-filesystem-l1-1-0

_access
_wstat64i32
_waccess

api-ms-win-crt-convert-l1-1-0

strtoul
strtol
atoi

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_crt_atexit
_initterm
strerror
_getpid
__fpe_flt_rounds
abort
_beginthreadex
_exit
_cexit
_errno
_initterm_e

api-ms-win-crt-environment-l1-1-0

getenv
_putenv
__p__environ

api-ms-win-crt-time-l1-1-0

_time64
_mktime64
_localtime64_s
strftime

api-ms-win-crt-multibyte-l1-1-0

_mbsinc
_mbsdec

Exports

Exports

ATOB_AsciiToData
ATOB_AsciiToData_Util
ATOB_ConvertAsciiToItem
ATOB_ConvertAsciiToItem_Util
BTOA_ConvertItemToAscii_Util
BTOA_DataToAscii
BTOA_DataToAscii_Util
CERT_AddCertToListHead
CERT_AddCertToListTail
CERT_AddExtension
CERT_AddExtensionByOID
CERT_AsciiToName
CERT_CacheOCSPResponseFromSideChannel
CERT_CertChainFromCert
CERT_CertListFromCert
CERT_CertificateRequestTemplate
CERT_CertificateTemplate
CERT_ChangeCertTrust
CERT_CheckCertUsage
CERT_CheckCertValidTimes
CERT_CheckNameSpace
CERT_ClearOCSPCache
CERT_CompareCerts
CERT_CompareName
CERT_ConvertAndDecodeCertificate
CERT_CopyName
CERT_CopyRDN
CERT_CreateCertificate
CERT_CreateCertificateRequest
CERT_CreateSubjectCertList
CERT_CreateValidity
CERT_CrlTemplate
CERT_DecodeAVAValue
CERT_DecodeAltNameExtension
CERT_DecodeAuthInfoAccessExtension
CERT_DecodeAuthKeyID
CERT_DecodeBasicConstraintValue
CERT_DecodeCRLDistributionPoints
CERT_DecodeCertFromPackage
CERT_DecodeCertPackage
CERT_DecodeCertificatePoliciesExtension
CERT_DecodeNameConstraintsExtension
CERT_DecodeOidSequence
CERT_DecodePrivKeyUsagePeriodExtension
CERT_DecodeTrustString
CERT_DecodeUserNotice
CERT_DerNameToAscii
CERT_DestroyCertArray
CERT_DestroyCertList
CERT_DestroyCertificate
CERT_DestroyCertificateList
CERT_DestroyCertificatePoliciesExtension
CERT_DestroyCertificateRequest
CERT_DestroyName
CERT_DestroyOidSequence
CERT_DestroyUserNotice
CERT_DestroyValidity
CERT_DisableOCSPChecking
CERT_DisableOCSPDefaultResponder
CERT_DupCertificate
CERT_EnableOCSPChecking
CERT_EncodeAltNameExtension
CERT_EncodeAndAddBitStrExtension
CERT_EncodeAuthKeyID
CERT_EncodeBasicConstraintValue
CERT_EncodeCRLDistributionPoints
CERT_EncodeCertPoliciesExtension
CERT_EncodeInfoAccessExtension
CERT_EncodeInhibitAnyExtension
CERT_EncodeNameConstraintsExtension
CERT_EncodeNoticeReference
CERT_EncodePolicyConstraintsExtension
CERT_EncodePolicyMappingExtension
CERT_EncodeSubjectKeyID
CERT_EncodeUserNotice
CERT_ExtractPublicKey
CERT_FilterCertListByCANames
CERT_FilterCertListByUsage
CERT_FilterCertListForUserCerts
CERT_FindCertByDERCert
CERT_FindCertByIssuerAndSN
CERT_FindCertByName
CERT_FindCertByNickname
CERT_FindCertByNicknameOrEmailAddr
CERT_FindCertByNicknameOrEmailAddrCX
CERT_FindCertExtension
CERT_FindCertIssuer
CERT_FindKeyUsageExtension
CERT_FindUserCertByUsage
CERT_FindUserCertsByUsage
CERT_FinishCertificateRequestAttributes
CERT_FinishExtensions
CERT_ForcePostMethodForOCSP
CERT_FreeNicknames
CERT_GenTime2FormattedAscii_Util
CERT_GetCertChainFromCert
CERT_GetCertEmailAddress
CERT_GetCertKeyType
CERT_GetCertTimes
CERT_GetCertTrust
CERT_GetCertificateDer
CERT_GetCertificateRequestExtensions
CERT_GetCommonName
CERT_GetConstrainedCertificateNames
CERT_GetCountryName
CERT_GetDefaultCertDB
CERT_GetFirstEmailAddress
CERT_GetGeneralNameTypeFromString
CERT_GetImposedNameConstraints
CERT_GetLocalityName
CERT_GetNextEmailAddress
CERT_GetNextGeneralName
CERT_GetNextNameConstraint
CERT_GetOCSPAuthorityInfoAccessLocation
CERT_GetOidString
CERT_GetOrgName
CERT_GetOrgUnitName
CERT_GetStateName
CERT_Hexify
CERT_ImportCerts
CERT_IsCACert
CERT_IsUserCert
CERT_MakeCANickname
CERT_MergeExtensions
CERT_NameTemplate
CERT_NameToAscii
CERT_NewCertList
CERT_NewTempCertificate
CERT_NicknameStringsFromCertList
CERT_OCSPCacheSettings
CERT_RFC1485_EscapeAndQuote
CERT_RemoveCertListNode
CERT_SaveSMimeProfile
CERT_SequenceOfCertExtensionTemplate
CERT_SetOCSPFailureMode
CERT_SetOCSPTimeout
CERT_SignedCrlTemplate
CERT_SignedDataTemplate
CERT_StartCertExtensions
CERT_StartCertificateRequestAttributes
CERT_SubjectPublicKeyInfoTemplate
CERT_TimeChoiceTemplate
CERT_VerifyCertificate
CERT_VerifySignedDataWithPublicKeyInfo
DER_AsciiToTime_Util
DER_DecodeTimeChoice_Util
DER_Encode
DER_EncodeTimeChoice_Util
DER_Encode_Util
DER_GeneralizedTimeToTime
DER_GeneralizedTimeToTime_Util
DER_GetInteger
DER_GetInteger_Util
DER_SetUInteger
DER_UTCTimeToTime_Util
DSAU_DecodeDerSigToLen
DSAU_EncodeDerSigWithLen
DTLS_GetHandshakeTimeout
DTLS_ImportFD
GetExecutionEnvironment
HASH_Begin
HASH_Create
HASH_Destroy
HASH_End
HASH_GetHashObject
HASH_GetHashOidTagByHashType
HASH_GetType
HASH_HashBuf
HASH_ResultLenByOidTag
HASH_Update
LL_MaxInt
LL_MaxUint
LL_MinInt
LL_Zero
NSSBase64_DecodeBuffer
NSSBase64_EncodeItem
NSSBase64_EncodeItem_Util
NSSSMIME_GetVersion
NSSSSL_GetVersion
NSSUTIL_ArgDecodeNumber
NSSUTIL_ArgFetchValue
NSSUTIL_ArgGetLabel
NSSUTIL_ArgGetParamValue
NSSUTIL_ArgHasFlag
NSSUTIL_ArgIsBlank
NSSUTIL_ArgParseCipherFlags
NSSUTIL_ArgParseModuleSpec
NSSUTIL_ArgParseSlotFlags
NSSUTIL_ArgParseSlotInfo
NSSUTIL_ArgReadLong
NSSUTIL_ArgSkipParameter
NSSUTIL_ArgStrip
NSSUTIL_DoModuleDBFunction
NSSUTIL_GetVersion
NSSUTIL_MkModuleSpec
NSSUTIL_MkNSSString
NSSUTIL_MkSlotString
NSSUTIL_Quote
NSS_CMSContentInfo_GetContent
NSS_CMSContentInfo_GetContentTypeTag
NSS_CMSContentInfo_SetContent_Data
NSS_CMSContentInfo_SetContent_EnvelopedData
NSS_CMSContentInfo_SetContent_SignedData
NSS_CMSDecoder_Cancel
NSS_CMSDecoder_Finish
NSS_CMSDecoder_Start
NSS_CMSDecoder_Update
NSS_CMSEncoder_Cancel
NSS_CMSEncoder_Finish
NSS_CMSEncoder_Start
NSS_CMSEncoder_Update
NSS_CMSEnvelopedData_AddRecipient
NSS_CMSEnvelopedData_Create
NSS_CMSEnvelopedData_GetContentInfo
NSS_CMSMessage_ContentLevel
NSS_CMSMessage_ContentLevelCount
NSS_CMSMessage_Create
NSS_CMSMessage_CreateFromDER
NSS_CMSMessage_Destroy
NSS_CMSMessage_GetContent
NSS_CMSMessage_GetContentInfo
NSS_CMSMessage_IsEncrypted
NSS_CMSMessage_IsSigned
NSS_CMSRecipientInfo_Create
NSS_CMSSignedData_AddCertList
NSS_CMSSignedData_AddCertificate
NSS_CMSSignedData_AddSignerInfo
NSS_CMSSignedData_Create
NSS_CMSSignedData_CreateCertsOnly
NSS_CMSSignedData_Destroy
NSS_CMSSignedData_GetContentInfo
NSS_CMSSignedData_GetDigestAlgs
NSS_CMSSignedData_GetSignerInfo
NSS_CMSSignedData_HasDigests
NSS_CMSSignedData_ImportCerts
NSS_CMSSignedData_SetDigestValue
NSS_CMSSignedData_SignerInfoCount
NSS_CMSSignedData_VerifySignerInfo
NSS_CMSSignerInfo_AddMSSMIMEEncKeyPrefs
NSS_CMSSignerInfo_AddSMIMECaps
NSS_CMSSignerInfo_AddSMIMEEncKeyPrefs
NSS_CMSSignerInfo_AddSigningTime
NSS_CMSSignerInfo_Create
NSS_CMSSignerInfo_GetSignerCommonName
NSS_CMSSignerInfo_GetSignerEmailAddress
NSS_CMSSignerInfo_GetSigningCertificate
NSS_CMSSignerInfo_IncludeCerts
NSS_CMSSignerInfo_Verify
NSS_FindCertKEAType
NSS_GetAlgorithmPolicy
NSS_GetVersion
NSS_Get_CERT_CertificateRequestTemplate
NSS_Get_CERT_CertificateTemplate
NSS_Get_CERT_CrlTemplate
NSS_Get_CERT_NameTemplate
NSS_Get_CERT_SequenceOfCertExtensionTemplate
NSS_Get_CERT_SignedCrlTemplate
NSS_Get_CERT_SignedDataTemplate
NSS_Get_CERT_SubjectPublicKeyInfoTemplate
NSS_Get_CERT_TimeChoiceTemplate
NSS_Get_SECKEY_RSAPSSParamsTemplate
NSS_Get_SECOID_AlgorithmIDTemplate
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SEC_BMPStringTemplate
NSS_Get_SEC_BitStringTemplate
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_BooleanTemplate_Util
NSS_Get_SEC_GeneralizedTimeTemplate_Util
NSS_Get_SEC_IA5StringTemplate
NSS_Get_SEC_IA5StringTemplate_Util
NSS_Get_SEC_IntegerTemplate
NSS_Get_SEC_IntegerTemplate_Util
NSS_Get_SEC_NullTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
NSS_Get_SEC_OctetStringTemplate
NSS_Get_SEC_OctetStringTemplate_Util
NSS_Get_SEC_SignedCertificateTemplate
NSS_Get_SEC_UTF8StringTemplate
NSS_Get_SEC_UTF8StringTemplate_Util
NSS_Init
NSS_InitWithMerge
NSS_Initialize
NSS_IsInitialized
NSS_NoDB_Init
NSS_OptionGet
NSS_OptionSet
NSS_SMIMESignerInfo_SaveSMIMEProfile
NSS_SMIMEUtil_FindBulkAlgForRecipients
NSS_SecureMemcmp
NSS_SecureMemcmpZero
NSS_SetAlgorithmPolicy
NSS_SetDomesticPolicy
NSS_Shutdown
NSS_VersionCheck
PK11SDR_Decrypt
PK11SDR_Encrypt
PK11_AlgtagToMechanism
PK11_Authenticate
PK11_ChangePW
PK11_CheckUserPassword
PK11_CipherOp
PK11_ConfigurePKCS11
PK11_CreateContextBySymKey
PK11_CreateDigestContext
PK11_CreateGenericObject
PK11_CreateMergeLog
PK11_CreatePBEV2AlgorithmID
PK11_DEREncodePublicKey
PK11_Decrypt
PK11_DeleteTokenCertAndKey
PK11_DeleteTokenPrivateKey
PK11_DeleteTokenPublicKey
PK11_Derive
PK11_DeriveWithTemplate
PK11_DestroyContext
PK11_DestroyGenericObject
PK11_DestroyMergeLog
PK11_DestroyObject
PK11_DestroyTokenObject
PK11_DigestBegin
PK11_DigestFinal
PK11_DigestOp
PK11_DoesMechanism
PK11_Encrypt
PK11_ExportDERPrivateKeyInfo
PK11_ExportEncryptedPrivKeyInfo
PK11_ExtractKeyValue
PK11_FindCertFromNickname
PK11_FindCertInSlot
PK11_FindCertsFromEmailAddress
PK11_FindCertsFromNickname
PK11_FindKeyByAnyCert
PK11_FindKeyByDERCert
PK11_FindKeyByKeyID
PK11_FindRawCertsWithSubject
PK11_FindSlotByName
PK11_FindSlotsByNames
PK11_FreeSlot
PK11_FreeSlotList
PK11_FreeSlotListElement
PK11_FreeSymKey
PK11_GenerateKeyPair
PK11_GenerateKeyPairWithFlags
PK11_GenerateKeyPairWithOpFlags
PK11_GenerateRandom
PK11_GenerateRandomOnSlot
PK11_GetAllSlotsForCert
PK11_GetAllTokens
PK11_GetBestSlot
PK11_GetBestSlotMultiple
PK11_GetBlockSize
PK11_GetCertFromPrivateKey
PK11_GetCertsMatchingPrivateKey
PK11_GetDefaultArray
PK11_GetDefaultFlags
PK11_GetDisabledReason
PK11_GetFirstSafe
PK11_GetIVLength
PK11_GetInternalKeySlot
PK11_GetInternalSlot
PK11_GetKeyData
PK11_GetKeyGen
PK11_GetLowLevelKeyIDForPrivateKey
PK11_GetMechanism
PK11_GetMinimumPwdLength
PK11_GetModInfo
PK11_GetModuleURI
PK11_GetNextSafe
PK11_GetNextSymKey
PK11_GetPadMechanism
PK11_GetPrivateKeyNickname
PK11_GetPrivateModulusLen
PK11_GetSlotFromPrivateKey
PK11_GetSlotID
PK11_GetSlotInfo
PK11_GetSlotName
PK11_GetSlotPWValues
PK11_GetSlotSeries
PK11_GetSymKeyNickname
PK11_GetTokenInfo
PK11_GetTokenName
PK11_GetTokenURI
PK11_HasAttributeSet
PK11_HasRootCerts
PK11_HashBuf
PK11_ImportCRL
PK11_ImportCert
PK11_ImportCertForKey
PK11_ImportDERPrivateKeyInfoAndReturnKey
PK11_ImportPublicKey
PK11_ImportSymKey
PK11_InitPin
PK11_IsDisabled
PK11_IsFIPS
PK11_IsFriendly
PK11_IsHW
PK11_IsInternal
PK11_IsLoggedIn
PK11_IsPresent
PK11_IsReadOnly
PK11_IsRemovable
PK11_KeyForCertExists
PK11_KeyGen
PK11_KeyGenWithTemplate
PK11_ListCerts
PK11_ListCertsInSlot
PK11_ListFixedKeysInSlot
PK11_ListPrivKeysInSlot
PK11_ListPrivateKeysInSlot
PK11_LoadPrivKey
PK11_Logout
PK11_LogoutAll
PK11_MakeIDFromPubKey
PK11_MapSignKeyType
PK11_MechanismToAlgtag
PK11_MergeTokens
PK11_NeedLogin
PK11_NeedUserInit
PK11_PBEKeyGen
PK11_ParamFromIV
PK11_PrivDecrypt
PK11_PrivDecryptPKCS1
PK11_ProtectedAuthenticationPath
PK11_PubDeriveWithKDF
PK11_PubEncrypt
PK11_PubEncryptPKCS1
PK11_PubUnwrapSymKey
PK11_PubWrapSymKey
PK11_RandomUpdate
PK11_ReadRawAttribute
PK11_ReferenceSlot
PK11_ResetToken
PK11_SetPasswordFunc
PK11_SetSlotPWValues
PK11_SetSymKeyNickname
PK11_Sign
PK11_SignWithMechanism
PK11_SignatureLen
PK11_TokenKeyGenWithFlags
PK11_UnwrapPrivKey
PK11_UnwrapSymKey
PK11_UpdateSlotAttribute
PK11_UserDisableSlot
PK11_UserEnableSlot
PK11_VerifyWithMechanism
PK11_WrapPrivKey
PK11_WrapSymKey
PL_ArenaAllocate
PL_ArenaFinish
PL_ArenaGrow
PL_ArenaRelease
PL_Base64Decode
PL_Base64Encode
PL_ClearArenaPool
PL_CompactArenaPool
PL_CompareStrings
PL_CompareValues
PL_CreateLongOptState
PL_CreateOptState
PL_DestroyOptState
PL_FPrintError
PL_FinishArenaPool
PL_FreeArenaPool
PL_GetNextOpt
PL_HashString
PL_HashTableAdd
PL_HashTableDestroy
PL_HashTableDump
PL_HashTableEnumerateEntries
PL_HashTableLookup
PL_HashTableLookupConst
PL_HashTableRawAdd
PL_HashTableRawLookup
PL_HashTableRawLookupConst
PL_HashTableRawRemove
PL_HashTableRemove
PL_InitArenaPool
PL_NewHashTable
PL_PrintError
PL_SizeOfArenaPoolExcludingPool
PL_strcasecmp
PL_strcaserstr
PL_strcasestr
PL_strcat
PL_strcatn
PL_strchr
PL_strcmp
PL_strcpy
PL_strdup
PL_strfree
PL_strlen
PL_strncasecmp
PL_strncaserstr
PL_strncasestr
PL_strncat
PL_strnchr
PL_strncmp
PL_strncpy
PL_strncpyz

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/nssckbi.dll
.dll windows:6 windows x86

621085bf6cd90ad03b97c1a6a33c36fd

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:9a:97:2c:98:f6:65:8c:02:00:aa:e0:e5:e9:70:f2:e0:34:d4:5b:fd:c0:5f:4a:fa:3f:e7:9f:88:f1:2e:5a
Signer

Actual PE Digest

b1:9a:97:2c:98:f6:65:8c:02:00:aa:e0:e5:e9:70:f2:e0:34:d4:5b:fd:c0:5f:4a:fa:3f:e7:9f:88:f1:2e:5a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nss3

PL_strlen
PR_CallOnce
PR_GetThreadPrivate
PR_SetThreadPrivate
PR_NewThreadPrivateIndex
PL_ArenaAllocate
PL_FinishArenaPool
PL_InitArenaPool
PR_Free
PR_Calloc
PR_Unlock
PR_Lock
PR_DestroyLock
PR_NewLock
PL_CompareValues
PL_HashTableEnumerateEntries
PL_HashTableLookup
PL_HashTableRemove
PL_HashTableAdd
PL_HashTableDestroy
PL_NewHashTable

kernel32

InitializeSListHead
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent

vcruntime140

__std_type_info_destroy_list
memmove
_except_handler4_common
memcpy
memcmp
memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initterm
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initialize_narrow_environment

Exports

Exports

C_GetFunctionList

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/nssdbm3.chk
Basilisk Portable with Flash/Bin/basilisk/nssdbm3.dll
.dll windows:6 windows x86

5c539dcf34e7709d3d7c811fc235ee10

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:ed:46:cc:e4:6f:f6:a3:80:a2:6d:1b:03:63:34:2e:fe:91:27:84:88:b6:c8:66:fc:dc:5d:ff:73:93:0a:b8
Signer

Actual PE Digest

0b:ed:46:cc:e4:6f:f6:a3:80:a2:6d:1b:03:63:34:2e:fe:91:27:84:88:b6:c8:66:fc:dc:5d:ff:73:93:0a:b8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nss3

PORT_DestroyCheapArena
PORT_ArenaMark_Util
PORT_ArenaRelease_Util
PORT_ArenaUnmark_Util
PORT_ArenaStrdup_Util
SECITEM_CompareItem_Util
PR_NewMonitor
PR_DestroyMonitor
PR_EnterMonitor
PR_ExitMonitor
NSSUTIL_ArgGetParamValue
NSSUTIL_ArgHasFlag
NSSUTIL_ArgReadLong
PORT_InitCheapArena
NSSUTIL_ArgParseSlotFlags
NSSUTIL_ArgParseSlotInfo
NSSUTIL_MkSlotString
NSSUTIL_ArgParseModuleSpec
NSSUTIL_MkModuleSpec
NSSUTIL_ArgParseCipherFlags
NSSUTIL_MkNSSString
PR_LoadLibraryWithFlags
PR_FindFunctionSymbol
PR_GetLibraryFilePathname
PR_CallOnce
PR_GetDirectorySeparator
NSS_Get_SEC_ObjectIDTemplate_Util
PR_Now
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_AnyTemplate_Util
SECOID_Init
PR_Free
SECITEM_HashCompare
PL_CompareValues
PL_HashTableDestroy
PL_NewHashTable
PR_FindSymbol
PR_UnloadLibrary
PR_LoadLibrary
SECITEM_ItemsAreEqual_Util
PORT_Realloc_Util
DER_SetUInteger
PR_htonl
NSS_Get_SEC_OctetStringTemplate_Util
PR_ntohl
PR_GetEnvSecure
SECOID_GetAlgorithmTag_Util
SECOID_SetAlgorithmID_Util
SECOID_FindOIDByTag_Util
SECOID_FindOIDTag_Util
SEC_ASN1EncodeInteger_Util
SEC_ASN1EncodeItem_Util
SEC_QuickDERDecodeItem_Util
PR_Unlock
PR_Lock
SECITEM_AllocItem_Util
PL_HashTableEnumerateEntries
PL_HashTableLookup
PL_HashTableRemove
PL_HashTableAdd
PR_DestroyLock
PR_NewLock
SECITEM_ZfreeItem_Util
SECITEM_FreeItem_Util
SECITEM_DupItem_Util
SECITEM_CopyItem_Util
PORT_ArenaZAlloc_Util
DER_DecodeTimeChoice_Util
PORT_ArenaAlloc_Util
PORT_FreeArena_Util
PORT_NewArena_Util
PORT_GetError_Util
PORT_SetError_Util
PORT_Strdup_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
PR_smprintf_free
PR_smprintf
PR_MkDir
PR_Access
PR_Delete
PR_Write
PR_Read
PR_Close
PR_OpenFile
PR_GetError
PR_SetError
NSSBase64_EncodeItem_Util
SECOID_Shutdown
PORT_Free_Util
PORT_ZAlloc_Util
NSSUTIL_Quote
PORT_Alloc_Util

mozglue

free
strdup
malloc
calloc

kernel32

FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memcpy
memcmp
memset
strrchr
memmove
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-string-l1-1-0

strcpy
tolower
strncmp
strlen
strcmp
isdigit

api-ms-win-crt-runtime-l1-1-0

_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
abort
_cexit
_crt_atexit
_getpid

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_unlink

api-ms-win-crt-stdio-l1-1-0

_open
_read
_write
_close
fwrite
__acrt_iob_func
_get_osfhandle
_lseek

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

legacy_AddSecmodDB
legacy_DeleteSecmodDB
legacy_Open
legacy_ReadSecmodDB
legacy_ReleaseSecmodDBData
legacy_SetCryptFunctions
legacy_Shutdown

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/omni.ja
Basilisk Portable with Flash/Bin/basilisk/platform.ini
Basilisk Portable with Flash/Bin/basilisk/plugin-container.exe
.exe windows:6 windows x86

dcfef356edbf310edf88ce73b1efaead

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:ac:26:fa:55:65:21:1e:88:1c:35:26:79:13:8d:58:cd:45:ac:a3:b7:10:ea:58:ec:27:e7:ca:e1:37:2f:f8
Signer

Actual PE Digest

18:ac:26:fa:55:65:21:1e:88:1c:35:26:79:13:8d:58:cd:45:ac:a3:b7:10:ea:58:ec:27:e7:ca:e1:37:2f:f8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mozglue

?moz_Xout_of_range@std@@YAXPBD@Z
?moz_Xlength_error@std@@YAXPBD@Z
?DllBlocklist_Initialize@@YAXXZ
moz_xmalloc
free

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
GetEnvironmentVariableW
SetEnvironmentVariableW
IsProcessorFeaturePresent
SetDllDirectoryW
GetLastError
GetCurrentProcess
ExpandEnvironmentStringsW
TerminateProcess
LoadLibraryExA
GetProcAddress
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
QueryPerformanceCounter

msvcp140

?_Xbad_alloc@std@@YAXXZ

vcruntime140

_purecall
memset
memmove
_except_handler4_common
memcpy

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe
__p___argc
_register_thread_local_exe_atexit_callback
_crt_atexit
_controlfp_s
terminate
_invalid_parameter_noinfo_noreturn
_c_exit
_set_app_type
_cexit
_register_onexit_function
_exit
exit
_initterm_e
__p___wargv
_initialize_wide_environment
_get_initial_wide_environment
_initialize_onexit_table
_configure_wide_argv
_initterm

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/plugin-hang-ui.exe
.exe windows:6 windows x86

1d9620c90f668040c630972dc0545598

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:c8:fb:22:b1:d5:cf:40:8b:bb:68:d4:6b:2c:0a:31:7a:94:ac:87:d3:b4:37:1f:28:69:91:95:17:8b:1e:35
Signer

Actual PE Digest

97:c8:fb:22:b1:d5:cf:40:8b:bb:68:d4:6b:2c:0a:31:7a:94:ac:87:d3:b4:37:1f:28:69:91:95:17:8b:1e:35

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
VirtualQuery
MapViewOfFile
UnmapViewOfFile
UnregisterWaitEx
RegisterWaitForSingleObject
IsDebuggerPresent
WaitForSingleObjectEx
QueueUserAPC
GetCurrentThreadId
OpenThread
FreeLibrary
SetEvent
GetProcAddress
LoadLibraryW
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetModuleHandleW
CloseHandle

user32

SetForegroundWindow
LoadImageW
SetWindowLongW
ScreenToClient
SendDlgItemMessageW
GetWindowRect
EnableWindow
SendMessageW
PostMessageW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
SetWindowTextW

comctl32

InitCommonControlsEx

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
?_Xlength_error@std@@YAXPBD@Z
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7ios_base@std@@6B@
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?_Xbad_alloc@std@@YAXXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ

vcruntime140

memcpy
__std_exception_destroy
_CxxThrowException
memset
_except_handler4_common
memmove
__std_exception_copy
_purecall

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_c_exit
_get_initial_wide_environment
_initialize_wide_environment
_cexit
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
exit
__p___wargv
_configure_wide_argv
_exit
__p___argc
_set_app_type
_seh_filter_exe
_initterm_e
_initialize_onexit_table
_initterm
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/precomplete
Basilisk Portable with Flash/Bin/basilisk/removed-files
Basilisk Portable with Flash/Bin/basilisk/softokn3.chk
Basilisk Portable with Flash/Bin/basilisk/softokn3.dll
.dll windows:6 windows x86

85c013ed856537d93f28c213c61f513d

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:b0:d0:67:c9:f2:b3:8f:b4:78:4d:29:e4:94:5c:0d:df:81:76:7a:b2:1b:4d:10:82:d9:38:3b:54:e4:fe:e0
Signer

Actual PE Digest

d9:b0:d0:67:c9:f2:b3:8f:b4:78:4d:29:e4:94:5c:0d:df:81:76:7a:b2:1b:4d:10:82:d9:38:3b:54:e4:fe:e0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mozsqlite3

sqlite3_finalize
sqlite3_column_bytes
sqlite3_column_int
sqlite3_column_blob
sqlite3_step
sqlite3_bind_text
sqlite3_reset
sqlite3_bind_blob
sqlite3_prepare_v2
sqlite3_open_v2
sqlite3_free
sqlite3_mprintf
sqlite3_busy_timeout
sqlite3_exec
sqlite3_file_control
sqlite3_bind_int
sqlite3_close

nss3

SECOID_Shutdown
UTIL_SetForkState
NSSUTIL_DoModuleDBFunction
_NSSUTIL_GetSecmodName
SEC_QuickDERDecodeItem_Util
NSS_Get_SEC_OctetStringTemplate_Util
NSS_SecureMemcmp
_SGN_VerifyPKCS1DigestInfo
DER_Encode_Util
SGN_CreateDigestInfo_Util
SGN_DestroyDigestInfo_Util
PR_smprintf_free
PL_HashTableEnumerateEntries
PL_strcasecmp
PORT_Strdup_Util
PR_IntervalNow
PR_MillisecondsToInterval
PR_GetCurrentThread
PR_Now
PR_Access
PR_NewMonitor
PR_DestroyMonitor
PR_EnterMonitor
PR_ExitMonitor
_NSSUTIL_UTF8ToWide
_NSSUTIL_Access
PR_smprintf
_NSSUTIL_EvaluateConfigDir
PL_strncasecmp
NSSUTIL_ArgFetchValue
NSSUTIL_ArgStrip
NSSUTIL_ArgSkipParameter
NSSUTIL_ArgGetLabel
NSSUTIL_ArgDecodeNumber
NSSUTIL_ArgIsBlank
NSSUTIL_ArgHasFlag
SECITEM_CompareItem_Util
PR_Free
PR_SetError
PR_CallOnce
PR_Sleep
DER_SetUInteger
PR_SecondsToInterval
SECITEM_HashCompare
PL_CompareValues
PL_HashTableLookupConst
PL_HashTableLookup
PL_HashTableRemove
PL_HashTableAdd
PL_HashTableDestroy
PL_NewHashTable
PORT_ArenaAlloc_Util
PORT_GetError_Util
PORT_ArenaGrow_Util
PORT_Realloc_Util
PR_DestroyLock
PR_NewLock
SECOID_DestroyAlgorithmID_Util
SECOID_GetAlgorithmTag_Util
SECOID_CopyAlgorithmID_Util
SECOID_SetAlgorithmID_Util
DER_GetInteger_Util
SEC_ASN1EncodeInteger_Util
SEC_ASN1EncodeItem_Util
SEC_ASN1DecodeItem_Util
SECITEM_ZfreeItem_Util
SECITEM_DupItem_Util
SECITEM_ItemsAreEqual_Util
SECITEM_AllocItem_Util
PORT_ZFree_Util
PORT_ZAlloc_Util
SECITEM_FreeItem_Util
SECITEM_CopyItem_Util
PORT_ArenaZAlloc_Util
PORT_FreeArena_Util
PORT_NewArena_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_AnyTemplate_Util
PR_GetEnvSecure
PR_GetDirectorySeparator
PR_Unlock
PR_Lock
PORT_Free_Util
PORT_Alloc_Util
PR_GetLibraryFilePathname
PR_FindFunctionSymbol
PR_UnloadLibrary
PR_LoadLibraryWithFlags
PR_GetEnv
SECOID_Init
PORT_SetError_Util
PR_snprintf
SECOID_FindOIDByMechanism

mozglue

free
malloc

kernel32

DisableThreadLibraryCalls
GetTempPathA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

vcruntime140

memcmp
_except_handler4_common
memset
__std_type_info_destroy_list
memcpy
strrchr

api-ms-win-crt-string-l1-1-0

islower
strcpy
strcmp
strlen
isupper
isdigit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-filesystem-l1-1-0

_wchmod

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm
_crt_atexit
_cexit
_execute_onexit_table
_initialize_narrow_environment
_register_onexit_function
_initterm_e

Exports

Exports

C_GetFunctionList
FC_GetFunctionList
NSC_GetFunctionList
NSC_ModuleDBFunc

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/ucrtbase.dll
.dll windows:10 windows x86

d39a7129e74d69ddb0535724bd6037b5

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:75:18:78:4c:bf:25:ce:6e:d4:fe:39:5d:42:b6:c2:0d:87:c7:17:d5:08:06:3e:7f:c7:71:e6:96:86:e1:53
Signer

Actual PE Digest

79:75:18:78:4c:bf:25:ce:6e:d4:fe:39:5d:42:b6:c2:0d:87:c7:17:d5:08:06:3e:7f:c7:71:e6:96:86:e1:53

Digest Algorithm

sha256

PE Digest Matches

true

dd:f9:9b:3b:eb:9d:89:dc:71:12:21:ef:d9:6f:d0:d1:7b:7b:5a:0c
Signer

Actual PE Digest

dd:f9:9b:3b:eb:9d:89:dc:71:12:21:ef:d9:6f:d0:d1:7b:7b:5a:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetErrorMode
RaiseException
GetLastError
SetLastError

api-ms-win-core-heap-l1-1-0

HeapCompact
HeapQueryInformation
HeapWalk
HeapFree
HeapValidate
GetProcessHeap
HeapSize
HeapAlloc
HeapReAlloc

api-ms-win-core-processthreads-l1-1-0

ExitThread
ResumeThread
TlsSetValue
ExitProcess
GetStartupInfoW
CreateProcessW
TlsAlloc
GetCurrentThread
GetCurrentThreadId
CreateThread
GetExitCodeProcess
TlsFree
TerminateProcess
GetCurrentProcess
TlsGetValue
GetCurrentProcessId

api-ms-win-core-libraryloader-l1-1-0

FreeLibrary
GetModuleHandleExW
FreeLibraryAndExitThread
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
WaitForSingleObject
EnterCriticalSection

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW
GetCurrentDirectoryW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetCommandLineA
GetStdHandle
SetCurrentDirectoryW
SetStdHandle
GetEnvironmentStringsW

api-ms-win-core-file-l1-1-0

ReadFile
GetFileSizeEx
SetFilePointerEx
CreateFileW
GetFileType
FindClose
FindNextFileW
FindFirstFileExW
GetFileInformationByHandle
GetFullPathNameW
GetDriveTypeW
GetFileAttributesExW
GetDiskFreeSpaceW
GetLogicalDrives
SetFileAttributesW
WriteFile
SetFileTime
LockFileEx
UnlockFileEx
FlushFileBuffers
SetEndOfFile
DeleteFileW
RemoveDirectoryW
CreateDirectoryW

api-ms-win-core-string-l1-1-0

GetStringTypeW
MultiByteToWideChar
CompareStringW
WideCharToMultiByte

api-ms-win-core-localization-l1-2-0

GetOEMCP
GetLocaleInfoW
GetCPInfo
IsValidCodePage
IsValidLocale
EnumSystemLocalesW
LCMapStringW
GetUserDefaultLCID
GetACP

api-ms-win-core-datetime-l1-1-0

GetDateFormatW
GetTimeFormatW

api-ms-win-core-sysinfo-l1-1-0

SetLocalTime
GetSystemInfo
GetLocalTime
GetSystemTimeAsFileTime

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-console-l1-1-0

PeekConsoleInputA
SetConsoleCtrlHandler
WriteConsoleW
GetConsoleCP
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleW
ReadConsoleInputW
GetConsoleMode

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe
CreatePipe

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformation
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualAlloc
VirtualProtect

api-ms-win-core-util-l1-1-0

EncodePointer
Beep
DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwind

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InterlockedPushEntrySList

Exports

Exports

_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_Cbuild
_Cmulcc
_Cmulcr
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_Exit
_FCbuild
_FCmulcc
_FCmulcr
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_IsExceptionObjectToBeDestroyed
_LCbuild
_LCmulcc
_LCmulcr
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__acrt_iob_func
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
__control87_2
__current_exception
__current_exception_context
__daylight
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__doserrno
__dstbias
__fpe_flt_rounds
__fpecode
__initialize_lconv_for_unsigned_char
__intrinsic_abnormal_termination
__intrinsic_setjmp
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__commode
__p__environ
__p__fmode
__p__mbcasemap
__p__mbctype
__p__pgmptr
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__processing_throw
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__setusermatherr
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__strncnt
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__wcserror
__wcserror_s
__wcsncnt
_abs64
_access
_access_s
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_base
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_configthreadlocale
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cputs
_cputws
_creat
_create_locale
_crt_at_quick_exit
_crt_atexit
_crt_debugger_hook
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_d_int
_dclass
_dexp
_difftime32
_difftime64
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_endthread
_endthreadex
_eof
_errno
_except1
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execute_onexit_table
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flushall
_fpclass
_fpieee_flt
_fpreset
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_base
_free_locale
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwrite_nolock
_gcvt
_gcvt_s
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_osfhandle
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_stream_buffer_pointers
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_timezone
_get_tzname
_get_unexpected
_get_wide_winmain_command_line
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwc_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapchk
_heapmin
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_is_exception_typeof
_isalnum_l
_isalpha_l
_isatty
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/uninstall/helper.exe
.exe windows:4 windows x86

7ed0d71376e55d58ab36dc7d3ffda898

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cd:54:e3:bb:f7:cf:22:1e:a8:41:e2:2e:a7:a2:ba:45:b4:8e:0c:90:7d:c8:ed:9e:dd:15:37:9f:d0:7e:41:0e
Signer

Actual PE Digest

cd:54:e3:bb:f7:cf:22:1e:a8:41:e2:2e:a7:a2:ba:45:b4:8e:0c:90:7d:c8:ed:9e:dd:15:37:9f:d0:7e:41:0e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathW
SetFileTime
CloseHandle
GetShortPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
GetFullPathNameW
CreateDirectoryW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
SetFileAttributesW
ExpandEnvironmentStringsW
LoadLibraryW
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcpyA
lstrcpyW
lstrcatW
GetSystemDirectoryW
GetVersion
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
lstrcmpiW
lstrcmpW
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryExW
GetExitCodeProcess
FreeLibrary
WritePrivateProfileStringW
SetErrorMode
GetCommandLineW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
WriteFile
lstrlenA
WideCharToMultiByte

user32

EndDialog
ScreenToClient
GetWindowRect
RegisterClassW
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
wsprintfW
CreateWindowExW
SystemParametersInfoW
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
GetDC
SetWindowLongW
LoadImageW
SendMessageTimeoutW
FindWindowExW
EmptyClipboard
OpenClipboard
TrackPopupMenu
EndPaint
ShowWindow
GetDlgItem
IsWindow
SetForegroundWindow

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW

advapi32

RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/vcruntime140.dll
.dll windows:6 windows x86

b1497ec17e3cfac16846155a7a629324

Code Sign

33:00:00:00:98:04:58:cb:7f:23:09:b0:9e:00:00:00:00:00:98
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/03/2016, 19:21

Not After

30/06/2017, 19:21

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7AFA-E41C-E142,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:36:20:06:62:da:36:8e:86:bf:ee:34:54:e9:75:cf:a4:bc:79:db:d3:66:5f:9a:17:f3:3b:35:11:4e:a7:54
Signer

Actual PE Digest

9c:36:20:06:62:da:36:8e:86:bf:ee:34:54:e9:75:cf:a4:bc:79:db:d3:66:5f:9a:17:f3:3b:35:11:4e:a7:54

Digest Algorithm

sha256

PE Digest Matches

true

49:da:11:da:30:75:f9:b8:f6:b1:71:30:9c:45:e3:50:dc:29:3a:89
Signer

Actual PE Digest

49:da:11:da:30:75:f9:b8:f6:b1:71:30:9c:45:e3:50:dc:29:3a:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-heap-l1-1-0

malloc
_free_base
free
_malloc_base
_calloc_base

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

DeleteCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
TlsFree
TlsGetValue
RtlUnwind
VirtualQuery
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetLastError
TlsSetValue
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetProcAddress
FreeLibrary

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_purecall
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_purecall_handler
_set_se_translator
_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Bin/basilisk/xul.dll
.dll windows:6 windows x86

78615ac9afce0c7a5ec0589bd399ec00

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2019, 00:00

Not After

07/03/2023, 23:59

Subject

CN=Mark Straver,O=Mark Straver,POSTALCODE=57333,STREET=Östra Järnvägsgatan 1A,L=Tranås,ST=Jönköpingslän,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:60:29:68:ee:1a:e4:0b:67:04:37:eb:05:73:d6:12:0a:69:25:f4:0f:45:8f:5b:f0:05:f3:66:2f:20:b6:b7
Signer

Actual PE Digest

7c:60:29:68:ee:1a:e4:0b:67:04:37:eb:05:73:d6:12:0a:69:25:f4:0f:45:8f:5b:f0:05:f3:66:2f:20:b6:b7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nss3

NSS_CMSSignedData_AddCertList
NSS_CMSSignedData_AddCertificate
NSS_CMSSignedData_SetDigestValue
NSS_CMSSignedData_CreateCertsOnly
NSS_CMSSignerInfo_Verify
NSS_CMSSignerInfo_GetSigningCertificate
VFY_VerifyDataWithAlgorithmID
SECKEY_ECParamsToKeySize
SECKEY_ECParamsToBasePointOrderLen
PK11_FreeSlotList
PK11_FreeSlotListElement
PK11_GetFirstSafe
PK11_GetNextSafe
PK11_ReferenceSlot
PK11_DestroyTokenObject
PK11_IsReadOnly
PK11_IsInternal
PK11_ProtectedAuthenticationPath
PR_IsNetAddrType
PR_SetNetAddr
PR_htonl
PR_ntohl
PR_ConvertIPv4AddrToIPv6
PR_Sync
PR_Available64
PR_FormatTimeUSEnglish
SSL_NumImplementedCiphers
SSL_ImplementedCiphers
SSL_GetCipherSuiteInfo
SSL_GetChannelInfo
NSS_FindCertKEAType
SSL_HandshakeCallback
SSL_ConfigSecureServer
SSL_AuthCertificateHook
SSL_PeerCertificate
SSL_VersionRangeSet
SSL_CipherPrefSet
SSL_OptionSet
SSL_ImportFD
PK11_FindKeyByAnyCert
SECKEY_DestroyPrivateKey
PR_GetIdentitiesLayer
PR_NetAddrToString
PR_StringToNetAddr
PR_OpenUDPSocket
PR_InitializeNetAddr
PR_SetSocketOption
PR_GetSockName
PR_NewTCPSocketPair
PR_Listen
PR_Bind
PR_Accept
PR_ConnectContinue
PR_Connect
PR_OpenTCPSocket
PR_Write
PR_PushIOLayer
PK11_GetAllTokens
PK11_GetBestSlot
PK11_GenerateKeyPairWithFlags
PK11_FindCertsFromEmailAddress
PK11_ImportCertForKey
PK11_KeyForCertExists
PK11_GetAllSlotsForCert
HASH_Create
HASH_Destroy
HASH_Begin
HASH_Update
HASH_End
HASH_GetType
SECMOD_AddNewModule
SECMOD_PubMechFlagstoInternal
SECMOD_PubCipherFlagstoInternal
__CERT_AddTempCertToPerm
SEC_DeletePermCertificate
BTOA_DataToAscii
DER_Encode
DER_GetInteger
SSL_HandshakeNegotiatedExtension
PORT_ArenaStrdup
PORT_SetUCS2_ASCIIConversionFunction
SECITEM_ZfreeItem
PR_PopIOLayer
CERT_FindUserCertsByUsage
PR_DestroyLock
PR_Lock
PR_Unlock
PR_SetError
PR_GetError
PR_GetLibraryName
CERT_FilterCertListByCANames
CERT_DerNameToAscii
SEC_SignData
PR_CreateFileMap
PR_ErrorToString
PK11_Logout
PK11_SetSlotPWValues
PR_MemMap
PK11_GetSlotPWValues
PK11_CheckUserPassword
PK11_ChangePW
PK11_SetPasswordFunc
PK11_GetMinimumPwdLength
PK11_ResetToken
PK11_FindSlotByName
PK11_FindSlotsByNames
PK11_GetSlotName
PK11_IsFriendly
PK11_IsHW
PK11_GetSlotSeries
PK11_GetSlotInfo
PK11_GetTokenInfo
PK11_IsDisabled
PK11_IsFIPS
PK11_ParamFromIV
PK11_TokenKeyGenWithFlags
PK11_ListFixedKeysInSlot
PK11_GetNextSymKey
PK11_SetSymKeyNickname
PK11_FindKeyByDERCert
PK11_UnwrapPrivKey
PK11_WrapPrivKey
PK11_CipherOp
PR_CreateIOLayerStub
PR_GetDefaultIOMethods
PR_GetUniqueIdentity
PL_strcasecmp
PR_LocalTimeParameters
PR_sscanf
PL_strncpyz
PR_ParseTimeString
PR_dtoa
PR_FileDesc2NativeHandle
SSL_ClearSessionCache
NSS_Shutdown
NSS_IsInitialized
PR_fprintf
PR_Seek64
PR_Rename
SEC_PKCS12CreatePasswordPrivSafe
SEC_PKCS12CreateUnencryptedSafe
SEC_PKCS12AddPasswordIntegrity
SEC_PKCS12CreateExportContext
PR_Delete
PR_Open
PR_GetOpenFileInfo64
PR_Read
PR_GetThreadPrivate
PR_SetEnv
PR_Notify
PR_NotifyAllCondVar
PR_SetCurrentThreadName
PR_SetThreadPriority
PR_JoinThread
PR_CreateThread
PR_IntervalToSeconds
PR_MicrosecondsToInterval
PR_MillisecondsToInterval
PR_GetErrorText
PR_GetErrorTextLength
SEC_PKCS12AddCertAndKey
SEC_PKCS12Encode
PR_MemUnmap
SEC_PKCS12DecoderStart
SEC_PKCS12DecoderUpdate
SEC_PKCS12DecoderFinish
SEC_PKCS12DecoderVerify
SEC_PKCS12DecoderValidateBags
SEC_PKCS12DecoderImportBags
SECMOD_CreateModule
SECMOD_GetDeadModuleList
NSS_CMSSignedData_GetSignerInfo
SECMOD_CanDeleteInternalModule
SECMOD_GetInternalModule
SECMOD_ReferenceModule
SECMOD_HasRemovableSlots
PR_CloseFileMap
PR_TicksPerSecond
PL_HashTableRawRemove
PL_strtok_r
PR_NewLogModule
PK11_GenerateRandom
PR_htons
NSS_NoDB_Init
PORT_ArenaZAlloc
SECOID_SetAlgorithmID
SEC_ASN1EncodeItem
PR_AtomicSet
PR_AtomicAdd
PR_GetVersion
NSS_GetVersion
NSS_OptionSet
PK11_ConfigurePKCS11
SEC_PKCS12IsEncryptionAllowed
SEC_PKCS12EnableCipher
SEC_PKCS12SetPreferredCipher
SSL_OptionSetDefault
SSL_CipherPrefSetDefault
SSL_SignatureSchemePrefSet
SSL_SendAdditionalKeyShares
SSL_VersionRangeGetSupported
SSL_VersionRangeSetDefault
SSL_VersionRangeGet
SSL_SetDowngradeCheckVersion
SSL_SetPKCS11PinArg
SSL_SetCanFalseStartCallback
SSL_SetURL
NSS_CMSSignedData_SignerInfoCount
NSS_CMSSignedData_Destroy
NSS_CMSContentInfo_GetContentTypeTag
NSS_CMSContentInfo_GetContent
NSS_CMSContentInfo_SetContent_SignedData
NSS_CMSMessage_IsSigned
PR_FindSymbol
PR_UnloadLibrary
PL_SizeOfArenaPoolExcludingPool
PL_strncmp
PR_NotifyAll
PR_Wait
PR_ExitMonitor
PR_EnterMonitor
PR_DestroyMonitor
PR_NewMonitor
PR_NotifyCondVar
PR_WaitCondVar
PR_DestroyCondVar
PR_NewCondVar
PL_Base64Decode
PL_Base64Encode
PR_LoadLibraryWithFlags
PR_ImportFile
PR_Close
PR_smprintf
PL_ArenaAllocate
PL_FinishArenaPool
PL_InitArenaPool
PR_Free
PR_Malloc
PL_strcmp
PL_strfree
PL_strdup
PR_GetPhysicalMemorySize
PR_GetPageShift
PR_GetPageSize
PR_GetSystemInfo
PR_GetMemMapAlignment
PL_HashTableRawAdd
PL_HashTableRawLookup
PL_CompareValues
PL_CompareStrings
PL_HashString
PL_HashTableEnumerateEntries
PL_HashTableLookup
PL_HashTableRemove
PL_HashTableAdd
PL_HashTableDestroy
PL_NewHashTable
PR_Sleep
PR_SetThreadPrivate
PR_NewThreadPrivateIndex
PR_IntervalToMicroseconds
PR_vsmprintf
PR_vsnprintf
PR_smprintf_free
PR_ErrorToName
PR_GMTParameters
PR_ExplodeTime
PR_Now
PR_LogPrint
PR_GetThreadName
PR_GetCurrentThread
PR_IntervalToMilliseconds
PR_IntervalNow
PR_GetEnv
PR_sxprintf
PR_vsxprintf
PR_strtod
PL_strncasecmp
NSSBase64_EncodeItem
ATOB_ConvertAsciiToItem
CERT_CompareCerts
SECITEM_CompareItem
PL_strpbrk
SECKEY_DestroyPublicKey
SECKEY_ExtractPublicKey
SECKEY_DecodeDERSubjectPublicKeyInfo
SECKEY_DestroySubjectPublicKeyInfo
VFY_VerifyDigestDirect
PR_ErrorInstallTable
NSS_Initialize
SEC_CertNicknameConflict
SECMOD_DestroyModule
SECMOD_DeleteModule
SECMOD_FindModule
SECMOD_ReleaseReadLock
SECMOD_GetReadLock
SECMOD_GetDefaultModuleListLock
SECMOD_GetDefaultModuleList
SECMOD_UnloadUserModule
SECMOD_LoadUserModule
PK11_DigestFinal
PK11_DigestOp
PK11_HashBuf
PK11_DigestBegin
PK11_CreateDigestContext
PK11_DestroyContext
PK11_FindCertInSlot
PK11_ImportCert
PK11_IsPresent
PK11_HasRootCerts
PK11_GetInternalKeySlot
PK11_FreeSlot
CERT_CreateSubjectCertList
CERT_DestroyCertList
CERT_GetImposedNameConstraints
CERT_GetNextGeneralName
CERT_DecodeAuthInfoAccessExtension
CERT_DestroyCertificatePoliciesExtension
CERT_DecodeCertificatePoliciesExtension
CERT_GetCertTrust
CERT_GetOrgUnitName
CERT_GetOrgName
CERT_GetStateName
CERT_GetLocalityName
CERT_GetCountryName
CERT_GetCommonName
CERT_GetCertTimes
CERT_NewTempCertificate
CERT_GetDefaultCertDB
CERT_DestroyCertificate
NSS_SetAlgorithmPolicy
SEC_StringToOID
SECOID_AddEntry
SECOID_FindOIDByTag
SECOID_FindOIDTag
SECITEM_FreeItem
SECITEM_DupItem
SECITEM_AllocItem
PR_SecondsToInterval
PORT_ArenaAlloc
PORT_FreeArena
PORT_NewArena
PORT_Free
PL_strlen
PR_FreeLibraryName
NSS_CMSMessage_ContentLevel
NSS_CMSMessage_GetContentInfo
NSS_CMSMessage_Destroy
NSS_CMSMessage_Create
NSS_CMSEncoder_Finish
NSS_CMSEncoder_Start
NSS_CMSMessage_CreateFromDER
CERT_FindUserCertByUsage
CERT_FilterCertListByUsage
CERT_AddCertToListHead
CERT_RemoveCertListNode
CERT_DestroyUserNotice
CERT_DecodeUserNotice
CERT_SaveSMimeProfile
CERT_IsCACert
CERT_MakeCANickname
CERT_ImportCerts
CERT_DestroyCertArray
CERT_CertChainFromCert
CERT_FindKeyUsageExtension
CERT_DecodeOidSequence
CERT_DecodeCRLDistributionPoints
CERT_DecodeAuthKeyID
CERT_DecodeBasicConstraintValue
CERT_DestroyOidSequence
CERT_GetNextEmailAddress
CERT_GetFirstEmailAddress
CERT_DecodeAVAValue
CERT_DecodeCertPackage
CERT_DecodeCertFromPackage
CERT_FindCertIssuer
CERT_FindCertByNickname
CERT_FindCertByIssuerAndSN
CERT_GetCertChainFromCert
CERT_RFC1485_EscapeAndQuote
CERT_Hexify
CERT_CompareName
PR_GetOpenFileInfo
NSS_Get_SEC_UTF8StringTemplate
NSS_Get_SEC_OctetStringTemplate
NSS_Get_CERT_CertificateTemplate
SECKEY_CreateSubjectPublicKeyInfo
CERT_AsciiToName
PR_Available
PR_Recv
PR_GetSocketOption
PR_GetOSError
PR_CallOnce
PR_GetDescType
PR_GetPeerName
PR_Poll
PR_ntohs
PL_strchr
PL_strstr
PR_RecvFrom
PR_SendTo
PR_EnumerateAddrInfo
CERT_DestroyName
PR_GetAddrInfoByName
PR_FreeAddrInfo
PR_GetCanonNameFromAddrInfo
PL_strncasestr
PR_GetLayersIdentity
PR_ChangeFileDescNativeHandle
PR_Calloc
PR_NormalizeTime
PL_strnstr
PR_Seek
PR_Realloc
CERT_CreateValidity
PR_FormatTime
PL_strndup
PL_strcasestr
PR_ImplodeTime
SECOID_GetAlgorithmTag
PR_LoadLibrary
PR_FindFunctionSymbol
PR_vsprintf_append
SECMOD_DeleteInternalModule
CERT_DestroyValidity
PR_GetThreadID
CERT_CreateCertificate
CERT_CreateCertificateRequest
CERT_DestroyCertificateRequest
SEC_DerSignData
PK11_GetInternalSlot
PK11_GenerateRandomOnSlot
PK11_GenerateKeyPair
HASH_HashBuf
HASH_GetHashObject
PK11_FreeSymKey
PK11_ImportSymKey
PK11_CreateContextBySymKey
NSS_Get_SEC_IntegerTemplate
CERT_DupCertificate
CERT_NewCertList
SECKEY_CopyPrivateKey
DTLS_ImportFD
SSL_SetNextProtoNego
SSL_GetNextProto
SSL_CipherPrefGet
SSL_NamedGroupConfig
SSL_ResetHandshake
SSL_ForceHandshake
SSL_GetClientAuthDataHook
SSL_SetTrustAnchors
SSL_SetSRTPCiphers
SSL_GetSRTPCipher
SSL_ExportKeyingMaterial
DTLS_GetHandshakeTimeout
PL_HashTableLookupConst
PR_FindFunctionSymbolAndLibrary
PR_GetNumberOfProcessors
PR_GetRandomNoise
SECITEM_ItemsAreEqual
SECITEM_CopyItem
NSS_Get_CERT_SubjectPublicKeyInfoTemplate
PK11_DestroyObject
PK11_ImportPublicKey
PK11_FindKeyByKeyID
PK11_ImportDERPrivateKeyInfoAndReturnKey
PK11_ExportDERPrivateKeyInfo
PK11_DestroyGenericObject
PK11_CreateGenericObject
PK11_ReadRawAttribute
SECKEY_CopyPublicKey
SECKEY_ImportDERPublicKey
NSS_SecureMemcmp
NSS_Get_SECOID_AlgorithmIDTemplate
NSS_Get_SEC_IA5StringTemplate
NSS_Get_SEC_BitStringTemplate
NSS_Get_SEC_BMPStringTemplate
SEC_ASN1DecodeInteger
SEC_QuickDERDecodeItem
SEC_ASN1DecodeItem
SECOID_FindOID
PORT_UCS2_UTF8Conversion
PORT_GetError
PORT_Alloc
PK11SDR_Decrypt
PK11SDR_Encrypt
SSL_PeerSignedCertTimestamps
SSL_PeerStapledOCSPResponses
SSL_PeerCertificateChain
NSSBase64_DecodeBuffer
PK11_ListCerts
PK11_FindCertFromNickname
PK11_DeleteTokenCertAndKey
PK11_NeedUserInit
PK11_NeedLogin
PK11_GetTokenName
PK11_Authenticate
PK11_InitPin
PK11_IsLoggedIn
PK11_LogoutAll

mozglue

?ProcessCreation@TimeStamp@mozilla@@SA?AV12@AA_N@Z
?Startup@TimeStamp@mozilla@@SAXXZ
??0SHA1Sum@mozilla@@QAE@XZ
?update@SHA1Sum@mozilla@@QAEXPBXI@Z
?finish@SHA1Sum@mozilla@@QAEXAAY0BE@E@Z
mozPoisonValueInit
wcsdup
_strdup
_wcsdup
malloc_good_size
?compress@LZ4@Compression@mozilla@@SAIPBDIPAD@Z
gMozillaPoisonValue
?ToSecondsSigDigits@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?toDouble@Decimal@blink@@QBENXZ
??0Decimal@blink@@QAE@H@Z
jemalloc_free_dirty_pages
??0Decimal@blink@@QAE@ABV01@@Z
??4Decimal@blink@@QAEAAV01@ABV01@@Z
??YDecimal@blink@@QAEAAV01@ABV01@@Z
??ZDecimal@blink@@QAEAAV01@ABV01@@Z
??GDecimal@blink@@QBE?AV01@XZ
??8Decimal@blink@@QBE_NABV01@@Z
??9Decimal@blink@@QBE_NABV01@@Z
??MDecimal@blink@@QBE_NABV01@@Z
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
??ODecimal@blink@@QBE_NABV01@@Z
??PDecimal@blink@@QBE_NABV01@@Z
??HDecimal@blink@@QBE?AV01@ABV01@@Z
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z
?moz_Xout_of_range@std@@YAXPBD@Z
??GDecimal@blink@@QBE?AV01@ABV01@@Z
??DDecimal@blink@@QBE?AV01@ABV01@@Z
jemalloc_stats
?floor@Decimal@blink@@QBE?AV12@XZ
?round@Decimal@blink@@QBE?AV12@XZ
?toString@Decimal@blink@@QBE_NPADI@Z
?fromDouble@Decimal@blink@@SA?AV12@N@Z
?fromString@Decimal@blink@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?nan@Decimal@blink@@SA?AV12@XZ
?ResolutionInTicks@BaseTimeDurationPlatformUtils@mozilla@@SA_JXZ
_HeapFree@12
malloc_usable_size
_HeapAlloc@12
?decompress@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
?RecordProcessRestart@TimeStamp@mozilla@@SAXXZ
_aligned_free
moz_malloc_size_of
?moz_Xlength_error@std@@YAXPBD@Z
?mozalloc_abort@@YAXQBD@Z
_aligned_malloc
?decompressPartial@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z
?decompress@LZ4@Compression@mozilla@@SA_NPBDPADI@Z
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPA_NPAVStringBuilder@2@@Z
?mozalloc_handle_oom@@YAXI@Z
?IsFloat32Representable@mozilla@@YA_NN@Z
?gChaosFeatures@detail@mozilla@@3W4ChaosFeature@2@A
?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
??0TimeStampValue@mozilla@@AAE@_K0_N@Z
?DllBlocklist_SetInXPCOMLoadOnMainThread@@YAX_N@Z
?HashBytes@mozilla@@YAIPBXI@Z
moz_xcalloc
?moz_Xbad_function_call@std@@YAXXZ
gMozCrashReason
MOZ_CrashPrintf
?gTwoCharEscapes@detail@mozilla@@3QBDB
?Unused@mozilla@@3Uunused_t@1@B
?StackWalkInitCriticalAddress@@YAXXZ
?MozFormatCodeAddressDetails@@YAXPADIIPAXPBUMozCodeAddressDetails@@@Z
?MozFormatCodeAddress@@YAXPADIIPBXPBD2H2I@Z
?MozDescribeCodeAddress@@YA_NPAXPAUMozCodeAddressDetails@@@Z
??GTimeStampValue@mozilla@@QBE_KABV01@@Z
?MozStackWalk@@YA_NP6AXIPAX00@ZII0I0@Z
moz_xrealloc
realloc
strdup
calloc
malloc
posix_memalign
?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
moz_malloc_usable_size
?mmx_enabled@sse_private@mozilla@@3_NA
?sse3_enabled@sse_private@mozilla@@3_NA
?avx2_enabled@sse_private@mozilla@@3_NA
?avx_enabled@sse_private@mozilla@@3_NA
?sse4_2_enabled@sse_private@mozilla@@3_NA
?sse4_1_enabled@sse_private@mozilla@@3_NA
?sse4a_enabled@sse_private@mozilla@@3_NA
??KDecimal@blink@@QBE?AV01@ABV01@@Z
?ssse3_enabled@sse_private@mozilla@@3_NA
free
moz_xmalloc
??NDecimal@blink@@QBE_NABV01@@Z

lgpllibs

av_rdft_calc
av_rdft_init
?getVersionId@SoundTouch@soundtouch@@SAIXZ
?destroySoundTouchObj@soundtouch@@YAXPAVSoundTouch@1@@Z
?createSoundTouchObj@soundtouch@@YAPAVSoundTouch@1@XZ
?setSampleRate@SoundTouch@soundtouch@@QAEXI@Z
?setChannels@SoundTouch@soundtouch@@QAEXI@Z
?setPitch@SoundTouch@soundtouch@@QAEXM@Z
?setTempo@SoundTouch@soundtouch@@QAEXM@Z
?setRate@SoundTouch@soundtouch@@QAEXM@Z
?numUnprocessedSamples@SoundTouch@soundtouch@@UBEIXZ
?clear@SoundTouch@soundtouch@@UAEXXZ
?putSamples@SoundTouch@soundtouch@@UAEXPBMI@Z
??1SoundTouch@soundtouch@@UAE@XZ
av_rdft_end

mozsqlite3

sqlite3_errmsg
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_parameter_index
sqlite3_db_handle
sqlite3_close
sqlite3_exec
sqlite3_extended_result_codes
sqlite3_last_insert_rowid
sqlite3_changes
sqlite3_progress_handler
sqlite3_open_v2
sqlite3_uri_parameter
sqlite3_errcode
sqlite3_prepare_v2
sqlite3_sql
sqlite3_step
sqlite3_finalize
sqlite3_reset
sqlite3_create_function
sqlite3_user_data
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error_code
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_db_filename
sqlite3_next_stmt
sqlite3_mutex_enter
sqlite3_mutex_leave
sqlite3_db_mutex
sqlite3_file_control
sqlite3_db_status
sqlite3_unlock_notify
sqlite3_libversion_number
sqlite3_initialize
sqlite3_shutdown
sqlite3_config
sqlite3_memory_used
sqlite3_stmt_readonly
sqlite3_clear_bindings
sqlite3_column_count
sqlite3_column_name
sqlite3_column_blob
sqlite3_column_double
sqlite3_column_int64
sqlite3_column_text16
sqlite3_column_bytes
sqlite3_column_type
sqlite3_value_blob
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_type
sqlite3_result_error_nomem
sqlite3_create_collation
sqlite3_get_autocommit
sqlite3_create_module
sqlite3_declare_vtab
sqlite3_bind_parameter_count
sqlite3_bind_parameter_name
sqlite3_column_int
sqlite3_column_text
sqlite3_column_bytes16
sqlite3_bind_blob

kernel32

GetStdHandle
RaiseException
RegisterWaitForSingleObject
UnregisterWaitEx
PostQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
GetTempFileNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateEventW
InitializeConditionVariable
DeleteCriticalSection
TryEnterCriticalSection
GlobalFree
GlobalAlloc
CreateThread
SleepConditionVariableCS
WakeAllConditionVariable
LoadLibraryW
WaitForMultipleObjects
GetVersionExW
GetModuleHandleA
GetQueuedCompletionStatus
CreateIoCompletionPort
GetCurrentThreadId
SetNamedPipeHandleState
WriteFile
GetCurrencyFormatW
GetNumberFormatW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
Sleep
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetThreadLocale
GetTimeZoneInformation
CreateFileMappingA
GetLocaleInfoA
LoadLibraryA
FreeLibrary
GetLocaleInfoW
GetACP
GetTimeFormatW
GetDateFormatW
LCMapStringW
CompareStringW
GetUserDefaultLCID
GetSystemDefaultLCID
SetThreadPriority
SetFilePointerEx
ReadFile
CreateFileA
SetThreadIdealProcessor
GetOverlappedResult
GetCurrentThread
DuplicateHandle
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetWindowsDirectoryW
GetSystemDirectoryW
GetTempPathW
GetEnvironmentVariableW
GetUserDefaultLangID
SystemTimeToFileTime
MoveFileExW
CopyFileExW
LocalFree
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
GetShortPathNameW
GetFileAttributesExW
GetFileAttributesW
GetDriveTypeW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetLastError
GetLongPathNameW
GetLogicalDriveStringsW
CreateEventA
ExpandEnvironmentStringsW
K32GetProcessMemoryInfo
K32QueryWorkingSet
GetUserGeoID
GetGeoInfoW
IsWow64Process
VirtualQuery
ReleaseSRWLockExclusive
GetNativeSystemInfo
GetSystemInfo
DeviceIoControl
HeapWalk
HeapUnlock
HeapLock
GetProcessHeaps
GetLastError
GetVolumePathNameW
CreateFileW
LoadLibraryExA
GetProcAddress
VirtualProtectEx
GlobalMemoryStatusEx
FlushInstructionCache
DecodePointer
EncodePointer
OutputDebugStringW
OutputDebugStringA
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
DebugBreak
IsDebuggerPresent
GetSystemTimeAsFileTime
TerminateProcess
VerifyVersionInfoA
IsProcessorFeaturePresent
UnhandledExceptionFilter
VirtualFreeEx
VirtualAllocEx
VerSetConditionMask
GetProcessId
RemoveVectoredExceptionHandler
SetThreadContext
GetThreadContext
SuspendThread
AddVectoredExceptionHandler
SleepConditionVariableSRW
GetCurrentProcessorNumberEx
SetCriticalSectionSpinCount
VirtualFree
VirtualAlloc
GetFileSizeEx
GetFileInformationByHandle
AcquireSRWLockExclusive
GetFileType
InitializeSRWLock
InterlockedFlushSList
ExitProcess
WakeConditionVariable
InitializeCriticalSectionEx
AllocConsole
AttachConsole
SetProcessShutdownParameters
SetErrorMode
GetEnvironmentVariableA
CompareFileTime
GetThreadTimes
ReadDirectoryChangesW
ResumeThread
GetLocalTime
SleepEx
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetModuleHandleExA
GetProfileStringW
SetThreadExecutionState
GlobalReAlloc
LoadLibraryExW
GetSystemTime
GetProcessHeap
K32GetProcessImageFileNameW
lstrlenW
lstrcmpiW
SetEnvironmentVariableW
CreateSemaphoreW
SetDllDirectoryW
GetFileSize
K32GetModuleFileNameExW
K32EnumProcessModules
GetSystemDefaultLangID
CreateSemaphoreA
ReleaseSemaphore
lstrcatW
VerifyVersionInfoW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
GlobalLock
GlobalUnlock
GlobalSize
OpenThread
QueueUserAPC
GetModuleHandleExW
WaitForSingleObjectEx
GetTickCount
SwitchToThread
VirtualProtect
CreateMutexA
GetHandleInformation
SetUnhandledExceptionFilter
GetCommandLineW
CancelIo
CreateNamedPipeW
ConnectNamedPipe
FormatMessageW
QueryPerformanceFrequency
QueryPerformanceCounter
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateMutexW
ReleaseMutex
OpenProcess
GetCurrentProcessId
GetProcessTimes
GetCurrentProcess

user32

GetKeyboardLayoutList
GetKeyboardLayoutNameW
WindowFromPoint
ScreenToClient
GetCursorPos
SetKeyboardState
GetKeyboardState
InSendMessage
GetMessageTime
GetMessagePos
GetWindowRect
UpdateLayeredWindow
EqualRect
IntersectRect
SetRectEmpty
SetRect
GetSysColor
SetCaretPos
DestroyCaret
CreateCaret
SetWindowLongA
PtInRect
GetForegroundWindow
ReleaseCapture
SetFocus
ShowWindow
InSendMessageEx
DefWindowProcA
ReplyMessage
SendMessageW
GetKeyboardLayout
EnableWindow
GetParent
GetFocus
IsChild
RegisterWindowMessageW
GetKeyState
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoW
GetRawInputData
GetIconInfo
EnumThreadWindows
FillRect
MonitorFromWindow
GetClientRect
IsIconic
GetClassInfoW
RegisterClassW
ReleaseDC
GetDC
SystemParametersInfoW
SetWinEventHook
DestroyIcon
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindowThreadProcessId
GetClassNameW
FindWindowExW
SetWindowLongW
GetWindowLongW
RemovePropW
GetPropW
SetPropW
RedrawWindow
ValidateRect
InvalidateRect
GetUpdateRect
UpdateWindow
MsgWaitForMultipleObjects
SetWindowPos
IsWindow
CallWindowProcW
GetSystemMetrics
KillTimer
SetTimer
GetQueueStatus
DestroyWindow
CreateWindowExW
IsWindowVisible
UnregisterClassW
PostQuitMessage
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
EnumChildWindows
EnumWindows
GetTopWindow
GetWindow
LoadCursorW
MonitorFromPoint
MonitorFromRect
EnumDisplayMonitors
ActivateKeyboardLayout
TrackMouseEvent
GetDoubleClickTime
AnimateWindow
FlashWindowEx
GetWindowPlacement
SetCapture
GetMenu
GetSystemMenu
TrackPopupMenu
SetMenuItemInfoW
SetForegroundWindow
BeginPaint
EndPaint
SetWindowRgn
GetWindowRgn
GetWindowRgnBox
AdjustWindowRectEx
MessageBeep
ShowCursor
SetCursorPos
ClientToScreen
MapWindowPoints
GetClassLongW
SetClassLongA
SetClassLongW
SetParent
LoadIconW
LoadImageW
CreateIconIndirect
GetMonitorInfoW
GetGUIThreadInfo
GetAsyncKeyState
GetWindowDC
GetWindowTextW
EnumDisplaySettingsExW
GetCursorInfo
OpenInputDesktop
SetThreadDesktop
CloseDesktop
GetThreadDesktop
GetUserObjectInformationW
GetDesktopWindow
PrintWindow
GetWindowTextLengthW
IsRectEmpty
SendMessageA
CreateWindowExA
SetWindowTextA
GetWindowLongA
ShowCaret
NotifyWinEvent
DdeInitializeW
DdeUninitialize
DdeNameService
DdeCreateDataHandle
DdeAccessData
DdeUnaccessData
DdeCreateStringHandleA
DdeQueryStringW
DdeFreeStringHandle
LoadKeyboardLayoutA
ToUnicodeEx
UnloadKeyboardLayout
DdeCmpStringHandles
SystemParametersInfoA
GetActiveWindow
SendInput
MapVirtualKeyExW
IsWindowEnabled
SetWindowTextW
FindWindowW
EnumDisplaySettingsA
EnumDisplayDevicesA
EnumDisplayDevicesW
GetAncestor
DrawEdge
DrawFrameControl
GetMessageW
GetMessageExtraInfo
SendNotifyMessageW
GetDlgItem
OpenClipboard
CloseClipboard
GetClipboardData
RegisterClipboardFormatW
IsClipboardFormatAvailable
GetLastInputInfo
GetCapture
MsgWaitForMultipleObjectsEx
WindowFromDC
MessageBoxW
SetCursor
GetCaretBlinkTime
GetSysColorBrush
DrawFocusRect
FrameRect
RegisterClassExW
InflateRect

gdi32

GetRegionData
SetBkColor
SetLayout
SetPixel
SetTextColor
SetTextAlign
SetBrushOrgEx
UnrealizeObject
CombineRgn
CreateDIBitmap
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
ExtCreateRegion
GetRandomRgn
OffsetRgn
GetObjectType
SetDCBrushColor
SetRectRgn
GetCharWidth32A
GetOutlineTextMetricsA
GetFontUnicodeRanges
SetBkMode
SetMapMode
GetTextMetricsA
ModifyWorldTransform
GetPixel
ExtEscape
GetClipBox
LineTo
SetPolyFillMode
StretchDIBits
SetStretchBltMode
BeginPath
CloseFigure
EndPath
FillPath
SelectClipPath
SetMiterLimit
StrokePath
WidenPath
ExtCreatePen
MoveToEx
PolyBezierTo
CreateCompatibleBitmap
GetClipRgn
GetGraphicsMode
PatBlt
ExtSelectClipRgn
StretchBlt
GetCharABCWidthsW
GetTextExtentPointI
GetTextFaceW
CreatePatternBrush
CreateICW
CreateDCW
CreateBitmap
BitBlt
GetCurrentObject
SelectClipRgn
IntersectClipRect
GetICMProfileW
SaveDC
SetViewportOrgEx
SetWorldTransform
GetWorldTransform
GetViewportOrgEx
GetObjectW
AddFontResourceExW
GetStockObject
EnumFontFamiliesExW
GetTextMetricsW
SetGraphicsMode
RestoreDC
GetCharWidthI
GetGlyphIndicesW
GetTextExtentPoint32W
GetOutlineTextMetricsW
GetGlyphOutlineW
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
GetDeviceCaps
GdiFlush
CreateDIBSection
DeleteDC
CreateCompatibleDC
SwapBuffers
SetPixelFormat
ChoosePixelFormat
SelectObject
GetFontData
DeleteObject
CreateFontIndirectW
RemoveFontMemResourceEx
ExtTextOutW
GetDIBits
AddFontMemResourceEx

winmm

waveOutGetVolume
waveOutGetDevCapsW
waveOutGetNumDevs
mixerGetDevCapsW
timeGetTime
timeEndPeriod
timeBeginPeriod
mixerOpen
mixerGetNumDevs
waveInMessage
PlaySoundW
waveOutMessage
mixerClose
mixerGetLineInfoW
mixerGetID
mixerGetLineControlsW
mixerGetControlDetailsW
waveOutSetVolume
waveOutGetErrorTextW
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutGetPosition
waveOutGetID
waveInGetID
waveInGetNumDevs
waveInGetDevCapsW
waveInGetErrorTextW
waveInOpen
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInStop
waveInReset
waveInGetPosition
waveInGetDevCapsA
waveOutRestart
waveOutPause
waveOutGetDevCapsA
timeKillEvent
timeSetEvent
mixerSetControlDetails

wsock32

ntohs
shutdown
ntohl
gethostname
inet_ntoa
htonl
htons
inet_addr
WSAStartup
bind
closesocket
setsockopt
socket
WSAGetLastError
ioctlsocket

advapi32

OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
CreateProcessAsUserW
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
ConvertSidToStringSidW
GetUserNameW
LookupAccountNameW
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetTokenInformation
CreateWellKnownSid
RegCloseKey
SystemFunction036
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsW
TraceEvent
SetNamedSecurityInfoW
GetNamedSecurityInfoW
RegSetValueExW
RegQueryInfoKeyW
RegNotifyChangeKeyValue
RegEnumValueW
RegEnumKeyExW

shell32

SHAddToRecentDocs
SHQueryUserNotificationState
SHGetPropertyStoreForWindow
SHAppBarMessage
DragQueryFileW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetStockIconInfo
ord190
SHGetKnownFolderPath
SHGetSpecialFolderPathW
ShellExecuteExW
SHOpenFolderAndSelectItems
SetCurrentProcessExplicitAppUserModelID
SHGetFileInfoW
SHParseDisplayName
CommandLineToArgvW

usp10

ScriptItemize
ScriptGetCMap
ScriptShape
ScriptBreak
ScriptFreeCache

ole32

CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CoLockObjectExternal
ReleaseStgMedium
OleDuplicateData
OleFlushClipboard
OleGetClipboard
OleSetClipboard
DoDragDrop
OleQueryLinkFromData
PropVariantClear
CLSIDFromString
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
StringFromGUID2
CoInitializeSecurity
CoGetInterfaceAndReleaseStream
CoMarshalInterface
GetHGlobalFromStream
CreateStreamOnHGlobal
CoGetContextToken
CoRegisterPSClsid
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoGetInterceptorFromTypeInfo
CoGetInterceptor
CoWaitForMultipleHandles
CoInitialize

msimg32

GradientFill

iphlpapi

GetAdaptersAddresses
NotifyAddrChange
GetIpForwardTable
GetIpNetTable
GetIpAddrTable
GetAdaptersInfo

crypt32

CertCloseStore
CertFindCertificateInStore
CertOpenSystemStoreW
CertGetCertificateChain
CertOpenStore
CertFreeCertificateChain

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

imm32

ImmGetCompositionStringW
ImmGetCompositionStringA
ImmAssociateContextEx
ImmReleaseContext
ImmGetContext
ImmGetProperty
ImmGetDescriptionW
ImmGetDefaultIMEWnd
ImmGetIMEFileNameW
ImmSetOpenStatus
ImmGetCompositionFontW
ImmSetCompositionFontW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetVirtualKey
ImmGetOpenStatus

shlwapi

PathAppendW
PathRemoveFileSpecW
AssocQueryStringW
PathFindFileNameW
PathGetDriveNumberW

ws2_32

getnameinfo
WSARecvFrom
WSAIoctl
inet_ntop
inet_pton
WSASendTo

dwmapi

DwmGetCompositionTimingInfo
DwmFlush
DwmSetWindowAttribute
DwmSetIconicThumbnail
DwmSetIconicLivePreviewBitmap
DwmInvalidateIconicBitmaps
DwmDefWindowProc
DwmExtendFrameIntoClientArea
DwmGetWindowAttribute
DwmIsCompositionEnabled

uxtheme

IsAppThemed
GetCurrentThemeName
GetThemeBackgroundRegion
CloseThemeData
OpenThemeData
ord47
GetThemeBackgroundContentRect
GetThemePartSize
DrawThemeEdge
IsThemeBackgroundPartiallyTransparent
GetThemeColor
DrawThemeBackground
GetThemeMargins

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Device_IDW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

oleaut32

SafeArrayCreateVector
SafeArrayPutElement
SysStringLen
DispGetIDsOfNames
LoadRegTypeLi
SysAllocStringLen
SysAllocString
OleCreatePropertyFrame
VariantClear
SysFreeString
DispInvoke
VariantInit
LoadTypeLibEx

msvcp140

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?classic@locale@std@@SAABV12@XZ
_FDtest
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
_Dtest
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z

pdh

PdhAddCounterW
PdhCollectQueryData
PdhCloseQuery
PdhGetFormattedCounterValue
PdhOpenQueryW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

vcruntime140

_setjmp3
longjmp
__std_type_info_name
wcsstr
__std_type_info_compare
__CxxFrameHandler3
__RTDynamicCast
wcschr
wcsrchr
_except_handler3
strchr
memchr
strstr
memmove
_purecall
memcpy
memset
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
strrchr
__RTtypeid

api-ms-win-crt-math-l1-1-0

asinhf
tan
_j0
ldexp
trunc
_libm_sse2_exp_precise
_CItanh
acoshf
_copysign
floor
_except1
sin
_libm_sse2_sqrt_precise
_fdsign
_libm_sse2_sin_precise
_dtest
frexp
_libm_sse2_log10_precise
_libm_sse2_tan_precise
_libm_sse2_cos_precise
_libm_sse2_asin_precise
round
_hypot
roundf
_libm_sse2_acos_precise
copysignf
log2f
_CIatan2
_CIfmod
_libm_sse2_pow_precise
hypot
_finite
nextafterf
_libm_sse2_log_precise
modf
atanhf
exp2f
truncf
log2
_fdtest
_fdopen
sqrt
_libm_sse2_atan_precise
_CIcosh
_hypotf
cos
ceil
_CIsinh

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_crt_atexit
_execute_onexit_table
_register_onexit_function
_cexit
_initterm
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_controlfp_s
__fpe_flt_rounds
_getpid
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
raise
_exit
fesetenv
abort
strerror
fegetenv
_errno
_beginthreadex
_set_invalid_parameter_handler
exit
_wassert
_endthreadex

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
_get_stream_buffer_pointers
__stdio_common_vsprintf_s
_isatty
_fileno
fgetc
fgets
fputc
setbuf
ungetc
feof
_write
_open
__stdio_common_vswprintf_s
_dup
_close
fseek
fread
_open_osfhandle
_mktemp_s
fgetpos
fsetpos
_fseeki64
setvbuf
fwrite
_getc_nolock
_get_osfhandle
__stdio_common_vswprintf
_wfopen
ftell
fopen
__stdio_common_vswscanf
fclose
fputs
__stdio_common_vsscanf
fflush
freopen
__stdio_common_vfwprintf
rewind
_wopen
_lseeki64
__stdio_common_vsprintf
__stdio_common_vfscanf
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_localtime64
strftime
_time64
_ftime64
_localtime64_s
clock
_tzset
_mktime64
__timezone
__tzname

api-ms-win-crt-convert-l1-1-0

strtol
_strtoui64
atof
wcstol
strtoul
atol
_wtoi
wcstombs
strtod
strtoull
_strtoi64
_strtod_l
strtoll
atoi

api-ms-win-crt-environment-l1-1-0

getenv
_wgetdcwd
_wgetcwd
_putenv

api-ms-win-crt-string-l1-1-0

mbrlen
wcsncpy_s
wcsnlen
wcstok
strspn
_strnicmp
_stricmp
iswspace
strncpy_s
strcpy_s
isalpha
isdigit
wcspbrk
wcsncmp
strncpy
strpbrk
wcsncat
isalnum
_wcsicmp
wcsncpy
_wcsnicmp
wcstok_s
toupper
isprint
tolower
strncmp
strncat
strcspn
isspace
isxdigit
isupper
strnlen

api-ms-win-crt-utility-l1-1-0

rand
qsort
ldiv
div
bsearch
srand

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_stat64i32
_lock_file
_getdrives
_wchmod
_wfullpath
remove
_wsplitpath_s
rename
_unlock_file

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale
_configthreadlocale
_create_locale
_free_locale

Exports

Exports

??0LoadInfo@net@mozilla@@AAE@ABV012@@Z
??0LoadInfo@net@mozilla@@AAE@PAVnsIPrincipal@@00IIW4LoadTainting@2@_N2222_K333222ABVNeckoOriginAttributes@2@AAV?$nsTArray@V?$nsCOMPtr@VnsIPrincipal@@@@@@5ABV?$nsTArray@VnsCString@@@@222@Z
??0LoadInfo@net@mozilla@@QAE@PAVnsIPrincipal@@0PAVnsINode@@II@Z
??0LoadInfo@net@mozilla@@QAE@PAVnsPIDOMWindowOuter@@PAVnsIPrincipal@@PAVnsISupports@@I@Z
??0SoundTouch@soundtouch@@QAE@ABV01@@Z
??1LoadInfo@net@mozilla@@AAE@XZ
??4SoundTouch@soundtouch@@QAEAAV01@ABV01@@Z
??_7LoadInfo@net@mozilla@@6B@
??_7SoundTouch@soundtouch@@6B@
?AddRef@LoadInfo@net@mozilla@@UAGKXZ
?AppendRedirectedPrincipal@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAVnsIPrincipal@@_N@Z
?Apprunner_NSModule@@3QBUModule@mozilla@@B
?Browser_Embedding_Module_NSModule@@3QBUModule@mozilla@@B
?Clone@LoadInfo@net@mozilla@@QBE?AU?$already_AddRefed@VnsILoadInfo@@@@XZ
?CloneForNewRequest@LoadInfo@net@mozilla@@QBE?AU?$already_AddRefed@VnsILoadInfo@@@@XZ
?CloneWithNewSecFlags@LoadInfo@net@mozilla@@QBE?AU?$already_AddRefed@VnsILoadInfo@@@@I@Z
?CommandLineModule_NSModule@@3QBUModule@mozilla@@B
?ComputeIsThirdPartyContext@LoadInfo@net@mozilla@@AAEXPAVnsPIDOMWindowOuter@@@Z
?ContextForTopLevelLoad@LoadInfo@net@mozilla@@UAEPAVnsISupports@@XZ
?CorsUnsafeHeaders@LoadInfo@net@mozilla@@UAEABV?$nsTArray@VnsCString@@@@XZ
?GetAboutBlankInherits@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetAllowChrome@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetCookiePolicy@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAI@Z
?GetDisallowScript@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetDontFollowRedirects@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetEnforceSRI@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetEnforceSecurity@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetExternalContentPolicyType@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAI@Z
?GetForceAllowDataURI@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetForceInheritPrincipal@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetForceInheritPrincipalDropped@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetForceInheritPrincipalOverruleOwner@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetForcePreflight@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetFrameOuterWindowID@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_K@Z
?GetInitialSecurityCheckDone@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetInnerWindowID@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_K@Z
?GetIsFromProcessingFrameAttributes@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetIsInThirdPartyContext@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetIsPreflight@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetIsTopLevelLoad@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetLoadErrorPage@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetLoadTriggeredFromExternal@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetLoadingContext@LoadInfo@net@mozilla@@UAE?AU?$already_AddRefed@VnsISupports@@@@XZ
?GetLoadingContextXPCOM@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAPAVnsISupports@@@Z
?GetLoadingDocument@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAPAVnsIDOMDocument@@@Z
?GetLoadingPrincipal@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAPAVnsIPrincipal@@@Z
?GetLoadingSandboxed@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetOriginAttributes@LoadInfo@net@mozilla@@UAE?AW4nsresult@@PAVNeckoOriginAttributes@3@@Z
?GetOuterWindowID@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_K@Z
?GetParentOuterWindowID@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_K@Z
?GetPrincipalToInherit@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAPAVnsIPrincipal@@@Z
?GetRedirectChain@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAUJSContext@@V?$MutableHandle@VValue@JS@@@JS@@@Z
?GetRedirectChainIncludingInternalRedirects@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAUJSContext@@V?$MutableHandle@VValue@JS@@@JS@@@Z
?GetScriptableOriginAttributes@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAUJSContext@@V?$MutableHandle@VValue@JS@@@JS@@@Z
?GetSecurityFlags@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAI@Z
?GetSecurityMode@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAI@Z
?GetTainting@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAI@Z
?GetTriggeringPrincipal@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAPAVnsIPrincipal@@@Z
?GetUpgradeInsecureRequests@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?GetVerifySignedContent@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PA_N@Z
?HostObjectProtocolHandler_NSModule@@3QBUModule@mozilla@@B
?InternalContentPolicyType@LoadInfo@net@mozilla@@UAGIXZ
?LoadingNode@LoadInfo@net@mozilla@@UAEPAVnsINode@@XZ
?LoadingPrincipal@LoadInfo@net@mozilla@@UAEPAVnsIPrincipal@@XZ
?LocalCertServiceModule_NSModule@mozilla@@3QBUModule@1@B
?MaybeIncreaseTainting@LoadInfo@net@mozilla@@UAG?AW4nsresult@@I@Z
?NSS_NSModule@@3QBUModule@mozilla@@B
?NewBufferFromStorageStream@scache@mozilla@@YA?AW4nsresult@@PAVnsIStorageStream@@PAV?$UniquePtr@$$BY0A@DV?$DefaultDelete@$$BY0A@D@mozilla@@@2@PAI@Z
?NewObjectInputStreamFromBuffer@scache@mozilla@@YA?AW4nsresult@@V?$UniquePtr@$$BY0A@DV?$DefaultDelete@$$BY0A@D@mozilla@@@2@IPAPAVnsIObjectInputStream@@@Z
?NewObjectOutputWrappedStorageStream@scache@mozilla@@YA?AW4nsresult@@PAPAVnsIObjectOutputStream@@PAPAVnsIStorageStream@@_N@Z
?PKI_NSModule@@3QBUModule@mozilla@@B
?PathifyURI@scache@mozilla@@YA?AW4nsresult@@PAVnsIURI@@AAVnsACString_internal@@@Z
?PrincipalToInherit@LoadInfo@net@mozilla@@UAEPAVnsIPrincipal@@XZ
?QueryInterface@LoadInfo@net@mozilla@@UAG?AW4nsresult@@ABUnsID@@PAPAX@Z
?RedirectChain@LoadInfo@net@mozilla@@UAEABV?$nsTArray@V?$nsCOMPtr@VnsIPrincipal@@@@@@XZ
?RedirectChainIncludingInternalRedirects@LoadInfo@net@mozilla@@UAEABV?$nsTArray@V?$nsCOMPtr@VnsIPrincipal@@@@@@XZ
?Release@LoadInfo@net@mozilla@@UAGKXZ
?ResetPrincipalsToNullPrincipal@LoadInfo@net@mozilla@@UAG?AW4nsresult@@XZ
?SetCorsPreflightInfo@LoadInfo@net@mozilla@@UAEXABV?$nsTArray@VnsCString@@@@_N@Z
?SetEnforceSRI@LoadInfo@net@mozilla@@UAG?AW4nsresult@@_N@Z
?SetEnforceSecurity@LoadInfo@net@mozilla@@UAG?AW4nsresult@@_N@Z
?SetForceAllowDataURI@LoadInfo@net@mozilla@@UAG?AW4nsresult@@_N@Z
?SetIncludeCookiesSecFlag@LoadInfo@net@mozilla@@AAEXXZ
?SetInitialSecurityCheckDone@LoadInfo@net@mozilla@@UAG?AW4nsresult@@_N@Z
?SetIsFromProcessingFrameAttributes@LoadInfo@net@mozilla@@QAEXXZ
?SetIsPreflight@LoadInfo@net@mozilla@@QAEXXZ
?SetLoadTriggeredFromExternal@LoadInfo@net@mozilla@@UAG?AW4nsresult@@_N@Z
?SetOriginAttributes@LoadInfo@net@mozilla@@UAE?AW4nsresult@@ABVNeckoOriginAttributes@3@@Z
?SetPrincipalToInherit@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAVnsIPrincipal@@@Z
?SetScriptableOriginAttributes@LoadInfo@net@mozilla@@UAG?AW4nsresult@@PAUJSContext@@V?$Handle@VValue@JS@@@JS@@@Z
?SetUpgradeInsecureRequests@LoadInfo@net@mozilla@@QAEXXZ
?SetVerifySignedContent@LoadInfo@net@mozilla@@UAG?AW4nsresult@@_N@Z
?StartupCacheModule_NSModule@@3QBUModule@mozilla@@B
?TriggeringPrincipal@LoadInfo@net@mozilla@@UAEPAVnsIPrincipal@@XZ
?ZipWriterModule_NSModule@@3QBUModule@mozilla@@B
?_external_GetAsyncShutdown@services@mozilla@@YG?AU?$already_AddRefed@VnsIAsyncShutdownService@@@@XZ
?_external_GetChromeRegistryService@services@mozilla@@YG?AU?$already_AddRefed@VnsIChromeRegistry@@@@XZ
?_external_GetGfxInfo@services@mozilla@@YG?AU?$already_AddRefed@VnsIGfxInfo@@@@XZ
?_external_GetHistoryService@services@mozilla@@YG?AU?$already_AddRefed@VIHistory@mozilla@@@@XZ
?_external_GetIOService@services@mozilla@@YG?AU?$already_AddRefed@VnsIIOService@@@@XZ
?_external_GetInDOMUtils@services@mozilla@@YG?AU?$already_AddRefed@VinIDOMUtils@@@@XZ
?_external_GetObserverService@services@mozilla@@YG?AU?$already_AddRefed@VnsIObserverService@@@@XZ
?_external_GetPermissionManager@services@mozilla@@YG?AU?$already_AddRefed@VnsIPermissionManager@@@@XZ
?_external_GetServiceWorkerManager@services@mozilla@@YG?AU?$already_AddRefed@VnsIServiceWorkerManager@@@@XZ
?_external_GetStringBundleService@services@mozilla@@YG?AU?$already_AddRefed@VnsIStringBundleService@@@@XZ
?_external_GetToolkitChromeRegistryService@services@mozilla@@YG?AU?$already_AddRefed@VnsIToolkitChromeRegistry@@@@XZ
?_external_GetUUIDGenerator@services@mozilla@@YG?AU?$already_AddRefed@VnsIUUIDGenerator@@@@XZ
?_external_GetXPConnect@services@mozilla@@YG?AU?$already_AddRefed@VnsIXPConnect@@@@XZ
?_external_GetXULChromeRegistryService@services@mozilla@@YG?AU?$already_AddRefed@VnsIXULChromeRegistry@@@@XZ
?_external_GetXULOverlayProviderService@services@mozilla@@YG?AU?$already_AddRefed@VnsIXULOverlayProvider@@@@XZ
?application_NSModule@@3QBUModule@mozilla@@B
?appshell_NSModule@@3QBUModule@mozilla@@B
?docshell_provider_NSModule@@3QBUModule@mozilla@@B
?embedcomponents_NSModule@@3QBUModule@mozilla@@B
?end_kPStaticModules_NSModule@@3QBUModule@mozilla@@B
?jsctypes_NSModule@@3QBUModule@mozilla@@B
?jsdebugger_NSModule@@3QBUModule@mozilla@@B
?jsinspector_NSModule@@3QBUModule@mozilla@@B
?jsperf_NSModule@@3QBUModule@mozilla@@B
?jsreflect_NSModule@@3QBUModule@mozilla@@B
?mozMozIntlModule_NSModule@@3QBUModule@mozilla@@B
?mozSpellCheckerModule_NSModule@@3QBUModule@mozilla@@B
?mozStorageModule_NSModule@@3QBUModule@mozilla@@B
?necko_NSModule@@3QBUModule@mozilla@@B
?nsAuthModule_NSModule@@3QBUModule@mozilla@@B
?nsAutoConfigModule_NSModule@@3QBUModule@mozilla@@B
?nsChardetModule_NSModule@@3QBUModule@mozilla@@B
?nsComposerModule_NSModule@@3QBUModule@mozilla@@B
?nsContentProcessWidgetModule_NSModule@@3QBUModule@mozilla@@B
?nsCookieModule_NSModule@@3QBUModule@mozilla@@B
?nsDNSServiceDiscoveryModule_NSModule@@3QBUModule@mozilla@@B
?nsGfxModule_NSModule@@3QBUModule@mozilla@@B
?nsI18nModule_NSModule@@3QBUModule@mozilla@@B
?nsIconDecoderModule_NSModule@@3QBUModule@mozilla@@B
?nsImageLib2Module_NSModule@@3QBUModule@mozilla@@B
?nsJarModule_NSModule@@3QBUModule@mozilla@@B
?nsLayoutModule_NSModule@@3QBUModule@mozilla@@B
?nsMediaSnifferModule_NSModule@@3QBUModule@mozilla@@B
?nsParserModule_NSModule@@3QBUModule@mozilla@@B
?nsPermissionsModule_NSModule@@3QBUModule@mozilla@@B
?nsPlacesModule_NSModule@@3QBUModule@mozilla@@B
?nsPluginModule_NSModule@@3QBUModule@mozilla@@B
?nsPrefModule_NSModule@@3QBUModule@mozilla@@B
?nsRDFModule_NSModule@@3QBUModule@mozilla@@B
?nsServicesCryptoModule_NSModule@@3QBUModule@mozilla@@B
?nsTelemetryModule_NSModule@@3QBUModule@mozilla@@B
?nsToolkitCompsModule_NSModule@@3QBUModule@mozilla@@B
?nsTransactionManagerModule_NSModule@@3QBUModule@mozilla@@B
?nsUConvModule_NSModule@@3QBUModule@mozilla@@B
?nsUniversalCharDetModule_NSModule@@3QBUModule@mozilla@@B
?nsWidgetModule_NSModule@@3QBUModule@mozilla@@B
?nsWindowDataSourceModule_NSModule@@3QBUModule@mozilla@@B
?nsWindowsProxyModule_NSModule@@3QBUModule@mozilla@@B
?peerconnection_NSModule@@3QBUModule@mozilla@@B
?satchel_NSModule@@3QBUModule@mozilla@@B
?start_kPStaticModules_NSModule@@3QBUModule@mozilla@@B
?synthsapi_NSModule@@3QBUModule@mozilla@@B
?tkAutoCompleteModule_NSModule@@3QBUModule@mozilla@@B
CallWindowProcCrashProtected
DumpCompleteHeap
DumpJSStack
NS_CStringCloneData
NS_CStringContainerFinish
NS_CStringContainerInit
NS_CStringContainerInit2
NS_CStringCopy
NS_CStringGetData
NS_CStringGetIsVoid
NS_CStringGetMutableData
NS_CStringSetData
NS_CStringSetDataRange
NS_CStringSetIsVoid
NS_CStringToUTF16
NS_CycleCollectorSuspect3
NS_DebugBreak
NS_DestroyXPTCallStub
NS_GetComponentManager
NS_GetComponentRegistrar
NS_GetDebug
NS_GetFrozenFunctions
NS_GetMemoryManager
NS_GetServiceManager
NS_GetXPTCallStub
NS_InitMinimalXPCOM
NS_InitXPCOM
NS_InitXPCOM2
NS_LogAddRef
NS_LogCOMPtrAddRef
NS_LogCOMPtrRelease
NS_LogCtor
NS_LogDtor
NS_LogInit
NS_LogRelease
NS_LogTerm
NS_NewLocalFile
NS_NewNativeLocalFile
NS_RegisterXPCOMExitRoutine
NS_ShutdownXPCOM
NS_SizeOfIncludingThisXPTCallStub
NS_StringCloneData
NS_StringContainerFinish
NS_StringContainerInit
NS_StringContainerInit2
NS_StringCopy
NS_StringGetData
NS_StringGetIsVoid
NS_StringGetMutableData
NS_StringSetData
NS_StringSetDataRange
NS_StringSetIsVoid
NS_UTF16ToCString
NS_UnregisterXPCOMExitRoutine
PrintJSStack
RegisterStrongAsyncMemoryReporter
RegisterStrongMemoryReporter
RegisterWeakAsyncMemoryReporter
RegisterWeakMemoryReporter
UnregisterStrongMemoryReporter
UnregisterWeakMemoryReporter
XRE_AddJarManifestLocation
XRE_AddManifestLocation
XRE_AddStaticComponent
XRE_ChildProcessTypeToString
XRE_CreateAppData
XRE_DeinitCommandLine
XRE_EnableSameExecutableForContentProc
XRE_FreeAppData
XRE_GetBinaryPath
XRE_GetFileFromPath
XRE_GetIOMessageLoop
XRE_GetProcessType
XRE_InitChildProcess
XRE_InitCommandLine
XRE_InitEmbedding2
XRE_InitOmnijar
XRE_InitParentProcess
XRE_IsContentProcess
XRE_IsGPUProcess
XRE_IsParentProcess
XRE_LockProfileDirectory
XRE_NotifyProfile
XRE_ParseAppData
XRE_RunAppShell
XRE_SendTestShellCommand
XRE_SetProcessType
XRE_ShutdownChildProcess
XRE_ShutdownTestShell
XRE_StartupTimelineRecord
XRE_StopLateWriteChecks
XRE_TelemetryAccumulate
XRE_TermEmbedding
XRE_XPCShellMain
XRE_main
mozilla_dump_image
workerlz4_compress
workerlz4_decompress
workerlz4_maxCompressedSize

Sections

.text
Size: 35.7MB - Virtual size: 35.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 608KB - Virtual size: 1023KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Plugins/Flash/FlashPlayerPlugin_32_0_0_363.exe
.exe windows:5 windows x86

28acb7163e0e378512d377bc111a62ca

Code Sign

0d:2c:ac:cd:3e:9e:ec:06:73:84:10:ba:31:bf:65:95
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

31/01/2019, 00:00

Not After

03/02/2021, 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Flash Player,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:a2:e9:f3:7a:f9:3c:9f:65:0f:f9:87:02:44:0c:e8:28:6b:d0:d8:54:c7:8c:36:f7:e5:d4:88:c7:ec:5b:2b
Signer

Actual PE Digest

e1:a2:e9:f3:7a:f9:3c:9f:65:0f:f9:87:02:44:0c:e8:28:6b:d0:d8:54:c7:8c:36:f7:e5:d4:88:c7:ec:5b:2b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpEndRequestA
HttpSendRequestExA
HttpAddRequestHeadersA
InternetSetCookieA
InternetQueryOptionA
InternetOpenA
InternetWriteFile
InternetGetCookieA
InternetErrorDlg
InternetSetOptionA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetQueryDataAvailable

crypt32

CryptGetMessageCertificates
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertVerifyRevocation
CertAddStoreToCollection
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertCloseStore
CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CertFreeCertificateContext
CertCompareCertificate
CryptVerifyMessageSignature
CertOpenStore

oleaut32

SysAllocString
SysFreeString

imm32

ImmCreateContext
ImmGetOpenStatus

kernel32

CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
Thread32Next
Thread32First
GetCommandLineW
InterlockedExchangeAdd
SetUnhandledExceptionFilter
InterlockedCompareExchange
GetNativeSystemInfo
GetVersionExW
ReleaseMutex
DuplicateHandle
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetCurrentProcessId
SetLastError
FormatMessageA
GetModuleFileNameW
GetModuleHandleA
CreateProcessW
DeleteFileW
GetSystemTimeAsFileTime
SystemTimeToFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
InterlockedExchange
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetInformationJobObject
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
IsDebuggerPresent
SwitchToThread
VirtualQueryEx
OpenProcess
TerminateProcess
GetExitCodeProcess
GetProcessId
ResumeThread
GetStdHandle
SetHandleInformation
GetModuleHandleExA
AssignProcessToJobObject
CreateToolhelp32Snapshot
GetModuleHandleExW
RegisterWaitForSingleObject
UnregisterWaitEx
VerSetConditionMask
GlobalAlloc
GlobalFree
DebugBreak
lstrcmpiA
lstrcmpiW
GetTempFileNameW
VerifyVersionInfoW
ExitProcess
IsProcessInJob
ProcessIdToSessionId
ConnectNamedPipe
GetNamedPipeInfo
CreateNamedPipeW
CancelIo
VirtualAllocEx
QueryInformationJobObject
SignalObjectAndWait
TerminateJobObject
VirtualFree
GetProcessHandleCount
WriteProcessMemory
GetThreadContext
VirtualFreeEx
VirtualProtectEx
QueryDosDeviceW
CreateJobObjectW
GetFileInformationByHandle
GetFileType
SearchPathW
GetSystemDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
SuspendThread
GlobalLock
GlobalUnlock
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
GetStringTypeW
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
OutputDebugStringW
RtlUnwind
LoadLibraryExW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetTimeZoneInformation
FindClose
FindFirstFileExA
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEndOfFile
GetThreadTimes
OpenThread
GetWindowsDirectoryW
GetFileSizeEx
GetSystemTime
GetEnvironmentVariableW
GetSystemWow64DirectoryW
CreateDirectoryExW
GlobalSize
GetExitCodeThread
GetFullPathNameW
GetDriveTypeW
InitializeCriticalSectionAndSpinCount
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetTempPathW
LoadLibraryW
SetErrorMode
HeapSetInformation
LocalFree
CreateSemaphoreW
CreateEventW
Sleep
WaitForMultipleObjects
WaitForSingleObject
ReleaseSemaphore
ResetEvent
SetEvent
CreateThread
InterlockedDecrement
InterlockedIncrement
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
GetTickCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetFileAttributesW
CreateFileW
CreateFileA
OutputDebugStringA
CreateProcessA
GetModuleHandleW
GetModuleFileNameA
lstrlenW
CloseHandle
SetFilePointer
ReadFile
WriteFile
GetFileSize
GetLastError
GetLongPathNameW
GetProcAddress
ReadProcessMemory
MoveFileExW
ExpandEnvironmentStringsW

user32

CallWindowProcW
IsWindow
SetWindowPos
UpdateWindow
GetUpdateRect
InvalidateRect
GetThreadDesktop
GetProcessWindowStation
WaitForInputIdle
GetForegroundWindow
OpenInputDesktop
SetThreadDesktop
CloseDesktop
SetProcessWindowStation
GetWindow
ShowWindow
SetWindowLongW
MsgWaitForMultipleObjectsEx
ValidateRect
SetTimer
GetQueueStatus
CallMsgFilterW
DestroyWindow
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostMessageW
GetDesktopWindow
CloseWindowStation
UserHandleGrantAccess
GetWindowThreadProcessId
EnumWindows
GetWindowLongW
GetActiveWindow
MsgWaitForMultipleObjects
SetWinEventHook
DestroyIcon
CallNextHookEx
UnhookWindowsHookEx
CreateWindowExW
AllowSetForegroundWindow
CreateDesktopW
CreateWindowStationW
PeekMessageW
DispatchMessageW
UnregisterClassW
MessageBoxW
GetUserObjectInformationW
SendMessageW
AttachThreadInput
IsWindowVisible
GetFocus
EnableWindow
SetActiveWindow
RedrawWindow
SetPropW
GetPropW
RemovePropW
FindWindowExW
GetClassNameA
GetClassNameW
KillTimer
SetWindowsHookExW
GetAncestor
RegisterWindowMessageW
GetCursorPos
WindowFromPoint
GetKeyState
GetAsyncKeyState
GetClientRect
GetWindowRect
SetCursorPos
SetCursor
ClientToScreen
ScreenToClient
MapWindowPoints
GetParent
EnumThreadWindows
GetTopWindow
MonitorFromWindow
OpenClipboard
CloseClipboard
GetClipboardSequenceNumber
GetClipboardOwner
SetClipboardViewer
GetClipboardViewer
ChangeClipboardChain
SetClipboardData
GetClipboardData
RegisterClipboardFormatA
RegisterClipboardFormatW
CountClipboardFormats
EnumClipboardFormats
GetClipboardFormatNameA
GetClipboardFormatNameW
EmptyClipboard
IsClipboardFormatAvailable
GetPriorityClipboardFormat
GetOpenClipboardWindow
GetDC
ReleaseDC
CloseWindow
IsWindowEnabled
LoadCursorW
LoadIconW
TranslateMessage

advapi32

SetSecurityInfo
GetSecurityInfo
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
MapGenericMask
CreateRestrictedToken
DuplicateTokenEx
LookupPrivilegeValueW
EqualSid
DuplicateToken
CopySid
CreateWellKnownSid
ConvertStringSidToSidW
GetLengthSid
SetTokenInformation
SetThreadToken
RegDisablePredefinedCache
RevertToSelf
CreateProcessAsUserW
GetTokenInformation
OpenProcessToken
RegSetValueExW
CheckTokenMembership
ConvertSidToStringSidW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW

shell32

SHGetKnownFolderPath
SHFileOperationW
ShellExecuteW
SHGetFolderPathA
SHGetFolderPathW
SHCreateDirectoryExW
SHBrowseForFolderW
SHGetPathFromIDListW
ord43
CommandLineToArgvW
ShellExecuteExW

ole32

CoUnmarshalInterface
CoInitializeEx
ReleaseStgMedium
CoUninitialize
CoInitialize
CoMarshalInterface
CoSetProxyBlanket
StringFromCLSID
GetHGlobalFromStream
CreateStreamOnHGlobal
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance

shlwapi

PathIsDirectoryW
PathRemoveFileSpecW
PathFileExistsW
AssocQueryStringW
PathCreateFromUrlW
UrlIsW
PathIsURLW
UrlCanonicalizeW
PathIsRelativeW
PathFindExtensionW
PathFileExistsA
PathCanonicalizeW
PathAppendW
PathAddBackslashW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

psapi

GetMappedFileNameW
GetProcessImageFileNameW

mpr

WNetAddConnection2W
WNetGetResourceInformationW
WNetGetUniversalNameW

gdi32

DeleteDC
GetClipBox
GetStretchBltMode
GetTextAlign
GetTextColor
ResetDCW
RemoveFontResourceW
EnumEnhMetaFile
GetMiterLimit
GetPolyFillMode
GetFontData
CreateDCW
GetBkMode
ExtEscape
Escape
CreateScalableFontResourceW
CreateICW
CreateFontIndirectW
CreateDCA
AddFontResourceW
GetObjectW
GetEnhMetaFileBits
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
SetPolyFillMode
GetRgnBox
PlayEnhMetaFile
PlayEnhMetaFileRecord
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
StartDocW
EndDoc
SetEnhMetaFileBits
GetEnhMetaFileHeader
SetDIBits
CreateCompatibleBitmap
GetObjectType
GetCurrentObject
DeleteObject
CreateRectRgn
CombineRgn
SelectObject
AbortDoc
EndPage
GetDeviceCaps
GetDIBits
StartPage

winspool.drv

EnumPrintersA
SetPrinterW
DeviceCapabilitiesW
ClosePrinter
GetPrinterW
OpenPrinterW
EnumPrintersW
DocumentPropertiesW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

urlmon

CoInternetParseUrl

secur32

EncryptMessage
FreeContextBuffer
QueryCredentialsAttributesA
QueryContextAttributesA
ApplyControlToken
DeleteSecurityContext
InitializeSecurityContextA
FreeCredentialsHandle
AcquireCredentialsHandleA
DecryptMessage

dinput8

DirectInput8Create

Sections

.text
Size: 838KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Plugins/Flash/FlashUtil32_32_0_0_363_Plugin.dll
.dll windows:5 windows x86

2196abc63338fd4999a7d518e9c0f9c5

Code Sign

0d:2c:ac:cd:3e:9e:ec:06:73:84:10:ba:31:bf:65:95
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

31/01/2019, 00:00

Not After

03/02/2021, 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Flash Player,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:fa:bf:d9:9b:18:32:8d:b3:a9:69:c4:fa:d9:d0:90:f9:a6:81:8d:75:3e:32:23:8b:6b:40:59:08:ce:3a:ba
Signer

Actual PE Digest

fd:fa:bf:d9:9b:18:32:8d:b3:a9:69:c4:fa:d9:d0:90:f9:a6:81:8d:75:3e:32:23:8b:6b:40:59:08:ce:3a:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileW
FindNextFileA
FindNextFileW
MoveFileExW
GetACP
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLangID
GetFullPathNameW
LoadLibraryExA
VirtualQuery
VirtualProtect
WriteConsoleW
SetEndOfFile
GetConsoleCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetStringTypeW
HeapReAlloc
HeapSize
FindFirstFileA
LCMapStringW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteFileW
DeleteFileA
GetFileAttributesW
GetFileAttributesA
SetFileAttributesW
SetFileAttributesA
CreateFileA
RemoveDirectoryW
CreateDirectoryW
CreateDirectoryA
GetSystemWow64DirectoryW
GetModuleFileNameW
OutputDebugStringA
CreateProcessA
GetModuleHandleW
GetModuleFileNameA
CreateFileMappingA
CreateMutexA
lstrlenW
UnmapViewOfFile
MapViewOfFile
SystemTimeToFileTime
GetSystemInfo
DuplicateHandle
FindClose
SetFilePointer
DeviceIoControl
ReadFile
WriteFile
GetFileSizeEx
GetFileSize
ReleaseMutex
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
TerminateProcess
OpenProcess
GetLongPathNameW
GetProcessHeap
HeapFree
HeapAlloc
LocalFree
LocalAlloc
GlobalFree
DecodePointer
GetVersionExA
GlobalAddAtomW
InterlockedDecrement
InterlockedIncrement
GetSystemDirectoryA
FindResourceA
OutputDebugStringW
LoadLibraryA
SizeofResource
LoadResource
LockResource
GetSystemDirectoryW
GetModuleHandleA
LoadLibraryW
GetSystemTime
GetCurrentProcess
GetProcAddress
FreeLibrary
CreateFileW
CreateProcessW
GetTickCount
CloseHandle
Sleep
WaitForSingleObject
GetLastError
GetExitCodeProcess
GetThreadLocale
SetUnhandledExceptionFilter
UnhandledExceptionFilter

user32

SystemParametersInfoA
GetWindowThreadProcessId
GetForegroundWindow
GetSystemMetrics
IsWindow
WaitForInputIdle
DispatchMessageA
GetMessageA
LoadStringW
DrawTextW
SendMessageA
SetRect
ClientToScreen
LoadCursorA
GetWindow
GetParent
SetWindowLongA
GetWindowLongA
FillRect
MapWindowPoints
SetCursor
GetWindowRect
GetClientRect
SetWindowTextW
GetPropA
SetPropA
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
SetTimer
ReleaseCapture
SetCapture
GetKeyState
GetFocus
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
CallWindowProcW
PostQuitMessage
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SetForegroundWindow
SetFocus
SetWindowPos

gdi32

PolyBezierTo
LPtoDP
DPtoLP
ExtTextOutW
ExtTextOutA
MoveToEx
ExtCreatePen
StrokePath
SelectClipPath
FillPath
EndPath
BeginPath
EndPage
StartPage
EndDoc
StartDocA
SetWorldTransform
GetWorldTransform
GetTextMetricsA
SetTextAlign
SetTextCharacterExtra
StretchDIBits
SetPolyFillMode
SetGraphicsMode
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetTextAlign
GetObjectType
GetDeviceCaps
GetCurrentObject
GetBkMode
SetTextColor
SetBkMode
GetTextExtentExPointW
CreateFontA
CreateDIBSection
StretchBlt
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontIndirectW

comdlg32

PrintDlgA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
RegEnumKeyExW
RegDeleteValueA
RegCreateKeyExA
DuplicateTokenEx
CreateProcessAsUserW
LookupAccountSidA
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
QueryServiceStatusEx
OpenServiceW
OpenSCManagerA
ControlService
CloseServiceHandle

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
CoInitializeSecurity
CoInitializeEx

oleaut32

DispInvoke
DispGetIDsOfNames
LoadRegTypeLi
SysAllocString
SysFreeString
VariantInit
VariantClear
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCopy
SafeArrayGetVartype
SafeArrayCreateVector

Exports

Exports

_Start@4

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Plugins/Flash/FlashUtil32_32_0_0_363_Plugin.exe
.exe windows:5 windows x86

2ec68c558a5f724af82fd6229781023b

Code Sign

0d:2c:ac:cd:3e:9e:ec:06:73:84:10:ba:31:bf:65:95
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

31/01/2019, 00:00

Not After

03/02/2021, 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Flash Player,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:dd:ac:77:07:ab:23:28:0a:25:11:2f:ea:7c:b7:84:ce:f8:06:54:1e:91:fa:9a:c3:42:55:56:bd:95:06:ff
Signer

Actual PE Digest

d7:dd:ac:77:07:ab:23:28:0a:25:11:2f:ea:7c:b7:84:ce:f8:06:54:1e:91:fa:9a:c3:42:55:56:bd:95:06:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileW
CopyFileW
MoveFileExW
GetVersionExA
WideCharToMultiByte
SetThreadLocale
GetUserDefaultUILanguage
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateThread
ExitThread
QueueUserAPC
ReleaseMutex
GetFileSize
ReadFile
CreateWaitableTimerW
SetWaitableTimer
FreeResource
LockResource
TerminateProcess
Sleep
LoadResource
SizeofResource
WriteFile
SetFilePointer
FindResourceW
GetThreadLocale
CreateProcessW
LoadLibraryA
OutputDebugStringW
FindResourceA
GetSystemDirectoryA
InterlockedIncrement
InterlockedDecrement
GlobalAddAtomW
DecodePointer
HeapReAlloc
HeapSize
FindFirstFileW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetEndOfFile
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
HeapAlloc
HeapFree
GetACP
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
GetFileType
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
DuplicateHandle
LoadLibraryExW
DeleteFileW
GetFileAttributesW
SetFileAttributesW
CreateFileW
MultiByteToWideChar
RemoveDirectoryW
CreateDirectoryW
SetDllDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetSystemWow64DirectoryW
GetTempFileNameW
GetSystemDirectoryW
GetEnvironmentVariableW
GetCommandLineW
GetModuleHandleW
GetModuleFileNameW
LoadLibraryW
CreateMutexW
SystemTimeToFileTime
GetSystemTime
CloseHandle
FindClose
GetFileSizeEx
WaitForSingleObject
GetLastError
GetExitCodeProcess
ExitProcess
GetCurrentProcessId
GetCurrentProcess
OpenProcess
LocalFree
LocalAlloc
GetProcAddress
FreeLibrary
FlushFileBuffers
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
RaiseException
EncodePointer
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

user32

MessageBoxW
GetForegroundWindow
EndPaint
LoadStringW
DrawTextW
SetRect
ClientToScreen
LoadCursorW
GetWindow
GetParent
SetWindowLongW
GetWindowLongW
FillRect
MapWindowPoints
SetCursor
GetWindowRect
SetWindowPos
SetWindowTextW
GetPropW
SetPropW
InvalidateRect
GetClientRect
BeginPaint
ReleaseDC
GetDC
SetForegroundWindow
SetTimer
ReleaseCapture
SetCapture
GetKeyState
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
CallWindowProcW
PostQuitMessage
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW

gdi32

SetTextColor
SetBkMode
GetTextExtentExPointW
CreateFontA
CreateDIBSection
StretchBlt
SelectObject
DeleteObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC

advapi32

RegSetValueExW
RegQueryValueExW
RegDeleteValueW
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
CryptHashData
CryptGetHashParam
CryptReleaseContext
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyExW
RegCreateKeyExW
RegCloseKey
CheckTokenMembership
FreeSid
AllocateAndInitializeSid

shell32

ord680
CommandLineToArgvW
SHFileOperationW
ShellExecuteExW
ShellExecuteW
SHGetFolderPathW

ole32

CoInitializeEx
StringFromGUID2
CoCreateGuid
CoInitializeSecurity
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocString

Sections

.text
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Plugins/Flash/NPSWF32_32_0_0_363.dll
.dll regsvr32 windows:5 windows x86

1f48761c4a7eb0a58c215de0b22cb95a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

mixerOpen
mixerGetDevCapsA
waveInMessage
waveOutMessage
waveOutGetDevCapsA
mixerGetID
waveInGetDevCapsA
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
waveOutPause
waveOutRestart
waveInGetNumDevs
waveInGetDevCapsW
waveInGetPosition
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInStop
waveInReset
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutGetPosition
timeGetTime
timeSetEvent
timeKillEvent
waveOutGetNumDevs
waveInOpen
mixerSetControlDetails
waveOutGetDevCapsW

wininet

InternetCloseHandle
InternetOpenA
InternetConnectA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA

crypt32

CertFreeCertificateContext
CertCreateCertificateContext
CertFindCertificateInStore
CertCloseStore
CertOpenStore
CertVerifySubjectCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertCompareCertificate
CertEnumCertificatesInStore

oleaut32

UnRegisterTypeLi
SysFreeString
SysAllocString
SysStringLen
LoadTypeLi
LoadRegTypeLi
VariantClear
VariantInit
RegisterTypeLi

urlmon

CopyStgMedium

dsound

ord1
ord8

kernel32

DeleteFileA
OpenThread
QueueUserAPC
SleepEx
SetCurrentDirectoryW
GetCurrentDirectoryW
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
CompareFileTime
GetLongPathNameW
GetFileInformationByHandle
GetFileSizeEx
DeviceIoControl
SetFilePointerEx
lstrlenW
GetModuleFileNameA
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
GetSystemWow64DirectoryW
CreateDirectoryA
CreateDirectoryW
RemoveDirectoryW
GetFullPathNameW
GetFileAttributesA
GetFileAttributesExW
GetVolumeInformationW
FreeResource
SizeofResource
OpenFile
_lwrite
_lclose
FindResourceA
GetModuleHandleA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetStdHandle
GetFileType
GlobalMemoryStatus
FlushConsoleInputBuffer
LoadLibraryExA
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
ExitProcess
CancelIo
CreateNamedPipeW
GetNamedPipeInfo
ConnectNamedPipe
VirtualProtect
HeapWalk
HeapUnlock
HeapLock
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetCurrencyFormatW
GetNumberFormatW
GetDateFormatW
GetTimeFormatW
GetTempFileNameA
GetProcessHeap
HeapFree
HeapAlloc
GetProcessAffinityMask
VerifyVersionInfoA
GetVersion
CancelWaitableTimer
SetWaitableTimer
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
UnregisterWaitEx
RegisterWaitForSingleObject
CreateToolhelp32Snapshot
GetModuleHandleExA
TerminateProcess
OpenProcess
SystemTimeToTzSpecificLocalTime
GetSystemTimeAsFileTime
GetNativeSystemInfo
GetModuleHandleExW
GetCommandLineW
LocalFree
CreateProcessW
FormatMessageA
InterlockedExchangeAdd
CreateFileMappingW
CreateMutexW
CreateWaitableTimerA
TlsFree
TlsAlloc
ResumeThread
GetVersionExA
FileTimeToSystemTime
SetSystemTime
IsDebuggerPresent
GlobalMemoryStatusEx
CreateSemaphoreA
CreateEventA
GetTempPathA
CreateWaitableTimerW
TerminateThread
SetThreadPriority
DuplicateHandle
GetExitCodeThread
CreateFileMappingA
CreateMutexA
ReleaseMutex
GetTempFileNameW
CreateSemaphoreW
ReleaseSemaphore
OutputDebugStringA
SystemTimeToFileTime
GetStringTypeW
UnhandledExceptionFilter
GetStartupInfoW
LocalAlloc
lstrcpynW
RtlUnwind
InterlockedFlushSList
LoadLibraryExW
SetConsoleCtrlHandler
GetConsoleMode
CompareStringW
GetTimeZoneInformation
ReadConsoleInputA
SetConsoleMode
ReadConsoleW
GetConsoleCP
FreeLibraryAndExitThread
HeapReAlloc
FlushFileBuffers
SetStdHandle
WriteConsoleW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEndOfFile
CopyFileW
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetThreadTimes
Thread32First
GetSystemTime
FindNextFileW
FindFirstFileW
GetTempPathW
FindClose
SetUnhandledExceptionFilter
GetUserDefaultLangID
GetUserDefaultUILanguage
VerifyVersionInfoW
MoveFileExW
DeleteFileW
GetFileAttributesW
CreateFileW
CreateFileA
GetSystemDirectoryW
GetSystemDirectoryA
FindResourceExW
FindResourceExA
CreateProcessA
SetFilePointer
ReadFile
WriteFile
GetFileSize
LoadResource
CreateThread
VirtualQuery
GlobalFree
LockResource
VerSetConditionMask
GetCurrentProcessId
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
UnmapViewOfFile
MapViewOfFile
GetCurrentProcess
GetProcessTimes
GetModuleFileNameW
SetLastError
GetLocaleInfoW
LCMapStringW
GetTickCount
GetSystemInfo
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
SwitchToThread
RaiseException
DecodePointer
LoadLibraryA
WaitForMultipleObjects
GetLastError
FreeLibrary
GetVersionExW
CreateEventW
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
GetModuleHandleW
LoadLibraryW
GetProcAddress
SetThreadAffinityMask
GetCurrentThread
IsDBCSLeadByte
GetCPInfo
GetACP
TlsSetValue
MultiByteToWideChar
ExitThread
HeapSize
InterlockedDecrement
DebugBreak
TryEnterCriticalSection
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
TlsGetValue
Sleep
InterlockedCompareExchange
InterlockedExchange
Thread32Next
GetDriveTypeW
PeekNamedPipe

user32

SetActiveWindow
SetWinEventHook
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetClassNameW
GetClassNameA
FindWindowExW
RemovePropW
ValidateRect
GetUpdateRect
UpdateWindow
PostMessageA
RegisterWindowMessageA
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
CallMsgFilterW
LoadIconA
LoadCursorA
SetParent
GetWindowLongA
WindowFromPoint
DefWindowProcA
SetCursorPos
MessageBoxW
EndPaint
BeginPaint
GetSubMenu
EnableMenuItem
GetProcessWindowStation
EnableWindow
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetCapture
GetQueueStatus
GetFocus
CreateWindowExA
RegisterClassW
GetAncestor
GetMonitorInfoA
EnumDisplayMonitors
wsprintfW
OffsetRect
SetWindowLongA
GetCursorPos
RegisterClassA
AttachThreadInput
GetMessageTime
UnregisterClassA
WaitForInputIdle
EnumDisplaySettingsW
GetWindow
MapWindowPoints
MonitorFromWindow
GetForegroundWindow
GetDesktopWindow
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
DeleteMenu
GetSystemMenu
GetActiveWindow
IsZoomed
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
MoveWindow
FlashWindowEx
ShowWindowAsync
SetCaretPos
GetUserObjectInformationW
UnregisterClassW
ShowWindow
DestroyWindow
CheckMenuItem
CreateWindowExW
GetDoubleClickTime
RegisterClassExA
ShowCaret
DestroyCaret
CreateCaret
EnumDisplayDevicesW
IsClipboardFormatAvailable
EmptyClipboard
RegisterClipboardFormatW
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetWindowThreadProcessId
IsWindow
PeekMessageW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
RemoveMenu
SetMenuInfo
TrackPopupMenu
DestroyMenu
CreatePopupMenu
CreateMenu
DrawMenuBar
MapVirtualKeyW
ToAscii
GetKeyboardState
CharLowerW
CharUpperW
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
CloseWindow
GetMonitorInfoW
MonitorFromRect
SystemParametersInfoW
LoadStringW
CreateIconIndirect
LoadImageW
DestroyIcon
LoadIconW
GetParent
PtInRect
InflateRect
SetRectEmpty
FillRect
ScreenToClient
GetCursor
SetCursor
MessageBoxA
GetClientRect
SetWindowTextW
SetWindowTextA
GetPropW
SetPropW
RedrawWindow
GetSystemMetrics
GetKeyState
GetDlgItem
EndDialog
DialogBoxIndirectParamW
DialogBoxParamW
SetWindowPos
PostMessageW
SendMessageTimeoutW
SendMessageW
GetClipboardFormatNameA
RegisterClipboardFormatA
ReleaseDC
GetDC
GetWindowInfo
CopyRect
SetFocus
LoadCursorW
SetWindowLongW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
PostQuitMessage
ClientToScreen
SendInput
DefWindowProcW
GetKeyboardLayout
ActivateKeyboardLayout
EnumDisplayDevicesA
GetWindowLongW
GetWindowRect
UpdateLayeredWindow
SetRect

gdi32

GetFontData
EnumFontFamiliesExW
CreateDCW
SelectPalette
RealizePalette
RectVisible
GetClipBox
GetDIBits
PolyBezierTo
LPtoDP
ExtCreatePen
StrokePath
SelectClipPath
FillPath
EndPath
BeginPath
EndPage
StartPage
EndDoc
StartDocW
StretchDIBits
SetPolyFillMode
SaveDC
RestoreDC
Rectangle
CreateSolidBrush
GetSystemPaletteEntries
CreatePalette
DPtoLP
ExtTextOutA
MoveToEx
SetWorldTransform
GetWorldTransform
GetTextMetricsW
SetTextAlign
SetTextColor
SetTextCharacterExtra
SetGraphicsMode
SetBkMode
SelectClipRgn
LineTo
IntersectClipRect
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetTextAlign
GetTextCharacterExtra
GetDeviceCaps
GetCurrentObject
GetClipRgn
GetBkMode
GetBkColor
EnumFontFamiliesA
CreateRectRgn
CreatePen
CreateFontIndirectA
GetICMProfileA
SetPixel
GetStockObject
CreateFontIndirectW
CreateDCA
CreateBitmap
EnumFontFamiliesW
ExtTextOutW
GetObjectW
CreateDIBSection
GdiAlphaBlend
SetStretchBltMode
StretchBlt
SetBkColor
SelectObject
GetStretchBltMode
DeleteObject
CreateCompatibleBitmap
BitBlt
GdiFlush
DeleteDC
CreateCompatibleDC

comdlg32

GetOpenFileNameW
PrintDlgExW
PrintDlgW
CommDlgExtendedError
GetSaveFileNameW

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptGetHashParam
CryptSetKeyParam
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
IsValidSid
CryptAcquireContextA
RegOpenKeyA
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegOpenKeyExA
RegSetValueExA
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
RegOpenKeyExW
RegQueryValueExW

shell32

SHGetDiskFreeSpaceExW
SHFileOperationW
ShellExecuteW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderPathA
SHGetFolderLocation
SHBrowseForFolderW
SHGetSettings
SHGetSpecialFolderPathW
SHAppBarMessage
ord165

ole32

OleSetClipboard
OleUninitialize
OleInitialize
MkParseDisplayName
PropVariantClear
OleGetClipboard
CoCreateInstance
CoInitialize
CoTaskMemFree
CoSetProxyBlanket
CoInitializeEx
OleFlushClipboard
CoFreeUnusedLibraries
OleIsCurrentClipboard
ReleaseStgMedium
CoTaskMemAlloc
CoUninitialize
CreateBindCtx

ws2_32

WSASocketW
WSAIoctl
WSAAsyncSelect
WSAGetLastError
WSACleanup
WSAStartup
socket
closesocket
select
__WSAFDIsSet
ntohl
htons
inet_addr
inet_ntoa
ntohs
recv
recvfrom
send
bind
getsockname
connect
ioctlsocket
sendto
setsockopt
gethostbyaddr
gethostbyname
getservbyport
getservbyname
WSASetLastError
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAAddressToStringA
gethostname
getpeername
shutdown
getsockopt
WSASocketA
htonl

shlwapi

PathRemoveFileSpecA
StrStrIW
StrRStrIW
AssocQueryStringW
UrlCanonicalizeW

mscms

DeleteColorTransform
CreateColorTransformW
CloseColorProfile
OpenColorProfileW
TranslateBitmapBits

iphlpapi

GetAdaptersAddresses

psapi

GetProcessMemoryInfo

imm32

ImmSetConversionStatus
ImmGetContext
ImmReleaseContext
ImmAssociateContextEx
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetConversionStatus
ImmGetOpenStatus
ImmSetOpenStatus
ImmSetCompositionFontW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow

winspool.drv

GetPrinterW
ClosePrinter
OpenPrinterW

Exports

Exports

AdobeCPGetAPI
BrokerMainW
DllRegisterServer
DllUnregisterServer
FlashPlayer_32_0_0_363_FlashPlayer
Flash_DisableLocalSecurity
Flash_EnforceLocalSecurity
IAEModule_AEModule_PutKernel
IAEModule_IAEKernel_LoadModule
IAEModule_IAEKernel_UnloadModule
Java_ShockwaveFlash_CurrentFrame_stub
Java_ShockwaveFlash_FlashVersion_stub
Java_ShockwaveFlash_FrameLoaded_stub
Java_ShockwaveFlash_GetVariable_stub
Java_ShockwaveFlash_GotoFrame_stub
Java_ShockwaveFlash_IsPlaying_stub
Java_ShockwaveFlash_LoadMovie_stub
Java_ShockwaveFlash_Pan_stub
Java_ShockwaveFlash_PercentLoaded_stub
Java_ShockwaveFlash_Play_stub
Java_ShockwaveFlash_SetVariable_stub
Java_ShockwaveFlash_SetZoomRect_stub
Java_ShockwaveFlash_StopPlay_stub
Java_ShockwaveFlash_TCallFrame_stub
Java_ShockwaveFlash_TCallLabel_stub
Java_ShockwaveFlash_TCurrentFrame_stub
Java_ShockwaveFlash_TCurrentLabel_stub
Java_ShockwaveFlash_TGetProperty_stub
Java_ShockwaveFlash_TGotoFrame_stub
Java_ShockwaveFlash_TGotoLabel_stub
Java_ShockwaveFlash_TPlay_stub
Java_ShockwaveFlash_TSetProperty_stub
Java_ShockwaveFlash_TStopPlay_stub
Java_ShockwaveFlash_TotalFrames_stub
Java_ShockwaveFlash_Zoom_stub
NP_Acrobat_GetEntryPoints
NP_Acrobat_Initialize
NP_GetEntryPoints
NP_Initialize
NP_SetBrokerClient
NP_SetNPAPIHostProxy
NP_Shutdown
native_ShockwaveFlash_CurrentFrame
native_ShockwaveFlash_FlashVersion
native_ShockwaveFlash_FrameLoaded
native_ShockwaveFlash_GetVariable
native_ShockwaveFlash_GotoFrame
native_ShockwaveFlash_IsPlaying
native_ShockwaveFlash_LoadMovie
native_ShockwaveFlash_Pan
native_ShockwaveFlash_PercentLoaded
native_ShockwaveFlash_Play
native_ShockwaveFlash_SetVariable
native_ShockwaveFlash_SetZoomRect
native_ShockwaveFlash_StopPlay
native_ShockwaveFlash_TCallFrame
native_ShockwaveFlash_TCallLabel
native_ShockwaveFlash_TCurrentFrame
native_ShockwaveFlash_TCurrentLabel
native_ShockwaveFlash_TGetProperty
native_ShockwaveFlash_TGotoFrame
native_ShockwaveFlash_TGotoLabel
native_ShockwaveFlash_TPlay
native_ShockwaveFlash_TSetProperty
native_ShockwaveFlash_TStopPlay
native_ShockwaveFlash_TotalFrames
native_ShockwaveFlash_Zoom
register_ShockwaveFlash
unregister_ShockwaveFlash
unuse_ShockwaveFlash
unuse_netscape_plugin_Plugin
use_ShockwaveFlash
use_netscape_plugin_Plugin

Sections

.text
Size: 13.4MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 851KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Plugins/Flash/flashplayer.xpt
Basilisk Portable with Flash/Plugins/Flash/plugin.vch
Basilisk Portable with Flash/Plugins/SoundPlayback/Npxgplugin.dll
.dll windows:4 windows x86

211e95a32f4e541538cd5ab823c0ede4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

waveOutUnprepareHeader
timeGetSystemTime
mmioOpenA
mmioRead
mmioAscend
mmioDescend
mmioSeek
mmioClose
midiOutPrepareHeader
midiOutLongMsg
midiOutUnprepareHeader
waveOutGetErrorTextA
midiOutGetErrorTextA
midiOutShortMsg
waveOutRestart
waveOutPause
waveOutGetPosition
waveOutPrepareHeader
waveOutWrite
waveOutGetVolume
waveOutSetVolume
timeGetTime
waveOutClose
waveOutReset
timeGetDevCaps
timeSetEvent
timeBeginPeriod
timeEndPeriod
timeKillEvent
midiOutClose
waveOutOpen
waveOutGetDevCapsA
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutOpen
waveOutGetNumDevs

kernel32

LockFile
FlushFileBuffers
SetFilePointer
UnlockFile
FreeLibrary
SetEndOfFile
lstrcpyA
GetProcAddress
FindFirstFileA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
LoadLibraryA
FindClose
GetModuleFileNameA
SetLastError
LocalAlloc
lstrcmpiA
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsGetValue
TlsSetValue
LocalReAlloc
GetVersion
SetErrorMode
GlobalFlags
InitializeCriticalSection
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
WriteFile
GetModuleHandleA
HeapAlloc
HeapFree
RaiseException
ExitProcess
TerminateProcess
HeapSize
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetLocaleInfoW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
FindResourceA
LoadResource
LockResource
lstrcatA
LocalFree
CloseHandle
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
MulDiv
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetProfileStringA
GetWindowsDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
RemoveDirectoryA
WinExec
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
RtlUnwind
GetCommandLineA
GetProcessVersion
GetFileSize

user32

GetSystemMetrics
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetParent
GetFocus
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindowRect
GetMessagePos
GetMessageTime
CallWindowProcA
RemovePropA
GetPropA
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
SetPropA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetDlgCtrlID
GetDlgItem
TrackPopupMenu
GetMenu
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsWindowEnabled
ScreenToClient
GetClientRect
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SystemParametersInfoA
SendDlgItemMessageA
LoadIconA
CreateDialogIndirectParamA
GetKeyState
EndDialog
IsDialogMessageA
SetWindowTextA
ShowWindow
DestroyMenu
UnregisterClassA
GetClassNameA
LoadCursorA
WindowFromPoint
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetMessageQueue
SetWindowsHookExA
SetCursor
PostQuitMessage
UnhookWindowsHookEx
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
ReleaseDC
GetDC
CharUpperA
SendMessageA
EnableWindow
LoadMenuA
ModifyMenuA
GetSubMenu
CheckMenuItem
ClientToScreen
RemoveMenu
EnableMenuItem
InvalidateRect
UpdateWindow
SetRect
FillRect
GetWindow
GetWindowTextA
OffsetRect
ReleaseCapture
SetCapture
LoadBitmapA
PostMessageA
MessageBoxA
GetTopWindow
wsprintfA
PtInRect
LoadStringA

gdi32

DeleteObject
GetTextExtentPointA
GetObjectA
CreateBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
CreatePen
GetDeviceCaps
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateFontA
CreateCompatibleDC
BitBlt
DeleteDC

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

comctl32

ord17

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Plugins/SoundPlayback/npmod32.dll
.dll windows:4 windows x86

a621e6c727028b5ed69d192aaa0712c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalLock
TerminateThread
CreateThread
SetThreadPriority
Sleep
GetTickCount
lstrcpyA
lstrcmpA
MulDiv
lstrcpynA
GlobalHandle
GlobalUnlock
lstrcmpiA
GetOEMCP
GetVersion
HeapFree
SetEndOfFile
RtlUnwind
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleHandleA
GetProcAddress
TlsGetValue
GetCPInfo
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GlobalFree
GetModuleFileNameA
lstrlenA
lstrcatA
GetCommandLineA
TlsFree
DeleteCriticalSection
ReadFile
GetACP
InitializeCriticalSection
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
GetFileType
SetFilePointer
WriteFile
SetHandleCount
GetStdHandle
GetStartupInfoA

user32

SetWindowLongA
LoadBitmapA
SendMessageA
wsprintfA
DestroyWindow
EndDialog
CreateDialogParamA
SetWindowPos
SetDlgItemTextA
SetActiveWindow
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
PeekMessageA
GetMessageA
ReleaseDC
GetWindowDC
GetDC
LoadCursorA
SetCursor
MessageBoxA
PtInRect
CreatePopupMenu
ClientToScreen
AppendMenuA
TrackPopupMenu
DestroyMenu
BeginPaint
InvertRect
EndPaint
FillRect
PostThreadMessageA
PostMessageA
GetWindowTextA
GetClientRect
ShowWindow
CreateWindowExA
InvalidateRect
UpdateWindow
DefWindowProcA
GetDesktopWindow

gdi32

DeleteObject
CreateSolidBrush
SelectObject
GetStockObject
GetDeviceCaps
CreatePen
LineTo
MoveToEx
DeleteDC
BitBlt
CreateCompatibleDC

comdlg32

GetSaveFileNameA

advapi32

RegDeleteKeyA
RegSetValueExA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

winmm

waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutPrepareHeader
waveOutOpen
sndPlaySoundA

Exports

Exports

Java_ModPlugin_GetMaxPos_stub
Java_ModPlugin_GetPos_stub
Java_ModPlugin_GetVersion_stub
Java_ModPlugin_IsPlaying_stub
Java_ModPlugin_IsReady_stub
Java_ModPlugin_SetPos_stub
Java_ModPlugin_play_stub
Java_ModPlugin_stop_stub
ModPlug_Create
ModPlug_CreateEx
ModPlug_Destroy
ModPlug_GetCurrentPosition
ModPlug_GetMaxPosition
ModPlug_GetSongLength
ModPlug_GetVUMeter
ModPlug_GetVersion
ModPlug_GetVolume
ModPlug_Initialize
ModPlug_IsPlaying
ModPlug_IsReady
ModPlug_Load
ModPlug_Play
ModPlug_RegisterCallback
ModPlug_SetCurrentPosition
ModPlug_SetVolume
ModPlug_SetWindow
ModPlug_Shutdown
ModPlug_Stop
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
native_ModPlugin_GetMaxPos
native_ModPlugin_GetPos
native_ModPlugin_GetVersion
native_ModPlugin_IsPlaying
native_ModPlugin_IsReady
native_ModPlugin_SetPos
native_ModPlugin_play
native_ModPlugin_stop
unuse_ModPlugin
unuse_netscape_plugin_Plugin
use_ModPlugin
use_netscape_plugin_Plugin

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.modplug
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 4KB - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/Plugins/SoundPlayback/npsid.dll
.dll windows:4 windows x86

a39de05d7c95f06f132bbab580cc4def

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetThreadPriority
CreateThread
TerminateThread
GetExitCodeThread
CompareStringW
GetProcAddress
GetModuleHandleA
GetTempPathA
TerminateProcess
IsBadReadPtr
GetStringTypeW
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
ReadFile
CreateFileA
SetStdHandle
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
HeapCreate
GetStringTypeA
GetCurrentProcess
HeapSize
VirtualAlloc
VirtualFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
SetHandleCount
IsValidCodePage
GetLocaleInfoA
IsBadWritePtr
CloseHandle
WriteFile
SetFilePointer
FlushFileBuffers
FreeEnvironmentStringsA
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale

user32

GetMessageA
SetPropA
SetWindowLongA
GetPropA
PostThreadMessageA
InvalidateRect
BeginPaint
EndPaint
UpdateWindow

gdi32

TextOutA

winmm

waveOutGetNumDevs
waveOutGetDevCapsA
waveOutOpen
waveOutReset
waveOutClose
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutGetErrorTextA

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Basilisk Portable with Flash/ReadMe/Acknowledgements.txt
Basilisk Portable with Flash/ReadMe/BasiliskSetup.txt
.vbs
Basilisk Portable with Flash/ReadMe/WinPenPack-license_en.txt
Basilisk Portable with Flash/User/Basilisk/Profiles/Default/prefs.js

Sharing

General

Malware Config

Signatures

Files

Password: infected

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

6c:3b:d2:7e:dd:3c:94:9e:95:8e:28:a9:b3:c7:57:a0Certificate

Extended Key Usages

Key Usages

14:7b:94:72:da:dd:ed:db:71:7a:24:6c:68:dd:bb:89Certificate

Extended Key Usages

Key Usages

6c:3b:d2:7e:dd:3c:94:9e:95:8e:28:a9:b3:c7:57:a0Certificate

Extended Key Usages

Key Usages

14:7b:94:72:da:dd:ed:db:71:7a:24:6c:68:dd:bb:89Certificate

Extended Key Usages

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

97:97:8d:e4:b2:62:a8:b9:0d:9c:9c:87:ad:23:03:64:a6:7c:09:1b:4c:44:a9:a0:63:ae:b7:00:ac:68:e9:31Signer

28:25:28:a0:27:b5:b6:62:fc:b9:65:ef:50:cc:6b:41:3a:56:48:92Signer

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 556KB

UPX1 Size: 263KB - Virtual size: 264KB

.rsrc Size: 116KB - Virtual size: 116KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 512KB - Virtual size: 512KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 26KB - Virtual size: 105KB

.rsrc Size: 123KB - Virtual size: 123KB

922fe4dbbad55e81cd92ab1d0c0477d0

Code Sign

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4cCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

7e:0d:ad:04:e9:00:6e:3e:63:a3:d6:ad:a3:b6:f1:be:3d:29:02:1b:47:b0:1c:e4:58:71:00:8e:f8:bb:56:d5Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

rpcrt4

oleaut32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.orpc Size: 512B - Virtual size: 229B

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 644B

717c93003ea51a556295af7f37d56d4f

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

6c:3b:d2:7e:dd:3c:94:9e:95:8e:28:a9:b3:c7:57:a0
Certificate

14:7b:94:72:da:dd:ed:db:71:7a:24:6c:68:dd:bb:89
Certificate

6c:3b:d2:7e:dd:3c:94:9e:95:8e:28:a9:b3:c7:57:a0
Certificate

14:7b:94:72:da:dd:ed:db:71:7a:24:6c:68:dd:bb:89
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

97:97:8d:e4:b2:62:a8:b9:0d:9c:9c:87:ad:23:03:64:a6:7c:09:1b:4c:44:a9:a0:63:ae:b7:00:ac:68:e9:31
Signer

28:25:28:a0:27:b5:b6:62:fc:b9:65:ef:50:cc:6b:41:3a:56:48:92
Signer

UPX0
Size: - Virtual size: 556KB

UPX1
Size: 263KB - Virtual size: 264KB

.rsrc
Size: 116KB - Virtual size: 116KB

.text
Size: 512KB - Virtual size: 512KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 26KB - Virtual size: 105KB

.rsrc
Size: 123KB - Virtual size: 123KB

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

7e:0d:ad:04:e9:00:6e:3e:63:a3:d6:ad:a3:b6:f1:be:3d:29:02:1b:47:b0:1c:e4:58:71:00:8e:f8:bb:56:d5
Signer

.orpc
Size: 512B - Virtual size: 229B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 644B

b7:93:55:41:1b:9b:3f:fc:e2:c5:59:33:2a:fa:0f:4c
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:67:e3:9e:2c:05:75:aa:69:2a:07:3a:a1:66:b6:c4:cb:b2:ad:87:a1:a7:67:96:ce:a7:61:0d:78:9d:ce:08
Signer

.text
Size: 4KB - Virtual size: 3KB

.orpc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 2KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 2KB - Virtual size: 2KB

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

6c:c9:61:bb:7c:de:0d:97:8d:09:bd:d9:fd:7f:75:37:26:e4:a8:28:de:94:c1:e8:03:2d:85:a3:81:5d:55:66
Signer

5c:e7:8d:5e:45:cf:dd:d3:54:43:ae:d5:ac:84:bd:4f:21:5e:c2:15
Signer

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

65:ee:3a:cd:7b:5f:17:a4:5c:2c:04:02:2d:d0:4d:c3:43:83:27:72:1f:e8:1d:49:d0:49:c7:65:6d:77:8c:21
Signer

a7:5c:ac:f9:5d:97:db:8f:01:a5:a9:66:7a:c6:01:53:15:18:46:7f
Signer