asyncrat | Silver RAT V1[.]0[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Silver RAT V1.0.zip
Size

43.0MB
MD5

bd72c62154232103458cac4d38031f72
SHA1

6343a63887867df1740c98fda6cea6bb7859ceba
SHA256

394b344b50bb193330fa034f5f4ccd6d88d4e66460465f9a415736391d60af21
SHA512

8a72fd86263f9b3f2d0465b5c0d4c882fb6a4b0b9a687e3bb5c82b4a86c7d6f1e3c22d1869d1a29f24f971f2d53eb34aed1678b6647bf4ca0a89c5c3486a3f5a
SSDEEP

786432:Mh0+Igc8ca+s51ttxnNI6+byyAcN4ZomtfTM11oDNiIT9bUF9dU4FacxxqCfSHrx:e0+9c8A8Zm6iyyAq4F7SSBik4vxx5SLx

Score

10^/10

agilenet upx rat default asyncrat stormkitty

Malware Config

Extracted

Family

asyncrat

Botnet

Default

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes

delay
3
install
false
install_folder
%AppData%

aes.plain

Signatures

Async RAT payload 1 IoCs

rat

Processes:

resource	yara_rule
static1/unpack001/Silver RAT V1.0/stub.dll	asyncrat

Asyncrat family
asyncrat

StormKitty payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/Silver RAT V1.0/stub.dll	family_stormkitty

Stormkitty family
stormkitty

Obfuscated with Agile.Net obfuscator 1 IoCs

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet

Processes:

resource	yara_rule
static1/unpack001/Silver RAT V1.0/Guna.UI2.dll	agile_net

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
static1/unpack001/Silver RAT V1.0/bin/upx.exe	upx

Unsigned PE 22 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/Silver RAT V1.0/BouncyCastle.Crypto.dll
unpack001/Silver RAT V1.0/Extreme.Net.dll
unpack001/Silver RAT V1.0/GMap.NET.Core.dll
unpack001/Silver RAT V1.0/GMap.NET.WindowsForms.dll
unpack001/Silver RAT V1.0/Gry73.dll
unpack001/Silver RAT V1.0/LiveCharts.Wpf.dll
unpack001/Silver RAT V1.0/LiveCharts.dll
unpack001/Silver RAT V1.0/Loader.exe
unpack001/Silver RAT V1.0/MetroFramework.Design.dll
unpack001/Silver RAT V1.0/MetroFramework.Fonts.dll
unpack001/Silver RAT V1.0/MetroFramework.dll
unpack001/Silver RAT V1.0/Mono.Cecil.dll
unpack001/Silver RAT V1.0/NAudio.dll
unpack001/Silver RAT V1.0/Silver RAT.exe
unpack001/Silver RAT V1.0/SimpleObfuscator.dll
unpack001/Silver RAT V1.0/WinMM.Net.dll
unpack001/Silver RAT V1.0/bin/upx.exe
unpack001/Silver RAT V1.0/cGeoIp.dll
unpack001/Silver RAT V1.0/initialization.dll
unpack001/Silver RAT V1.0/libs/sqlite3.dll
unpack001/Silver RAT V1.0/mscorlib.dll
unpack001/Silver RAT V1.0/stub.dll

Files

Silver RAT V1.0.zip
.zip

Password: hack1ngt0ols
Silver RAT V1.0/.peu/New Project 1/compile.log
Silver RAT V1.0/.peu/New Project 1/src/Api/kernel32.inc
Silver RAT V1.0/.peu/New Project 1/src/Api/msvcrt.inc
Silver RAT V1.0/.peu/New Project 1/src/Api/shlwapi.inc
Silver RAT V1.0/.peu/New Project 1/src/Compression.asm
Silver RAT V1.0/.peu/New Project 1/src/Download.asm
Silver RAT V1.0/.peu/New Project 1/src/Drop.asm
Silver RAT V1.0/.peu/New Project 1/src/Emulator.asm
Silver RAT V1.0/.peu/New Project 1/src/Melt.asm
Silver RAT V1.0/.peu/New Project 1/src/Obfuscator/nop.txt
Silver RAT V1.0/.peu/New Project 1/src/Obfuscator/nop_minimal.txt
Silver RAT V1.0/.peu/New Project 1/src/Obfuscator/register.txt
Silver RAT V1.0/.peu/New Project 1/src/PebApi.asm
Silver RAT V1.0/.peu/New Project 1/src/PebApi.inc
.vbs
Silver RAT V1.0/.peu/New Project 1/src/Resources/default.manifest
.xml
Silver RAT V1.0/.peu/New Project 1/src/Resources/elevated.manifest
.xml
Silver RAT V1.0/.peu/New Project 1/src/RunPE.asm
Silver RAT V1.0/.peu/New Project 1/src/Stage2.asm
Silver RAT V1.0/.peu/New Project 1/src/Stub.asm
Silver RAT V1.0/.peu/New Project 1/src/nt.inc
Silver RAT V1.0/BouncyCastle.Crypto.dll
.dll windows:4 windows x86 arch:x86

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/Certificate/BackupCertificate.zip
.zip

Password: hack1ngt0ols
ServerCertificate.p12
Silver RAT V1.0/Certificate/ServerCertificate.p12
Silver RAT V1.0/Config/Pass.inf
Silver RAT V1.0/Config/maps.inf
Silver RAT V1.0/Config/supported_images.inf
Silver RAT V1.0/Config/supported_text.inf
Silver RAT V1.0/Config/supported_video.inf
Silver RAT V1.0/Extreme.Net.dll
.dll windows:4 windows x86 arch:x86

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/GMap.NET.Core.dll
.dll windows:4 windows x86 arch:x86

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/GMap.NET.WindowsForms.dll
.dll windows:4 windows x86 arch:x86

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/GeoIP.dat
Silver RAT V1.0/Gry73.dll
.dll windows:4 windows x86 arch:x86

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23-10-2019 05:22

Not After

22-10-2025 17:00

Subject

CN=Sobatdata Software

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:92:fd:79:78:5b:a1:7b:fc:09:41:72:94:be:f3:50:c7:5a:02:fb
Signer

Actual PE Digest

fe:92:fd:79:78:5b:a1:7b:fc:09:41:72:94:be:f3:50:c7:5a:02:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/LiveCharts.Wpf.dll
.dll windows:4 windows x86 arch:x86

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/LiveCharts.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/Loader.exe
.exe windows:4 windows x86 arch:x86

03f91bdad97904026326fc3ace33b897

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetModuleHandleA
CreateEventA
WaitForSingleObject
CloseHandle
HeapDestroy
GetModuleFileNameW
lstrlenW
HeapFree
HeapAlloc
MulDiv
GetProcessHeap
GetStartupInfoA

user32

GetDlgCtrlID
GetScrollRange
DestroyIcon
KillTimer
DrawIcon
GetClientRect
GetScrollPos
LoadStringW
FillRect
PostMessageW
CreateIcon
ShowWindow
GetCursor
DeleteMenu
EndMenu
DrawFocusRect
BeginPaint
GetDCEx
DefMDIChildProcW
CharUpperBuffW
CreateMenu
GetScrollInfo
GetMenuItemInfoW
MsgWaitForMultipleObjectsEx
ReleaseDC
GetClassInfoExW
GetWindowTextW
DestroyWindow
EndPaint
EnableWindow
CreateWindowExW
LoadBitmapW
CreateAcceleratorTableW
DrawMenuBar
PeekMessageW
GetSystemMenu
RegisterClassW
IsDialogMessageW
IsZoomed
CopyImage
GetMenuStringW
IsIconic
ShowCaret
InsertMenuW
SetTimer
LoadCursorW
DefFrameProcW
LoadIconW
GetClassInfoW
DestroyMenu
FrameRect
DispatchMessageW
SetMenuItemInfoW
SetScrollPos
DestroyCursor

gdi32

Pie
RectVisible
StretchBlt
GetTextMetricsW
Polygon
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreatePalette
GetStockObject
CreateICW
MoveToEx
GetWindowOrgEx
CreateSolidBrush
SetAbortProc
SetTextColor
SetBkMode
RestoreDC
PolyBezierTo
RoundRect
AngleArc
CreateDCW
SetRectRgn

ole32

CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoTaskMemFree
IsEqualGUID
CoInitialize
OleUninitialize
OleInitialize

oleaut32

SafeArrayGetElement
SafeArrayAccessData
VariantCopyInd
SysAllocStringLen
SysReAllocStringLen
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayCreate
SysFreeString
VariantCopy
VariantInit
SafeArrayGetUBound
SafeArrayUnaccessData
VariantClear
VariantChangeType
SafeArrayPutElement
SafeArrayGetLBound

msvcrt

_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
qsort
wcsrchr
memset
wcschr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/MetroFramework.Design.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/MetroFramework.Fonts.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 654KB - Virtual size: 653KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/MetroFramework.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/NAudio.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/Server/compile.bat
Silver RAT V1.0/Silver RAT.exe
.exe windows:4 windows x86 arch:x86

03f91bdad97904026326fc3ace33b897

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetModuleHandleA
CreateEventA
WaitForSingleObject
CloseHandle
HeapDestroy
GetModuleFileNameW
lstrlenW
HeapFree
HeapAlloc
MulDiv
GetProcessHeap
GetStartupInfoA

user32

GetDlgCtrlID
GetScrollRange
DestroyIcon
KillTimer
DrawIcon
GetClientRect
GetScrollPos
LoadStringW
FillRect
PostMessageW
CreateIcon
ShowWindow
GetCursor
DeleteMenu
EndMenu
DrawFocusRect
BeginPaint
GetDCEx
DefMDIChildProcW
CharUpperBuffW
CreateMenu
GetScrollInfo
GetMenuItemInfoW
MsgWaitForMultipleObjectsEx
ReleaseDC
GetClassInfoExW
GetWindowTextW
DestroyWindow
EndPaint
EnableWindow
CreateWindowExW
LoadBitmapW
CreateAcceleratorTableW
DrawMenuBar
PeekMessageW
GetSystemMenu
RegisterClassW
IsDialogMessageW
IsZoomed
CopyImage
GetMenuStringW
IsIconic
ShowCaret
InsertMenuW
SetTimer
LoadCursorW
DefFrameProcW
LoadIconW
GetClassInfoW
DestroyMenu
FrameRect
DispatchMessageW
SetMenuItemInfoW
SetScrollPos
DestroyCursor

gdi32

Pie
RectVisible
StretchBlt
GetTextMetricsW
Polygon
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreatePalette
GetStockObject
CreateICW
MoveToEx
GetWindowOrgEx
CreateSolidBrush
SetAbortProc
SetTextColor
SetBkMode
RestoreDC
PolyBezierTo
RoundRect
AngleArc
CreateDCW
SetRectRgn

ole32

CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoTaskMemFree
IsEqualGUID
CoInitialize
OleUninitialize
OleInitialize

oleaut32

SafeArrayGetElement
SafeArrayAccessData
VariantCopyInd
SysAllocStringLen
SysReAllocStringLen
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayCreate
SysFreeString
VariantCopy
VariantInit
SafeArrayGetUBound
SafeArrayUnaccessData
VariantClear
VariantChangeType
SafeArrayPutElement
SafeArrayGetLBound

msvcrt

_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
qsort
wcsrchr
memset
wcschr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/SimpleObfuscator.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/WinMM.Net.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/admin/auth.php
Silver RAT V1.0/admin/banlist.php
.js
Silver RAT V1.0/admin/configs.php
.js
Silver RAT V1.0/admin/dist/css/bootstrap.min.css
Silver RAT V1.0/admin/dist/css/daterangepicker.css
Silver RAT V1.0/admin/dist/css/font-awesome.min.css
Silver RAT V1.0/admin/dist/css/index.php
Silver RAT V1.0/admin/dist/css/select2.min.css
Silver RAT V1.0/admin/dist/css/style.css
Silver RAT V1.0/admin/dist/fonts/fontawesome/fontawesome-webfont5b62.eot
Silver RAT V1.0/admin/dist/fonts/fontawesome/fontawesome-webfont5b62.svg
.xml
Silver RAT V1.0/admin/dist/fonts/fontawesome/fontawesome-webfont5b62.ttf
Silver RAT V1.0/admin/dist/fonts/fontawesome/fontawesome-webfont5b62.woff
Silver RAT V1.0/admin/dist/fonts/fontawesome/fontawesome-webfont5b62.woff2
Silver RAT V1.0/admin/dist/fonts/fontawesome/fontawesome-webfontd41d.eot
Silver RAT V1.0/admin/dist/fonts/fontawesome/index.php
Silver RAT V1.0/admin/dist/fonts/index.php
Silver RAT V1.0/admin/dist/img/flags/ad.png
.png
Silver RAT V1.0/admin/dist/img/flags/ae.png
.png
Silver RAT V1.0/admin/dist/img/flags/af.png
.png
Silver RAT V1.0/admin/dist/img/flags/ag.png
.png
Silver RAT V1.0/admin/dist/img/flags/ai.png
.png
Silver RAT V1.0/admin/dist/img/flags/al.png
.png
Silver RAT V1.0/admin/dist/img/flags/am.png
.png
Silver RAT V1.0/admin/dist/img/flags/ao.png
.png
Silver RAT V1.0/admin/dist/img/flags/aq.png
.png
Silver RAT V1.0/admin/dist/img/flags/ar.png
.png
Silver RAT V1.0/admin/dist/img/flags/as.png
.png
Silver RAT V1.0/admin/dist/img/flags/at.png
.png
Silver RAT V1.0/admin/dist/img/flags/au.png
.png
Silver RAT V1.0/admin/dist/img/flags/aw.png
.png
Silver RAT V1.0/admin/dist/img/flags/ax.png
.png
Silver RAT V1.0/admin/dist/img/flags/az.png
.png
Silver RAT V1.0/admin/dist/img/flags/ba.png
.png
Silver RAT V1.0/admin/dist/img/flags/bb.png
.png
Silver RAT V1.0/admin/dist/img/flags/bd.png
.png
Silver RAT V1.0/admin/dist/img/flags/be.png
.png
Silver RAT V1.0/admin/dist/img/flags/bf.png
.png
Silver RAT V1.0/admin/dist/img/flags/bg.png
.png
Silver RAT V1.0/admin/dist/img/flags/bh.png
.png
Silver RAT V1.0/admin/dist/img/flags/bi.png
.png
Silver RAT V1.0/admin/dist/img/flags/bj.png
.png
Silver RAT V1.0/admin/dist/img/flags/bl.png
.png
Silver RAT V1.0/admin/dist/img/flags/bm.png
.png
Silver RAT V1.0/admin/dist/img/flags/bn.png
.png
Silver RAT V1.0/admin/dist/img/flags/bo.png
.png
Silver RAT V1.0/admin/dist/img/flags/bq.png
.png
Silver RAT V1.0/admin/dist/img/flags/br.png
.png
Silver RAT V1.0/admin/dist/img/flags/bs.png
.png
Silver RAT V1.0/admin/dist/img/flags/bt.png
.png
Silver RAT V1.0/admin/dist/img/flags/bv.png
.png
Silver RAT V1.0/admin/dist/img/flags/bw.png
.png
Silver RAT V1.0/admin/dist/img/flags/by.png
.png
Silver RAT V1.0/admin/dist/img/flags/bz.png
.png
Silver RAT V1.0/admin/dist/img/flags/ca.png
.png
Silver RAT V1.0/admin/dist/img/flags/cc.png
.png
Silver RAT V1.0/admin/dist/img/flags/cd.png
.png
Silver RAT V1.0/admin/dist/img/flags/cf.png
.png
Silver RAT V1.0/admin/dist/img/flags/cg.png
.png
Silver RAT V1.0/admin/dist/img/flags/ch.png
.png
Silver RAT V1.0/admin/dist/img/flags/ci.png
.png
Silver RAT V1.0/admin/dist/img/flags/ck.png
.png
Silver RAT V1.0/admin/dist/img/flags/cl.png
.png
Silver RAT V1.0/admin/dist/img/flags/cm.png
.png
Silver RAT V1.0/admin/dist/img/flags/cn.png
.png
Silver RAT V1.0/admin/dist/img/flags/co.png
.png
Silver RAT V1.0/admin/dist/img/flags/cr.png
.png
Silver RAT V1.0/admin/dist/img/flags/cu.png
.png
Silver RAT V1.0/admin/dist/img/flags/cv.png
.png
Silver RAT V1.0/admin/dist/img/flags/cw.png
.png
Silver RAT V1.0/admin/dist/img/flags/cx.png
.png
Silver RAT V1.0/admin/dist/img/flags/cy.png
.png
Silver RAT V1.0/admin/dist/img/flags/cz.png
.png
Silver RAT V1.0/admin/dist/img/flags/de.png
.png
Silver RAT V1.0/admin/dist/img/flags/dj.png
.png
Silver RAT V1.0/admin/dist/img/flags/dk.png
.png
Silver RAT V1.0/admin/dist/img/flags/dm.png
.png
Silver RAT V1.0/admin/dist/img/flags/do.png
.png
Silver RAT V1.0/admin/dist/img/flags/dz.png
.png
Silver RAT V1.0/admin/dist/img/flags/ec.png
.png
Silver RAT V1.0/admin/dist/img/flags/ee.png
.png
Silver RAT V1.0/admin/dist/img/flags/eg.png
.png
Silver RAT V1.0/admin/dist/img/flags/eh.png
.png
Silver RAT V1.0/admin/dist/img/flags/er.png
.png
Silver RAT V1.0/admin/dist/img/flags/es.png
.png
Silver RAT V1.0/admin/dist/img/flags/et.png
.png
Silver RAT V1.0/admin/dist/img/flags/fi.png
.png
Silver RAT V1.0/admin/dist/img/flags/fj.png
.png
Silver RAT V1.0/admin/dist/img/flags/fk.png
.png
Silver RAT V1.0/admin/dist/img/flags/fm.png
.png
Silver RAT V1.0/admin/dist/img/flags/fo.png
.png
Silver RAT V1.0/admin/dist/img/flags/fr.png
.png
Silver RAT V1.0/admin/dist/img/flags/ga.png
.png
Silver RAT V1.0/admin/dist/img/flags/gb-eng.png
.png
Silver RAT V1.0/admin/dist/img/flags/gb-nir.png
.png
Silver RAT V1.0/admin/dist/img/flags/gb-sct.png
.png
Silver RAT V1.0/admin/dist/img/flags/gb-wls.png
.png
Silver RAT V1.0/admin/dist/img/flags/gb.png
.png
Silver RAT V1.0/admin/dist/img/flags/gd.png
.png
Silver RAT V1.0/admin/dist/img/flags/ge.png
.png
Silver RAT V1.0/admin/dist/img/flags/gf.png
.png
Silver RAT V1.0/admin/dist/img/flags/gg.png
.png
Silver RAT V1.0/admin/dist/img/flags/gh.png
.png
Silver RAT V1.0/admin/dist/img/flags/gi.png
.png
Silver RAT V1.0/admin/dist/img/flags/gl.png
.png
Silver RAT V1.0/admin/dist/img/flags/gm.png
.png
Silver RAT V1.0/admin/dist/img/flags/gn.png
.png
Silver RAT V1.0/admin/dist/img/flags/gp.png
.png
Silver RAT V1.0/admin/dist/img/flags/gq.png
.png
Silver RAT V1.0/admin/dist/img/flags/gr.png
.png
Silver RAT V1.0/admin/dist/img/flags/gs.png
.png
Silver RAT V1.0/admin/dist/img/flags/gt.png
.png
Silver RAT V1.0/admin/dist/img/flags/gu.png
.png
Silver RAT V1.0/admin/dist/img/flags/gw.png
.png
Silver RAT V1.0/admin/dist/img/flags/gy.png
.png
Silver RAT V1.0/admin/dist/img/flags/hk.png
.png
Silver RAT V1.0/admin/dist/img/flags/hm.png
.png
Silver RAT V1.0/admin/dist/img/flags/hn.png
.png
Silver RAT V1.0/admin/dist/img/flags/hr.png
.png
Silver RAT V1.0/admin/dist/img/flags/ht.png
.png
Silver RAT V1.0/admin/dist/img/flags/hu.png
.png
Silver RAT V1.0/admin/dist/img/flags/id.png
.png
Silver RAT V1.0/admin/dist/img/flags/ie.png
.png
Silver RAT V1.0/admin/dist/img/flags/il.png
.png
Silver RAT V1.0/admin/dist/img/flags/im.png
.png
Silver RAT V1.0/admin/dist/img/flags/in.png
.png
Silver RAT V1.0/admin/dist/img/flags/index.php
Silver RAT V1.0/admin/dist/img/flags/io.png
.png
Silver RAT V1.0/admin/dist/img/flags/iq.png
.png
Silver RAT V1.0/admin/dist/img/flags/ir.png
.png
Silver RAT V1.0/admin/dist/img/flags/is.png
.png
Silver RAT V1.0/admin/dist/img/flags/it.png
.png
Silver RAT V1.0/admin/dist/img/flags/je.png
.png
Silver RAT V1.0/admin/dist/img/flags/jm.png
.png
Silver RAT V1.0/admin/dist/img/flags/jo.png
.png
Silver RAT V1.0/admin/dist/img/flags/jp.png
.png
Silver RAT V1.0/admin/dist/img/flags/ke.png
.png
Silver RAT V1.0/admin/dist/img/flags/kg.png
.png
Silver RAT V1.0/admin/dist/img/flags/kh.png
.png
Silver RAT V1.0/admin/dist/img/flags/ki.png
.png
Silver RAT V1.0/admin/dist/img/flags/km.png
.png
Silver RAT V1.0/admin/dist/img/flags/kn.png
.png
Silver RAT V1.0/admin/dist/img/flags/kp.png
.png
Silver RAT V1.0/admin/dist/img/flags/kr.png
.png
Silver RAT V1.0/admin/dist/img/flags/kw.png
.png
Silver RAT V1.0/admin/dist/img/flags/ky.png
.png
Silver RAT V1.0/admin/dist/img/flags/kz.png
.png
Silver RAT V1.0/admin/dist/img/flags/la.png
.png
Silver RAT V1.0/admin/dist/img/flags/lb.png
.png
Silver RAT V1.0/admin/dist/img/flags/lc.png
.png
Silver RAT V1.0/admin/dist/img/flags/li.png
.png
Silver RAT V1.0/admin/dist/img/flags/lk.png
.png
Silver RAT V1.0/admin/dist/img/flags/lr.png
.png
Silver RAT V1.0/admin/dist/img/flags/ls.png
.png
Silver RAT V1.0/admin/dist/img/flags/lt.png
.png
Silver RAT V1.0/admin/dist/img/flags/lu.png
.png
Silver RAT V1.0/admin/dist/img/flags/lv.png
.png
Silver RAT V1.0/admin/dist/img/flags/ly.png
.png
Silver RAT V1.0/admin/dist/img/flags/ma.png
.png
Silver RAT V1.0/admin/dist/img/flags/mc.png
.png
Silver RAT V1.0/admin/dist/img/flags/md.png
.png
Silver RAT V1.0/admin/dist/img/flags/me.png
.png
Silver RAT V1.0/admin/dist/img/flags/mf.png
.png
Silver RAT V1.0/admin/dist/img/flags/mg.png
.png
Silver RAT V1.0/admin/dist/img/flags/mh.png
.png
Silver RAT V1.0/admin/dist/img/flags/mk.png
.png
Silver RAT V1.0/admin/dist/img/flags/ml.png
.png
Silver RAT V1.0/admin/dist/img/flags/mm.png
.png
Silver RAT V1.0/admin/dist/img/flags/mn.png
.png
Silver RAT V1.0/admin/dist/img/flags/mo.png
.png
Silver RAT V1.0/admin/dist/img/flags/mp.png
.png
Silver RAT V1.0/admin/dist/img/flags/mq.png
.png
Silver RAT V1.0/admin/dist/img/flags/mr.png
.png
Silver RAT V1.0/admin/dist/img/flags/ms.png
.png
Silver RAT V1.0/admin/dist/img/flags/mt.png
.png
Silver RAT V1.0/admin/dist/img/flags/mu.png
.png
Silver RAT V1.0/admin/dist/img/flags/mv.png
.png
Silver RAT V1.0/admin/dist/img/flags/mw.png
.png
Silver RAT V1.0/admin/dist/img/flags/mx.png
.png
Silver RAT V1.0/admin/dist/img/flags/my.png
.png
Silver RAT V1.0/admin/dist/img/flags/mz.png
.png
Silver RAT V1.0/admin/dist/img/flags/na.png
.png
Silver RAT V1.0/admin/dist/img/flags/nc.png
.png
Silver RAT V1.0/admin/dist/img/flags/ne.png
.png
Silver RAT V1.0/admin/dist/img/flags/nf.png
.png
Silver RAT V1.0/admin/dist/img/flags/ng.png
.png
Silver RAT V1.0/admin/dist/img/flags/ni.png
.png
Silver RAT V1.0/admin/dist/img/flags/nl.png
.png
Silver RAT V1.0/admin/dist/img/flags/no.png
.png
Silver RAT V1.0/admin/dist/img/flags/np.png
.png
Silver RAT V1.0/admin/dist/img/flags/nr.png
.png
Silver RAT V1.0/admin/dist/img/flags/nu.png
.png
Silver RAT V1.0/admin/dist/img/flags/nz.png
.png
Silver RAT V1.0/admin/dist/img/flags/om.png
.png
Silver RAT V1.0/admin/dist/img/flags/pa.png
.png
Silver RAT V1.0/admin/dist/img/flags/pe.png
.png
Silver RAT V1.0/admin/dist/img/flags/pf.png
.png
Silver RAT V1.0/admin/dist/img/flags/pg.png
.png
Silver RAT V1.0/admin/dist/img/flags/ph.png
.png
Silver RAT V1.0/admin/dist/img/flags/pk.png
.png
Silver RAT V1.0/admin/dist/img/flags/pl.png
.png
Silver RAT V1.0/admin/dist/img/flags/pm.png
.png
Silver RAT V1.0/admin/dist/img/flags/pn.png
.png
Silver RAT V1.0/admin/dist/img/flags/pr.png
.png
Silver RAT V1.0/admin/dist/img/flags/ps.png
.png
Silver RAT V1.0/admin/dist/img/flags/pt.png
.png
Silver RAT V1.0/admin/dist/img/flags/pw.png
.png
Silver RAT V1.0/admin/dist/img/flags/py.png
.png
Silver RAT V1.0/admin/dist/img/flags/qa.png
.png
Silver RAT V1.0/admin/dist/img/flags/re.png
.png
Silver RAT V1.0/admin/dist/img/flags/ro.png
.png
Silver RAT V1.0/admin/dist/img/flags/rs.png
.png
Silver RAT V1.0/admin/dist/img/flags/ru.png
.png
Silver RAT V1.0/admin/dist/img/flags/rw.png
.png
Silver RAT V1.0/admin/dist/img/flags/sa.png
.png
Silver RAT V1.0/admin/dist/img/flags/sb.png
.png
Silver RAT V1.0/admin/dist/img/flags/sc.png
.png
Silver RAT V1.0/admin/dist/img/flags/sd.png
.png
Silver RAT V1.0/admin/dist/img/flags/se.png
.png
Silver RAT V1.0/admin/dist/img/flags/sg.png
.png
Silver RAT V1.0/admin/dist/img/flags/sh.png
.png
Silver RAT V1.0/admin/dist/img/flags/si.png
.png
Silver RAT V1.0/admin/dist/img/flags/sj.png
.png
Silver RAT V1.0/admin/dist/img/flags/sk.png
.png
Silver RAT V1.0/admin/dist/img/flags/sl.png
.png
Silver RAT V1.0/admin/dist/img/flags/sm.png
.png
Silver RAT V1.0/admin/dist/img/flags/sn.png
.png
Silver RAT V1.0/admin/dist/img/flags/so.png
.png
Silver RAT V1.0/admin/dist/img/flags/sr.png
.png
Silver RAT V1.0/admin/dist/img/flags/ss.png
.png
Silver RAT V1.0/admin/dist/img/flags/st.png
.png
Silver RAT V1.0/admin/dist/img/flags/sv.png
.png
Silver RAT V1.0/admin/dist/img/flags/sx.png
.png
Silver RAT V1.0/admin/dist/img/flags/sy.png
.png
Silver RAT V1.0/admin/dist/img/flags/sz.png
.png
Silver RAT V1.0/admin/dist/img/flags/tc.png
.png
Silver RAT V1.0/admin/dist/img/flags/td.png
.png
Silver RAT V1.0/admin/dist/img/flags/tf.png
.png
Silver RAT V1.0/admin/dist/img/flags/tg.png
.png
Silver RAT V1.0/admin/dist/img/flags/th.png
.png
Silver RAT V1.0/admin/dist/img/flags/tj.png
.png
Silver RAT V1.0/admin/dist/img/flags/tk.png
.png
Silver RAT V1.0/admin/dist/img/flags/tl.png
.png
Silver RAT V1.0/admin/dist/img/flags/tm.png
.png
Silver RAT V1.0/admin/dist/img/flags/tn.png
.png
Silver RAT V1.0/admin/dist/img/flags/to.png
.png
Silver RAT V1.0/admin/dist/img/flags/tr.png
.png
Silver RAT V1.0/admin/dist/img/flags/tt.png
.png
Silver RAT V1.0/admin/dist/img/flags/tv.png
.png
Silver RAT V1.0/admin/dist/img/flags/tw.png
.png
Silver RAT V1.0/admin/dist/img/flags/tz.png
.png
Silver RAT V1.0/admin/dist/img/flags/ua.png
.png
Silver RAT V1.0/admin/dist/img/flags/ug.png
.png
Silver RAT V1.0/admin/dist/img/flags/um.png
.png
Silver RAT V1.0/admin/dist/img/flags/un.png
.png
Silver RAT V1.0/admin/dist/img/flags/us.png
.png
Silver RAT V1.0/admin/dist/img/flags/uy.png
.png
Silver RAT V1.0/admin/dist/img/flags/uz.png
.png
Silver RAT V1.0/admin/dist/img/flags/va.png
.png
Silver RAT V1.0/admin/dist/img/flags/vc.png
.png
Silver RAT V1.0/admin/dist/img/flags/ve.png
.png
Silver RAT V1.0/admin/dist/img/flags/vg.png
.png
Silver RAT V1.0/admin/dist/img/flags/vi.png
.png
Silver RAT V1.0/admin/dist/img/flags/vn.png
.png
Silver RAT V1.0/admin/dist/img/flags/vu.png
.png
Silver RAT V1.0/admin/dist/img/flags/wf.png
.png
Silver RAT V1.0/admin/dist/img/flags/ws.png
.png
Silver RAT V1.0/admin/dist/img/flags/xk.png
.png
Silver RAT V1.0/admin/dist/img/flags/ye.png
.png
Silver RAT V1.0/admin/dist/img/flags/yt.png
.png
Silver RAT V1.0/admin/dist/img/flags/za.png
.png
Silver RAT V1.0/admin/dist/img/flags/zm.png
.png
Silver RAT V1.0/admin/dist/img/flags/zw.png
.png
Silver RAT V1.0/admin/dist/img/index.php
Silver RAT V1.0/admin/dist/img/summary/browsers/360 Browser.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/7Star.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Amigo.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Brave Wallet.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Brave.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Cent.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Chedot.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Chromium.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/CocCoc.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Comodo Dragon.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/CryptoTab.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/EpicPrivacyBrowser.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Google Chrome Canary.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Google Chrome.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Microsoft Edge Beta.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Microsoft Edge Canary.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Microsoft Edge Dev.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Microsoft Edge.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Mozilla Firefox.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Opera Crypto Stable.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Opera GX Stable.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Opera Stable.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Pale Moon.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/QQBrowser.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Thunderbird.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Torch.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/Vivaldi.png
.png
Silver RAT V1.0/admin/dist/img/summary/browsers/index.php
Silver RAT V1.0/admin/dist/img/summary/files.png
.png
Silver RAT V1.0/admin/dist/img/summary/index.php
Silver RAT V1.0/admin/dist/img/summary/plugins/Auro Wallet(Mina Protocol).jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Authenticator.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Authy.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/BOLT X.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Binance Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Bitwarden.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Brave Wallet.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Browserpass.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Byone.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/CLV Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Coin98 Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Coinbase Wallet extension.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/CommonKey.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Cyano Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/DAppPlay.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Dashlane.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/EOS Authenticator.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/EVER Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Enkrypt.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/GAuth Authenticator.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Goby.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Guarda.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/GuildWallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/ICONex.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Jaxx Liberty.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/KHC.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/KardiaChain Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/KeePassXC.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Keeper Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Keeper.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Keplr.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/LastPass.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Liquality Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/MEW CX.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/MYKI.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Maiar DeFi Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/MetaMask.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Nami.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/NeoLine.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/NordPass.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/OneKey.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Opera Wallet.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Oxygen.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Pali Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Phantom.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Polymesh Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Rabby.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/RoboForm.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Ronin Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Solflare Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Sollet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Splikity.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/SteemKeychain.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Temple.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Terra Station Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/TezBox.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Trezor Password Manager.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/TronLink.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/XDEFI Wallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Yoroi.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/Zoho Vault.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/iWallet.jpg
.jpg
Silver RAT V1.0/admin/dist/img/summary/plugins/index.php
Silver RAT V1.0/admin/dist/img/summary/soft/Discord.png
.png
Silver RAT V1.0/admin/dist/img/summary/soft/Outlook.png
.png
Silver RAT V1.0/admin/dist/img/summary/soft/Pidgin.png
.png
Silver RAT V1.0/admin/dist/img/summary/soft/Steam.png
.png
Silver RAT V1.0/admin/dist/img/summary/soft/Telegram.png
.png
Silver RAT V1.0/admin/dist/img/summary/soft/Tox.png
.png
Silver RAT V1.0/admin/dist/img/summary/soft/index.php
Silver RAT V1.0/admin/dist/img/summary/wallets/Atomic.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Binance.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Bitcoin Core.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Blockstream Green.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Coinomi.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Daedalus Mainnet.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Dogecoin.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Electrum.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/ElectrumLTC.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Ethereum.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Exodus.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Jaxx Desktop.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Jaxx Old.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Ledger Live.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/MultiDoge.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Raven Core.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/Wasabi Wallet.png
.png
Silver RAT V1.0/admin/dist/img/summary/wallets/index.php
Silver RAT V1.0/admin/dist/index.php
Silver RAT V1.0/admin/dist/js/bootstrap/index.php
Silver RAT V1.0/admin/dist/js/bootstrap/js/bootstrap.bundle.min.js
.js
Silver RAT V1.0/admin/dist/js/bootstrap/js/index.php
Silver RAT V1.0/admin/dist/js/daterangepicker-data.js
.js
Silver RAT V1.0/admin/dist/js/index.php
Silver RAT V1.0/admin/dist/js/noty/index.php
Silver RAT V1.0/admin/dist/js/noty/noty.css
Silver RAT V1.0/admin/dist/js/noty/noty.css.map
Silver RAT V1.0/admin/dist/js/noty/noty.js
.js
Silver RAT V1.0/admin/dist/js/noty/noty.js.map
.js
Silver RAT V1.0/admin/dist/js/noty/noty.min.js
.js
Silver RAT V1.0/admin/dist/js/noty/noty.min.js.map
.js
Silver RAT V1.0/admin/dist/js/noty/themes/index.php
Silver RAT V1.0/admin/dist/js/noty/themes/stealc.css
Silver RAT V1.0/admin/dist/js/select2/index.php
Silver RAT V1.0/admin/dist/js/select2/select2.min.js
.js
Silver RAT V1.0/admin/downloader.php
Silver RAT V1.0/admin/exit.php
Silver RAT V1.0/admin/grabber.php
.js
Silver RAT V1.0/admin/index.php
Silver RAT V1.0/admin/js/index.php
Silver RAT V1.0/admin/js/logs.js
.js
Silver RAT V1.0/admin/lang-packs/en.php
Silver RAT V1.0/admin/lang-packs/index.php
.html
Silver RAT V1.0/admin/lang-packs/ru.php
Silver RAT V1.0/admin/loader.php
.js
Silver RAT V1.0/admin/main.php
.ps1
Silver RAT V1.0/admin/markers.php
.js
Silver RAT V1.0/admin/open.php
.ps1
Silver RAT V1.0/admin/stats.php
.js
Silver RAT V1.0/admin/vendors/bootstrap/dist/css/bootstrap.min.css
Silver RAT V1.0/admin/vendors/bootstrap/dist/css/index.php
Silver RAT V1.0/admin/vendors/bootstrap/dist/index.php
Silver RAT V1.0/admin/vendors/bootstrap/index.php
Silver RAT V1.0/admin/vendors/daterangepicker/daterangepicker.css
Silver RAT V1.0/admin/vendors/daterangepicker/daterangepicker.js
.js
Silver RAT V1.0/admin/vendors/daterangepicker/index.php
Silver RAT V1.0/admin/vendors/filesaver/FileSaver.min.js
.js
Silver RAT V1.0/admin/vendors/filesaver/index.php
Silver RAT V1.0/admin/vendors/index.php
Silver RAT V1.0/admin/vendors/jquery.counterup/index.php
Silver RAT V1.0/admin/vendors/jquery.counterup/jquery.counterup.min.js
.js
Silver RAT V1.0/admin/vendors/jquery/index.php
Silver RAT V1.0/admin/vendors/jquery/jquery.min.js
.js
Silver RAT V1.0/admin/vendors/moment/index.php
Silver RAT V1.0/admin/vendors/moment/min/index.php
Silver RAT V1.0/admin/vendors/moment/min/moment.min.js
.js
Silver RAT V1.0/admin/vendors/waypoints/index.php
Silver RAT V1.0/admin/vendors/waypoints/lib/index.php
Silver RAT V1.0/admin/vendors/waypoints/lib/jquery.waypoints.min.js
.js
Silver RAT V1.0/admin/vendors/zip/index.php
Silver RAT V1.0/admin/vendors/zip/jszip-utils.min.js
.js
Silver RAT V1.0/admin/vendors/zip/jszip.min.js
.js
Silver RAT V1.0/bin/clean.exe
.exe windows:6 windows x86 arch:x86

e182caafcf7f900f0635ca42f5d4fc93

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:94:98:51:9e:06:0a:e3:f8:ba:1a:40
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

27-02-2020 10:39

Not After

27-02-2021 10:39

Subject

SERIALNUMBER=1154827021909,CN=Promresurs LLC,O=Promresurs LLC,STREET=Yunosheskaya St.\, 50A\, lit. A1 room 4,L=Lipetsk,ST=Lipetsk Oblast,C=RU,1.2.840.113549.1.9.1=#0c10706b6861636840676d61696c2e636f6d,1.3.6.1.4.1.311.60.2.1.2=#130e4c69706574736b204f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

19-02-2018 00:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign TSA for Advanced - G2

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02-08-2011 10:00

Not After

29-03-2029 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

dd:f9:2c:a6:3d:12:df:7b:eb:f4:1b:ee:79:4c:92:c4:55:9c:f2:fa:de:d4:4e:a2:50:30:e2:14:15:da:17:27
Signer

Actual PE Digest

dd:f9:2c:a6:3d:12:df:7b:eb:f4:1b:ee:79:4c:92:c4:55:9c:f2:fa:de:d4:4e:a2:50:30:e2:14:15:da:17:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

gdiplus

GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillRectangle
GdipSetCompositingQuality
GdipSetCompositingMode
GdipCreateSolidFill
GdipFillPieI
GdipFillRectangleI
GdipSetSmoothingMode
GdipSetPathGradientBlend
GdipGetPathGradientPointCount
GdipSetPathGradientCenterPointI
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipDrawImageI
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipSetLineBlend
GdipCreateLineBrushI
GdipGetImageHeight
GdipCreateLineBrush
GdipDeleteBrush
GdipCloneBrush
GdipAddPathEllipseI
GdipDeletePath
GdipCreatePath
GdipDrawImageRectI
GdiplusShutdown
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImageAttributes
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth

psapi

GetProcessMemoryInfo

kernel32

DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
WriteConsoleW
GetCurrentDirectoryW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindFirstFileExA
GetConsoleCP
UnregisterWaitEx
ReadConsoleW
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
PeekNamedPipe
GetDriveTypeW
CreateFileW
GetStdHandle
HeapQueryInformation
GetProcessAffinityMask
GetCommandLineW
GetCommandLineA
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
CompareStringW
GetStringTypeW
TryEnterCriticalSection
LCMapStringW
ExitProcess
lstrcpynW
GetUserDefaultLangID
GetPrivateProfileSectionNamesA
IsBadStringPtrA
EnumResourceLanguagesA
EnumResourceTypesA
lstrcpynA
EnumResourceNamesA
GetLocaleInfoA
GetTimeFormatA
GetDateFormatA
GetLocalTime
OutputDebugStringW
GetNumaHighestNodeNumber
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetVersionExW
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
CreateTimerQueue
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
SearchPathA
GetWindowsDirectoryA
FindResourceExW
SetErrorMode
SetFileAttributesA
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
GetCurrentDirectoryA
VerifyVersionInfoA
QueryDepthSList
VerSetConditionMask
GetUserDefaultLCID
SetFileTime
GetFileTime
GetFileAttributesA
lstrcpyA
GetACP
GetCPInfo
GetOEMCP
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
SystemTimeToFileTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FileTimeToLocalFileTime
GetProfileIntA
GetCurrentThread
VirtualProtect
LoadLibraryExA
DuplicateHandle
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FindFirstFileA
FindClose
DeleteFileA
GetVersionExA
GetThreadLocale
ResumeThread
SetThreadPriority
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcessId
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
EncodePointer
CopyFileA
MulDiv
GlobalSize
GetProcessHeap
DecodePointer
RaiseException
HeapReAlloc
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
FreeResource
FindResourceA
GetTempFileNameA
GetTempPathA
GetCurrentProcess
GlobalFree
SetLastError
FormatMessageA
MultiByteToWideChar
lstrcmpiA
lstrcmpA
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
HeapDestroy
HeapFree
DeleteCriticalSection
InitializeCriticalSection
LocalFree
OutputDebugStringA
FlushFileBuffers
lstrlenA
WriteFile
SetFilePointer
CreateFileA
CreateDirectoryA
GetModuleFileNameA
GetVersion
GetVolumeInformationA
WaitForMultipleObjects
OpenFileMappingA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTickCount
SwitchToThread
OpenMutexA
GetLastError
WaitForSingleObject
Sleep
SetEvent
ResetEvent
CreateThread
GetCurrentThreadId
QueryPerformanceCounter
CloseHandle
QueryPerformanceFrequency
CreateEventA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetTimeZoneInformation

user32

GetDC
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
SetRectEmpty
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
WindowFromPoint
SetRect
UnionRect
SetParent
CopyAcceleratorTableA
InvalidateRgn
SetLayeredWindowAttributes
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongA
PtInRect
MapWindowPoints
GetWindowTextLengthA
GetWindowTextA
ReleaseDC
FillRect
IsZoomed
BringWindowToTop
LoadMenuA
DestroyMenu
InsertMenuItemA
IntersectRect
DestroyIcon
UnpackDDElParam
ReuseDDElParam
GetMenuItemInfoA
SystemParametersInfoA
GetMessageA
TranslateMessage
RemovePropA
GetPropA
SetPropA
CharNextA
DrawStateA
CharUpperA
GetAsyncKeyState
MapDialogRect
GetKeyNameTextA
MapVirtualKeyA
SetWindowContextHelpId
PostQuitMessage
ShowOwnedPopups
IsClipboardFormatAvailable
SetWindowRgn
IsRectEmpty
LoadCursorW
GetWindowDC
EnumDisplayMonitors
NotifyWinEvent
GetSysColorBrush
CopyImage
GetMenuDefaultItem
RegisterClassExA
CreateWindowExA
DestroyWindow
RealChildWindowFromPoint
TrackMouseEvent
SendMessageA
EnableWindow
SetTimer
KillTimer
MessageBoxA
GetClassNameA
GetCursorPos
GetCapture
OffsetRect
GetParent
SetCapture
GetWindowRect
ReleaseCapture
IsWindow
LoadCursorA
SetWindowLongA
DrawTextW
GetUpdateRgn
MsgWaitForMultipleObjects
RegisterClassExW
SetCaretPos
CreateCaret
DestroyCaret
GetCaretBlinkTime
SendMessageTimeoutA
LookupIconIdFromDirectoryEx
GetMenuStringW
SetWindowLongW
GetWindowLongW
IsWindowUnicode
GetCursor
GetKeyboardLayoutList
GetUserObjectInformationA
CloseDesktop
OpenInputDesktop
wsprintfA
CreateIconIndirect
CreateIconFromResourceEx
LoadBitmapA
mouse_event
GetSystemMetrics
GetClientRect
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
DeleteMenu
GetWindowLongA
IsWindowVisible
EnableScrollBar
InvalidateRect
GetSysColor
LoadIconW
GetSystemMenu
AppendMenuA
IsIconic
DrawIcon
CopyRect
PostMessageA
UpdateWindow
InflateRect
CreatePopupMenu
LoadImageA
SetWindowPos
ShowCaret
HideCaret
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetKeyState
MessageBeep
LoadBitmapW
RegisterClipboardFormatA
ScreenToClient
UpdateLayeredWindow
MonitorFromPoint
GetNextDlgGroupItem
GetTabbedTextExtentA
DrawFocusRect
DrawIconEx
GetIconInfo
InvertRect
SetClassLongA
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
GetDCEx
LockWindowUpdate
LoadAcceleratorsW
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
CharUpperBuffA
ModifyMenuA
PostThreadMessageA
WaitMessage
GetComboBoxInfo
IsCharLowerA
MapVirtualKeyExA
GetScrollRange
GetDoubleClickTime
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
MonitorFromRect
CreateMenu
DestroyCursor
SetMenuDefaultItem
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetFocus
EqualRect
GetMenu
RedrawWindow
LoadIconA
BeginPaint
EndPaint
ClientToScreen
AdjustWindowRectEx
MoveWindow
GetWindow
GetDlgCtrlID
UnregisterClassA
RegisterWindowMessageA
SetCursor
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
SetFocus
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
LoadImageW
SetForegroundWindow
ValidateRect
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetWindowRgn
GetTabbedTextExtentW
DefWindowProcA
ShowScrollBar

gdi32

LPtoDP
CreateCompatibleDC
CreateSolidBrush
GetStockObject
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
StartDocA
MoveToEx
PolyBezierTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32A
GetTextColor
CombineRgn
CreateRectRgnIndirect
PatBlt
CreateCompatibleBitmap
CreateEllipticRgn
Ellipse
CreateDIBSection
CreateFontA
GetCharWidthA
StretchDIBits
GetRgnBox
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetDIBits
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
GetCurrentObject
OffsetRgn
Rectangle
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPoint32W
GetTextFaceA
GetMapMode
DPtoLP
GetBkColor
BitBlt
SetBrushOrgEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
GetTextMetricsA
GetTextExtentPointA
CreateFontW
DeleteObject
DeleteDC
GetObjectA
CreateFontIndirectA
CopyMetaFileA
CreateDCA
GetDeviceCaps
SetBkColor
SetTextColor
CreateBitmap
CreateHatchBrush
CreatePen
GetTextExtentExPointW
GetTextExtentExPointA
GetObjectW
CreateFontIndirectW
ExtTextOutW
StrokeAndFillPath
FillPath
CloseFigure
GetBitmapBits
ExtCreateRegion
StrokePath
EndPath
BeginPath
CreateBrushIndirect
GetBitmapDimensionEx
CreatePatternBrush
SetRectRgn
CreateRoundRectRgn
CreateRectRgn

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
IsTextUnicode
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
GetUserNameA
RegQueryValueA
RegEnumKeyA

shell32

ExtractIconExA
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetFolderPathA
SHAppBarMessage

comctl32

ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Draw
_TrackMouseEvent
ImageList_AddMasked
ImageList_GetIcon
ImageList_Destroy
ImageList_Add
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_GetIconSize
InitCommonControlsEx

shlwapi

StrStrIA
PathFindFileNameA
StrCmpNA
StrCmpNIA
PathFileExistsA
PathRemoveFileSpecA
PathAppendA
PathFindExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathCombineA
StrStrA

uxtheme

GetThemeSysColor
GetThemeColor
IsAppThemed
DrawThemeText
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
GetCurrentThemeName

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoCreateGuid
CLSIDFromProgID
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
OleRun
CLSIDFromString
CoCreateInstance

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
VariantChangeType
SysAllocStringLen
VarDateFromStr
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringByteLen
VariantInit
SysAllocStringByteLen
VariantClear
VariantCopy
SysFreeString
GetErrorInfo
CreateErrorInfo
OleLoadPicturePath
VarCmp
VariantChangeTypeEx
SysAllocString
SysStringLen

oledlg

ord1
ord8

wininet

HttpAddRequestHeadersA
InternetCloseHandle
InternetSetOptionA
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile

cximagecrt

?GetYDPI@CxImage@@QBEHXZ
?GetTypeIdFromName@CxImage@@SAIPBD@Z
??0CxMemFile@@QAE@PAEI@Z
??1CxMemFile@@UAE@XZ
?Open@CxMemFile@@QAE_NXZ
?Write@CxMemFile@@UAEIPBXII@Z
?Seek@CxMemFile@@UAE_NHH@Z
?CreateImage@CxImage@@SAPAV1@XZ
?SetRetreiveAllFrames@CxImage@@QAEX_N@Z
?Decode@CxImage@@QAE_NPAVCxFile@@I@Z
?Close@CxMemFile@@UAE_NXZ
?IsValid@CxImage@@QBE_NXZ
?DeleteImage@CxImage@@SAXPAV1@@Z
?GetType@CxImage@@QBEIXZ
?GetWidth@CxImage@@QBEIXZ
?GetHeight@CxImage@@QBEIXZ
?GetNumFrames@CxImage@@QBEHXZ
?GetFrameDelay@CxImage@@QBEIXZ
?GetFrame@CxImage@@QBEHXZ
?GetFrame@CxImage@@QBEPAV1@H@Z
?Copy@CxImage@@QAEXABV1@_N11@Z
?SetFrame@CxImage@@QAEXH@Z
?Draw@CxImage@@QAEHPAUHDC__@@HHHHPAUtagRECT@@_N2@Z
?CopyToHandle@CxImage@@QAEPAXXZ
?GetNumColors@CxImage@@QBEIXZ
?GetBpp@CxImage@@QBEGXZ
?Save@CxImage@@QAE_NPBDI@Z
?Flip@CxImage@@QAE_N_N0@Z
?Mirror@CxImage@@QAE_N_N0@Z
?RotateRight@CxImage@@QAE_NPAV1@@Z
?RotateLeft@CxImage@@QAE_NPAV1@@Z
?GetXDPI@CxImage@@QBEHXZ

ws2_32

WSAStartup
WSAStringToAddressA
gethostbyname

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

winmm

PlaySoundA

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmNotifyIME
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmGetContext

Sections

.text
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Silver RAT V1.0/bin/upx.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 399KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Silver RAT V1.0/cGeoIp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/geoip/geoip.dat
Silver RAT V1.0/geoip/geoip.inc
Silver RAT V1.0/geoip/index.php
Silver RAT V1.0/initialization.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/install.sh
Silver RAT V1.0/libs/freebl3.dll
.dll windows:6 windows x86 arch:x86

f781fa19ee3108d3fcdb3967b70bbdf5

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:6a:53:45:5c:c7:00:12:fa:23:ce:7a:80:f8:5e:47
Certificate

Issuer

CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-07-2013 12:00

Not After

22-10-2023 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-04-2021 00:00

Not After

19-06-2024 23:59

Subject

CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:81:bd:04:2e:62:5d:26:c3:84:19:94:fc:4c:80:82:02:cb:22:df:a6:96:50:fe:df:bf:c5:bc:4f:8d:b7:0e
Signer

Actual PE Digest

4f:81:bd:04:2e:62:5d:26:c3:84:19:94:fc:4c:80:82:02:cb:22:df:a6:96:50:fe:df:bf:c5:bc:4f:8d:b7:0e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nss3

NSS_SecureMemcmp
NSS_SecureMemcmpZero
PORT_Alloc_Util
PORT_ArenaAlloc_Util
PORT_ArenaZAlloc_Util
PORT_FreeArena_Util
PORT_Free_Util
PORT_GetError_Util
PORT_NewArena_Util
PORT_SetError_Util
PORT_ZAllocAlignedOffset_Util
PORT_ZAlloc_Util
PORT_ZFree_Util
PR_CallOnce
PR_DestroyCondVar
PR_DestroyLock
PR_GetEnvSecure
PR_Lock
PR_NewCondVar
PR_NewLock
PR_NotifyAllCondVar
PR_NotifyCondVar
PR_Unlock
PR_WaitCondVar
SECITEM_AllocItem_Util
SECITEM_CompareItem_Util
SECITEM_CopyItem_Util
SECITEM_FreeItem_Util
SECITEM_ZfreeItem_Util
SECOID_FindOIDTag_Util

advapi32

SystemFunction036

kernel32

DisableThreadLibraryCalls
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetLogicalDrives
GetSystemTimeAsFileTime
GetTickCount
GetVolumeInformationA
GlobalMemoryStatus
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memcmp
memcpy
memmove
memset

api-ms-win-crt-utility-l1-1-0

_byteswap_ulong

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
abort

api-ms-win-crt-string-l1-1-0

_strdup
strlen

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

Exports

Exports

FREEBL_GetVector

Sections

.text
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/libs/index.php
Silver RAT V1.0/libs/mozglue.dll
.dll windows:6 windows x86 arch:x86

c190cce47c6cbf1ec0a59ffd2965da30

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:6a:53:45:5c:c7:00:12:fa:23:ce:7a:80:f8:5e:47
Certificate

Issuer

CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-07-2013 12:00

Not After

22-10-2023 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-04-2021 00:00

Not After

19-06-2024 23:59

Subject

CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

f2:31:4e:c7:f2:80:e4:b5:d5:83:03:72:ae:b9:c0:00:1a:f1:76:e6:da:44:29:a7:e3:5f:bb:c9:1b:1f:e2:22
Signer

Actual PE Digest

f2:31:4e:c7:f2:80:e4:b5:d5:83:03:72:ae:b9:c0:00:1a:f1:76:e6:da:44:29:a7:e3:5f:bb:c9:1b:1f:e2:22

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptBinaryToStringW
CryptMsgClose
CryptMsgGetParam
CryptQueryObject

ntdll

NtQueryVirtualMemory
RtlAllocateHeap
RtlCaptureContext
RtlCaptureStackBackTrace
RtlCompareMemory
RtlDuplicateUnicodeString
RtlFreeHeap
RtlFreeUnicodeString
RtlNtStatusToDosError
RtlReAllocateHeap
RtlSetLastWin32Error
VerSetConditionMask

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0_Lockit@std@@QAE@H@Z
??0ios_base@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1_Lockit@std@@QAE@XZ
??1ios_base@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??Bid@locale@std@@QAEIXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?classic@locale@std@@SAABV12@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?fail@ios_base@std@@QBE_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?good@ios_base@std@@QBE_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
ActivateActCtx
CloseHandle
CreateActCtxW
CreateEventW
CreateFileMappingW
CreateFileW
CreateThread
DeactivateActCtx
DeleteCriticalSection
DisableThreadLibraryCalls
DuplicateHandle
EncodePointer
EnterCriticalSection
FlushInstructionCache
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileInformationByHandle
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessTimes
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadId
GetTickCount64
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
IsDebuggerPresent
IsProcessorFeaturePresent
K32EnumProcessModules
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFile
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
QueryUnbiasedInterruptTime
RaiseException
ReleaseActCtx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ResetEvent
ResumeThread
SearchPathW
SetEnvironmentVariableW
SetEvent
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SuspendThread
SystemTimeToFileTime
TerminateProcess
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
UnhandledExceptionFilter
UnmapViewOfFile
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte

vcruntime140

__CxxFrameHandler3
__std_type_info_destroy_list
_except_handler3
_except_handler4_common
_purecall
memchr
memcmp
memcpy
memmove
memset
strchr

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_cexit
_configure_narrow_argv
_crt_atexit
_errno
_execute_onexit_table
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll
abort
exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vswprintf
_dup
_fileno
_fseeki64
_get_stream_buffer_pointers
_write
fclose
fflush
fgetc
fgetpos
fputc
fputs
fread
fsetpos
fwrite
setvbuf
ungetc

api-ms-win-crt-math-l1-1-0

_dsign
_dtest
_fdopen
ceil
floor
sqrt

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_wsplitpath_s

api-ms-win-crt-convert-l1-1-0

_ltoa_s
_strtoui64
strtol

api-ms-win-crt-string-l1-1-0

_stricmp
_strnicmp
_wcsnicmp
_wcsupr_s
islower
isxdigit
strcmp
strlen
strncmp
strncpy
tolower
toupper
wcscpy_s
wcslen
wcsncpy
wcsncpy_s
wcstok_s

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

rand_s

Exports

Exports

??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??$AddMarkerToBuffer@UNoPayload@markers@baseprofiler@mozilla@@$$V@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@AAVProfileChunkedBuffer@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UNoPayload@markers@01@@Z
??$AddMarkerToBuffer@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@AAVProfileChunkedBuffer@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0AwakeTimeDuration@mozilla@@QAE@XZ
??0ConditionVariableImpl@detail@mozilla@@QAE@XZ
??0Decimal@blink@@QAE@ABV01@@Z
??0Decimal@blink@@QAE@ABVEncodedData@01@@Z
??0Decimal@blink@@QAE@H@Z
??0Decimal@blink@@QAE@W4Sign@01@H_K@Z
??0LZ4FrameCompressionContext@Compression@mozilla@@QAE@HI_N0@Z
??0LZ4FrameDecompressionContext@Compression@mozilla@@QAE@_N@Z
??0MutexImpl@detail@mozilla@@QAE@XZ
??0PrintfTarget@mozilla@@IAE@XZ
??0RWLockImpl@detail@mozilla@@QAE@XZ
??0SHA1Sum@mozilla@@QAE@XZ
??0TimeStampValue@mozilla@@AAE@_K0_N@Z
??0UniqueJSONStrings@baseprofiler@mozilla@@QAE@ABV012@VProgressLogger@2@W4CollectionStyle@JSONWriter@2@@Z
??0UniqueJSONStrings@baseprofiler@mozilla@@QAE@W4CollectionStyle@JSONWriter@2@@Z
??1ConditionVariableImpl@detail@mozilla@@QAE@XZ
??1LZ4FrameCompressionContext@Compression@mozilla@@QAE@XZ
??1LZ4FrameDecompressionContext@Compression@mozilla@@QAE@XZ
??1MutexImpl@detail@mozilla@@QAE@XZ
??1ProfilingStack@baseprofiler@mozilla@@QAE@XZ
??1RWLockImpl@detail@mozilla@@QAE@XZ
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ
??2@YAPAXI@Z
??2@YAPAXIABUnothrow_t@std@@@Z
??3@YAXPAX@Z
??3@YAXPAXABUnothrow_t@std@@@Z
??3@YAXPAXI@Z
??4Decimal@blink@@QAEAAV01@ABV01@@Z
??8AwakeTimeDuration@mozilla@@QBE_NABV01@@Z
??8AwakeTimeStamp@mozilla@@QBE_NABV01@@Z
??8Decimal@blink@@QBE_NABV01@@Z
??9AwakeTimeDuration@mozilla@@QBE_NABV01@@Z
??9AwakeTimeStamp@mozilla@@QBE_NABV01@@Z
??9Decimal@blink@@QBE_NABV01@@Z
??DDecimal@blink@@QBE?AV01@ABV01@@Z
??GAwakeTimeDuration@mozilla@@QBE?AV01@ABV01@@Z
??GAwakeTimeStamp@mozilla@@QBE?AVAwakeTimeDuration@1@ABV01@@Z
??GDecimal@blink@@QBE?AV01@ABV01@@Z
??GDecimal@blink@@QBE?AV01@XZ
??GTimeStampValue@mozilla@@QBE_KABV01@@Z
??HAwakeTimeDuration@mozilla@@QBE?AV01@ABV01@@Z
??HAwakeTimeStamp@mozilla@@QBE?AV01@ABVAwakeTimeDuration@1@@Z
??HDecimal@blink@@QBE?AV01@ABV01@@Z
??KDecimal@blink@@QBE?AV01@ABV01@@Z
??MAwakeTimeDuration@mozilla@@QBE_NABV01@@Z
??MAwakeTimeStamp@mozilla@@QBE_NABV01@@Z
??MDecimal@blink@@QBE_NABV01@@Z
??NAwakeTimeDuration@mozilla@@QBE_NABV01@@Z
??NAwakeTimeStamp@mozilla@@QBE_NABV01@@Z
??NDecimal@blink@@QBE_NABV01@@Z
??OAwakeTimeDuration@mozilla@@QBE_NABV01@@Z
??OAwakeTimeStamp@mozilla@@QBE_NABV01@@Z
??ODecimal@blink@@QBE_NABV01@@Z
??PAwakeTimeDuration@mozilla@@QBE_NABV01@@Z
??PAwakeTimeStamp@mozilla@@QBE_NABV01@@Z
??PDecimal@blink@@QBE_NABV01@@Z
??RFileHandleDeleter@detail@mozilla@@QAEXUFileHandleHelper@12@@Z
??RProfilerBacktraceDestructor@baseprofiler@mozilla@@QAEXPAVProfilerBacktrace@12@@Z
??XDecimal@blink@@QAEAAV01@ABV01@@Z
??YAwakeTimeDuration@mozilla@@QAEXABV01@@Z
??YAwakeTimeStamp@mozilla@@QAEXABVAwakeTimeDuration@1@@Z
??YDecimal@blink@@QAEAAV01@ABV01@@Z
??YTimeStampValue@mozilla@@QAEAAV01@_J@Z
??ZAwakeTimeDuration@mozilla@@QAEXABV01@@Z
??ZAwakeTimeStamp@mozilla@@QAEXABVAwakeTimeDuration@1@@Z
??ZDecimal@blink@@QAEAAV01@ABV01@@Z
??ZTimeStampValue@mozilla@@QAEAAV01@_J@Z
??_0Decimal@blink@@QAEAAV01@ABV01@@Z
??_FDecimal@blink@@QAEXXZ
??_FLZ4FrameDecompressionContext@Compression@mozilla@@QAEXXZ
??_FUniqueJSONStrings@baseprofiler@mozilla@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIABUnothrow_t@std@@@Z
??_V@YAXPAX@Z
??_V@YAXPAXABUnothrow_t@std@@@Z
??_V@YAXPAXI@Z
?AddRef@PageInformation@baseprofiler@mozilla@@QBEXXZ
?AddRef@ThreadInfo@baseprofiler@mozilla@@QBEXXZ
?BeginCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QAE?AV?$Result@V?$Span@$$CBD$0PPPPPPPP@@mozilla@@I@3@V?$Span@D$0PPPPPPPP@@3@@Z
?BeginProcessRuntimeInit@detail@mscom@mozilla@@YAAAW4ProcessInitState@123@XZ
?CacheNtDllThunk@mozilla@@YAXXZ
?CheckQPC@TimeStampValue@mozilla@@ABE_KABV12@@Z
?CleanupProcessRuntime@mozilla@@YAXXZ
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ
?ConsumePreXULSkeletonUIHandle@mozilla@@YAPAUHWND__@@XZ
?ContinueCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QAE?AV?$Result@V?$Span@$$CBD$0PPPPPPPP@@mozilla@@I@3@V?$Span@$$CBD$0PPPPPPPP@@3@@Z
?CreateAndStorePreXULSkeletonUI@mozilla@@YAXPAUHINSTANCE__@@HPAPAD@Z
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z
?Decompress@LZ4FrameDecompressionContext@Compression@mozilla@@QAE?AV?$Result@ULZ4FrameDecompressionResult@Compression@mozilla@@I@3@V?$Span@D$0PPPPPPPP@@3@V?$Span@$$CBD$0PPPPPPPP@@3@@Z
?DeserializerForTag@Streaming@base_profiler_markers_detail@mozilla@@SAP6AXAAVProfileBufferEntryReader@3@AAVSpliceableJSONWriter@baseprofiler@3@@ZE@Z
?DllBlocklist_CheckStatus@@YA_NXZ
?DllBlocklist_Initialize@@YAXI@Z
?DllBlocklist_SetBasicDllServices@@YAXPAVDllServicesBase@detail@glue@mozilla@@@Z
?DllBlocklist_SetFullDllServices@@YAXPAVDllServicesBase@detail@glue@mozilla@@@Z
?DllBlocklist_WriteNotes@@YAXAAVAnnotationWriter@CrashReporter@@@Z
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z
?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ
?EndCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QAE?AV?$Result@V?$Span@$$CBD$0PPPPPPPP@@mozilla@@I@3@XZ
?EndProcessRuntimeInit@detail@mscom@mozilla@@YAXXZ
?EnsureBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ
?ExtractBaseProfilerChunkManager@detail@baseprofiler@mozilla@@YA?AV?$UniquePtr@VProfileBufferChunkManagerWithLocalLimit@mozilla@@V?$DefaultDelete@VProfileBufferChunkManagerWithLocalLimit@mozilla@@@2@@3@XZ
?FilterHasPid@detail@profiler@mozilla@@YA_NPBDVBaseProfilerProcessId@baseprofiler@3@@Z
?FiltersExcludePid@detail@profiler@mozilla@@YA_NV?$Span@QBD$0PPPPPPPP@@3@VBaseProfilerProcessId@baseprofiler@3@@Z
?FirstTimeStamp@TimeStamp@mozilla@@SA?AV12@XZ
?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z
?FramePointerStackWalk@mozilla@@YAXP6AXIPAX00@ZI0PAPAX0@Z
?GenerateRandomBytesFromOS@mozilla@@YA_NPAXI@Z
?GetAccessibilityResource@ActCtxResource@mscom@mozilla@@SA?AU123@XZ
?GetAccessibilityResourceId@ActCtxResource@mscom@mozilla@@SAGXZ
?GetCachedNtDllThunk@mozilla@@YAPAV?$Buffer@U_IMAGE_THUNK_DATA32@@@1@XZ
?GetClearedBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAPAVProfileChunkedBuffer@2@XZ
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z
?GetPreXULSkeletonUIEnabled@mozilla@@YA_NXZ
?GetPreXULSkeletonUIErrorReason@mozilla@@YA?AV?$Maybe@W4PreXULSkeletonUIError@mozilla@@@1@XZ
?GetPreXULSkeletonUIWasShown@mozilla@@YA_NXZ
?GetProfilerEnvVarsForChildProcess@baseprofiler@mozilla@@YAX$$QAV?$function@$$A6AXPBD0@Z@std@@@Z
?GetProfilingCategoryPairInfo@baseprofiler@mozilla@@YAABUProfilingCategoryPairInfo@12@W4ProfilingCategoryPair@12@@Z
?GetProfilingStack@AutoProfilerLabel@baseprofiler@mozilla@@SAPAVProfilingStack@23@XZ
?GetProfilingStartTime@detail@baseprofiler@mozilla@@YA?AVTimeStamp@3@XZ
?GetQueryPerformanceFrequencyPerSec@mozilla@@YA_KXZ
?GetThreadRegistrationTime@detail@baseprofiler@mozilla@@YA?AVTimeStamp@3@XZ
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z
?HashBytes@mozilla@@YAIPBXI@Z
?InitializeUptime@mozilla@@YAXXZ
?InvalidArrayIndex_CRASH@detail@mozilla@@YAXII@Z
?IsActive@RacyFeatures@detail@baseprofiler@mozilla@@SA_NXZ
?IsActiveAndSamplingUnpaused@RacyFeatures@detail@baseprofiler@mozilla@@SA_NXZ
?IsActiveAndUnpaused@RacyFeatures@detail@baseprofiler@mozilla@@SA_NXZ
?IsActiveWithFeature@RacyFeatures@detail@baseprofiler@mozilla@@SA_NI@Z
?IsDynamicCodeDisabled@mozilla@@YA_NXZ
?IsEafPlusEnabled@mozilla@@YA_NXZ
?IsFloat32Representable@mozilla@@YA_NN@Z
?IsThreadBeingProfiled@detail@baseprofiler@mozilla@@YA_NXZ
?IsValidUtf8@detail@mozilla@@YA_NPBXI@Z
?IsWin32kLockedDown@mozilla@@YA_NXZ
?LocationToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Location@12@@Z
?MapRemoteViewOfFile@mozilla@@YAPAXPAX0_K0KKK@Z
?MarkerTypeFunctionsArray@Streaming@base_profiler_markers_detail@mozilla@@SA?AV?$Span@$$CBUMarkerTypeFunctions@Streaming@base_profiler_markers_detail@mozilla@@$0PPPPPPPP@@3@XZ
?MozStackWalkThread@@YAXP6AXIPAX00@ZI00PAU_CONTEXT@@@Z
?NotePreXULSkeletonUIRestarting@mozilla@@YA?AV?$Result@UOk@mozilla@@W4PreXULSkeletonUIError@2@@1@XZ
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
?NowLoRes@AwakeTimeStamp@mozilla@@SA?AV12@XZ
?PersistPreXULSkeletonUIValues@mozilla@@YA?AV?$Result@UOk@mozilla@@W4PreXULSkeletonUIError@2@@1@ABUSkeletonUISettings@1@@Z
?PollPreXULSkeletonUIEvents@mozilla@@YAXXZ
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ
?ProcessUptimeExcludingSuspendMs@mozilla@@YA?AV?$Maybe@_K@1@XZ
?ProcessUptimeMs@mozilla@@YA?AV?$Maybe@_K@1@XZ
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ
?RandomUint64OrDie@mozilla@@YA_KXZ
?RecordProcessRestart@TimeStamp@mozilla@@SAXXZ
?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z
?Release@PageInformation@baseprofiler@mozilla@@QBEXXZ
?Release@ThreadInfo@baseprofiler@mozilla@@QBEXXZ
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ
?ResolutionInTicks@BaseTimeDurationPlatformUtils@mozilla@@SA_JXZ
?SetAccessibilityResourceId@ActCtxResource@mscom@mozilla@@SAXG@Z
?SetActive@RacyFeatures@detail@baseprofiler@mozilla@@SAXI@Z
?SetInactive@RacyFeatures@detail@baseprofiler@mozilla@@SAXXZ
?SetPaused@RacyFeatures@detail@baseprofiler@mozilla@@SAXXZ
?SetPreXULSkeletonUIEnabledIfAllowed@mozilla@@YA?AV?$Result@UOk@mozilla@@W4PreXULSkeletonUIError@2@@1@_N@Z
?SetPreXULSkeletonUIThemeId@mozilla@@YA?AV?$Result@UOk@mozilla@@W4PreXULSkeletonUIError@2@@1@W4ThemeMode@1@@Z
?SetSamplingPaused@RacyFeatures@detail@baseprofiler@mozilla@@SAXXZ
?SetSamplingUnpaused@RacyFeatures@detail@baseprofiler@mozilla@@SAXXZ
?SetUnpaused@RacyFeatures@detail@baseprofiler@mozilla@@SAXXZ
?SetWin32kLockedDownInPolicy@mozilla@@YAXXZ
?Shutdown@TimeStamp@mozilla@@SAXXZ
?SpliceStringTableElements@UniqueJSONStrings@baseprofiler@mozilla@@QAEXAAVSpliceableJSONWriter@23@@Z
?Startup@TimeStamp@mozilla@@SAXXZ
?Stream@MarkerSchema@mozilla@@QHAEXAAVJSONWriter@2@ABV?$Span@$$CBD$0PPPPPPPP@@2@@Z
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBGHPAH@Z
?TagForMarkerTypeFunctions@Streaming@base_profiler_markers_detail@mozilla@@SAEP6AXAAVProfileBufferEntryReader@3@AAVSpliceableJSONWriter@baseprofiler@3@@ZP6A?AV?$Span@$$CBD$0PPPPPPPP@@3@XZP6A?AVMarkerSchema@3@XZ@Z
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z
?ToExponential@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
?ToFixed@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
?ToMicroseconds@AwakeTimeDuration@mozilla@@QBENXZ
?ToMilliseconds@AwakeTimeDuration@mozilla@@QBENXZ
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
?ToSeconds@AwakeTimeDuration@mozilla@@QBENXZ
?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToSecondsSigDigits@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z
?UnmapRemoteViewOfFile@mozilla@@YA_NPAX0@Z
?Unused@mozilla@@3Uunused_t@1@B
?WasPreXULSkeletonUIMaximized@mozilla@@YA_NXZ
?WindowsDpiInitialization@mozilla@@YA?AW4WindowsDpiInitializationResult@1@XZ
?abs@Decimal@blink@@QBE?AV12@XZ
?aes_enabled@sse_private@mozilla@@3_NA
?alignOperands@Decimal@blink@@CA?AUAlignedOperands@12@ABV12@0@Z
?appendIntDec@PrintfTarget@mozilla@@QAE_NH@Z
?appendIntDec@PrintfTarget@mozilla@@QAE_NI@Z
?appendIntDec@PrintfTarget@mozilla@@QAE_N_J@Z
?appendIntDec@PrintfTarget@mozilla@@QAE_N_K@Z
?appendIntHex@PrintfTarget@mozilla@@QAE_NI@Z
?appendIntHex@PrintfTarget@mozilla@@QAE_N_K@Z
?appendIntOct@PrintfTarget@mozilla@@QAE_NI@Z
?appendIntOct@PrintfTarget@mozilla@@QAE_N_K@Z
?avx2_enabled@sse_private@mozilla@@3_NA
?avx_enabled@sse_private@mozilla@@3_NA
?baseprofiler_save_profile_to_file@baseprofiler@mozilla@@YAXPBD@Z
?ceil@Decimal@blink@@QBE?AV12@XZ
?compareTo@Decimal@blink@@ABE?AV12@ABV12@@Z
?compress@LZ4@Compression@mozilla@@SAIPBDIPAD@Z
?compressLimitedOutput@LZ4@Compression@mozilla@@SAIPBDIPADI@Z
?decompress@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
?decompressPartial@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
?ensureCapacitySlow@ProfilingStack@baseprofiler@mozilla@@AAEXXZ
?finish@SHA1Sum@mozilla@@QAEXAAY0BE@E@Z
?floor@Decimal@blink@@QBE?AV12@XZ
?fromDouble@Decimal@blink@@SA?AV12@N@Z
?fromString@Decimal@blink@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?gChaosFeatures@detail@mozilla@@3W4ChaosFeature@2@A
?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
?gOOMAllocationSize@@3IA
?gTwoCharEscapes@detail@mozilla@@3QBDB
?has_constant_tsc@sse_private@mozilla@@3_NA
?infinity@Decimal@blink@@SA?AV12@W4Sign@12@@Z
?lock@MutexImpl@detail@mozilla@@IAEXXZ
?memchr16@SIMD@mozilla@@SAPB_SPB_S_SI@Z
?memchr2x16@SIMD@mozilla@@SAPB_SPB_S_S1I@Z
?memchr2x8@SIMD@mozilla@@SAPBDPBDDDI@Z
?memchr8@SIMD@mozilla@@SAPBDPBDDI@Z
?mmx_enabled@sse_private@mozilla@@3_NA
?mozalloc_handle_oom@@YAXI@Z
?nan@Decimal@blink@@SA?AV12@XZ
?notify_all@ConditionVariableImpl@detail@mozilla@@QAEXXZ
?notify_one@ConditionVariableImpl@detail@mozilla@@QAEXXZ
?print@PrintfTarget@mozilla@@QAA_NPBDZZ
?profiler_add_js_marker@baseprofiler@mozilla@@YAXPBD0@Z
?profiler_add_sampled_counter@baseprofiler@mozilla@@YAXPAVBaseProfilerCount@12@@Z
?profiler_capture_backtrace@baseprofiler@mozilla@@YA?AV?$UniquePtr@VProfileChunkedBuffer@mozilla@@V?$DefaultDelete@VProfileChunkedBuffer@mozilla@@@2@@2@XZ
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z
?profiler_current_process_id@baseprofiler@mozilla@@YA?AVBaseProfilerProcessId@12@XZ
?profiler_current_thread_id@baseprofiler@mozilla@@YA?AVBaseProfilerThreadId@12@XZ
?profiler_ensure_started@baseprofiler@mozilla@@YAXV?$PowerOfTwo@I@2@NIPAPBDIABV?$Maybe@N@2@@Z
?profiler_feature_active@baseprofiler@mozilla@@YA_NI@Z
?profiler_get_available_features@baseprofiler@mozilla@@YAIXZ
?profiler_get_backtrace@baseprofiler@mozilla@@YA?AV?$UniquePtr@VProfilerBacktrace@baseprofiler@mozilla@@UProfilerBacktraceDestructor@23@@2@XZ
?profiler_get_buffer_info@baseprofiler@mozilla@@YA?AV?$Maybe@UProfilerBufferInfo@baseprofiler@mozilla@@@2@XZ
?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ
?profiler_get_profile@baseprofiler@mozilla@@YA?AV?$UniquePtr@$$BY0A@DV?$DefaultDelete@$$BY0A@D@mozilla@@@2@N_N0@Z
?profiler_get_start_params@baseprofiler@mozilla@@YAXPAHPAV?$Maybe@N@2@PANPAIPAV?$Vector@PBD$0A@VMallocAllocPolicy@mozilla@@@2@@Z
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z
?profiler_init_main_thread_id@baseprofiler@mozilla@@YAXXZ
?profiler_is_main_thread@baseprofiler@mozilla@@YA_NXZ
?profiler_is_paused@baseprofiler@mozilla@@YA_NXZ
?profiler_is_sampling_paused@baseprofiler@mozilla@@YA_NXZ
?profiler_main_thread_id@baseprofiler@mozilla@@YA?AVBaseProfilerThreadId@12@XZ
?profiler_pause@baseprofiler@mozilla@@YAXXZ
?profiler_pause_sampling@baseprofiler@mozilla@@YAXXZ
?profiler_register_page@baseprofiler@mozilla@@YAX_K0ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?profiler_register_thread@baseprofiler@mozilla@@YAPAVProfilingStack@12@PBDPAX@Z
?profiler_remove_sampled_counter@baseprofiler@mozilla@@YAXPAVBaseProfilerCount@12@@Z
?profiler_resume@baseprofiler@mozilla@@YAXXZ
?profiler_resume_sampling@baseprofiler@mozilla@@YAXXZ
?profiler_set_process_name@baseprofiler@mozilla@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBV34@@Z
?profiler_shutdown@baseprofiler@mozilla@@YAXXZ
?profiler_start@baseprofiler@mozilla@@YAXV?$PowerOfTwo@I@2@NIPAPBDIABV?$Maybe@N@2@@Z
?profiler_stop@baseprofiler@mozilla@@YAXXZ
?profiler_stream_json_for_this_process@baseprofiler@mozilla@@YA_NAAVSpliceableJSONWriter@12@N_N1@Z
?profiler_thread_is_sleeping@baseprofiler@mozilla@@YA_NXZ
?profiler_thread_sleep@baseprofiler@mozilla@@YAXXZ
?profiler_thread_wake@baseprofiler@mozilla@@YAXXZ
?profiler_time@baseprofiler@mozilla@@YANXZ
?profiler_unregister_page@baseprofiler@mozilla@@YAX_K@Z
?profiler_unregister_thread@baseprofiler@mozilla@@YAXXZ
?readLock@RWLockImpl@detail@mozilla@@IAEXXZ
?readUnlock@RWLockImpl@detail@mozilla@@IAEXXZ
?remainder@Decimal@blink@@QBE?AV12@ABV12@@Z
?round@Decimal@blink@@QBE?AV12@XZ
?sse3_enabled@sse_private@mozilla@@3_NA
?sse4_1_enabled@sse_private@mozilla@@3_NA
?sse4_2_enabled@sse_private@mozilla@@3_NA
?sse4a_enabled@sse_private@mozilla@@3_NA
?ssse3_enabled@sse_private@mozilla@@3_NA
?toDouble@Decimal@blink@@QBENXZ
?toString@Decimal@blink@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?toString@Decimal@blink@@QBE_NPADI@Z
?tryLock@MutexImpl@detail@mozilla@@IAE_NXZ
?tryReadLock@RWLockImpl@detail@mozilla@@IAE_NXZ
?tryWriteLock@RWLockImpl@detail@mozilla@@IAE_NXZ
?unlock@MutexImpl@detail@mozilla@@IAEXXZ
?update@SHA1Sum@mozilla@@QAEXPBXI@Z
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z
?wait@ConditionVariableImpl@detail@mozilla@@QAEXAAVMutexImpl@23@@Z
?wait_for@ConditionVariableImpl@detail@mozilla@@QAE?AW4CVStatus@3@AAVMutexImpl@23@ABV?$BaseTimeDuration@VTimeDurationValueCalculator@mozilla@@@3@@Z
?writeLock@RWLockImpl@detail@mozilla@@IAEXXZ
?writeUnlock@RWLockImpl@detail@mozilla@@IAEXXZ
?xgetbv@mozilla@@YA_KI@Z
?zero@Decimal@blink@@SA?AV12@W4Sign@12@@Z
MOZ_CrashPrintf
MozDescribeCodeAddress
MozFormatCodeAddress
MozFormatCodeAddressDetails
MozStackWalk
MozWalkTheStack
MozWalkTheStackWithWriter
_HeapAlloc@12
_HeapFree@12
_HeapReAlloc@16
_aligned_free
_aligned_malloc
_expand
_msize
_recalloc
_strdup
_wcsdup
calloc
free
gMozCrashReason
gMozillaPoisonBase
gMozillaPoisonSize
gMozillaPoisonValue
jemalloc_free_dirty_pages
jemalloc_ptr_info
jemalloc_purge_freed_pages
jemalloc_stats_internal
jemalloc_stats_num_bins
jemalloc_thread_local_arena
malloc
malloc_good_size
malloc_usable_size
moz_arena_calloc
moz_arena_free
moz_arena_malloc
moz_arena_memalign
moz_arena_realloc
moz_create_arena_with_params
moz_dispose_arena
moz_malloc_enclosing_size_of
moz_malloc_size_of
moz_malloc_usable_size
moz_xcalloc
moz_xmalloc
moz_xmemalign
moz_xmemdup
moz_xrealloc
moz_xstrdup
mozalloc_abort
posix_memalign
realloc
strdup
strndup
wcsdup

Sections

.text
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/libs/msvcp140.dll
.dll windows:6 windows x86 arch:x86

6dbd7763e94344402d4206b7bab40e1f

Code Sign

33:00:00:01:1b:c3:a6:d4:cd:3b:5c:e1:05:00:00:00:00:01:1b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-10-2018 21:07

Not After

10-01-2020 21:07

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:49:bb:e6:21:80:87:61:cf:ab:40:e2:69:44:73:80:5d:38:e3:df:e6:96:2e:e7:e8:1b:15:53:2f:2c:4b:06
Signer

Actual PE Digest

1b:49:bb:e6:21:80:87:61:cf:ab:40:e2:69:44:73:80:5d:38:e3:df:e6:96:2e:e7:e8:1b:15:53:2f:2c:4b:06

Digest Algorithm

sha256

PE Digest Matches

true

9c:08:60:78:c1:94:8f:6f:4f:3e:3f:d5:65:3a:7f:14:19:d8:c8:00
Signer

Actual PE Digest

9c:08:60:78:c1:94:8f:6f:4f:3e:3f:d5:65:3a:7f:14:19:d8:c8:00

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vcruntime140

_except_handler4_common
__uncaught_exceptions
__uncaught_exception
memmove
__std_terminate
_purecall
__CxxFrameHandler3
_CxxThrowException
__AdjustPointer
__processing_throw
__current_exception
__std_exception_destroy
__std_exception_copy
memset
memcmp
memchr
__std_type_info_destroy_list
memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh
free
calloc
malloc
realloc

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func
___lc_locale_name_func
___lc_collate_cp_func
localeconv
___lc_codepage_func
_lock_locales
_unlock_locales
setlocale
__pctype_func

api-ms-win-crt-string-l1-1-0

__strncnt
tolower
isalnum
isxdigit
isspace
wcsnlen
isdigit
wcscpy_s
_wcsdup
islower
isupper
iswctype
strcspn

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_register_onexit_function
_set_new_handler
terminate
_crt_atexit
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort
_initterm
_initterm_e
_initialize_onexit_table
_beginthreadex
_endthreadex
_errno

api-ms-win-crt-stdio-l1-1-0

fputwc
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputs
fgetc
fflush
fclose
_get_stream_buffer_pointers
_wfsopen
_fsopen
__acrt_iob_func
fgetpos
fseek
fputc
__stdio_common_vsprintf_s
fgetwc
ungetwc

api-ms-win-crt-math-l1-1-0

ldexp
_CIpow
_CIlog
frexp

api-ms-win-crt-convert-l1-1-0

btowc
strtod
strtof

api-ms-win-crt-filesystem-l1-1-0

_wchdir
_wrmdir
_unlock_file
_wremove
_lock_file
_wrename

api-ms-win-crt-time-l1-1-0

_W_Getdays
_Getmonths
_Strftime
_Wcsftime
_Getdays
_Gettnames
_W_Gettnames
_W_Getmonths

api-ms-win-crt-environment-l1-1-0

_wgetcwd

api-ms-win-crt-utility-l1-1-0

rand_s

kernel32

RtlCaptureStackBackTrace
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
LoadLibraryExA
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
GetModuleHandleExW
QueueUserWorkItem
IsProcessorFeaturePresent
CloseHandle
TryEnterCriticalSection
FormatMessageW
CreateHardLinkW
CopyFileW
GetLastError
AreFileApisANSI
GetTempPathW
SetFileTime
SetFilePointerEx
SetFileAttributesW
SetEndOfFile
GetFileInformationByHandle
GetFileAttributesExW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
CreateDirectoryW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
RaiseException
DecodePointer
EncodePointer

Exports

Exports

??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??0?$_Yarn@D@std@@QAE@ABV01@@Z
??0?$_Yarn@D@std@@QAE@PBD@Z
??0?$_Yarn@D@std@@QAE@XZ
??0?$_Yarn@G@std@@QAE@ABV01@@Z
??0?$_Yarn@G@std@@QAE@PBG@Z
??0?$_Yarn@G@std@@QAE@XZ
??0?$_Yarn@_W@std@@QAE@ABV01@@Z
??0?$_Yarn@_W@std@@QAE@PB_W@Z
??0?$_Yarn@_W@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$codecvt@DDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Facet_base@std@@QAE@ABV01@@Z
??0_Facet_base@std@@QAE@XZ
??0_Init_locks@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locimp@locale@std@@AAE@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0task_continuation_context@Concurrency@@AAE@XZ
??0time_base@std@@QAE@I@Z
??1?$_Yarn@D@std@@QAE@XZ
??1?$_Yarn@G@std@@QAE@XZ
??1?$_Yarn@_W@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$codecvt@DDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_SDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_UDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Facet_base@std@@UAE@XZ
??1_Init_locks@std@@QAE@XZ
??1_Locimp@locale@std@@MAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@MAE@XZ
??1ios_base@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Iosb@H@std@@QAEAAV01@$$QAV01@@Z
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??4?$_Yarn@G@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@G@std@@QAEAAV01@PBG@Z
??4?$_Yarn@_W@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@_W@std@@QAEAAV01@PB_W@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Crt_new_delete@std@@QAEAAU01@$$QAU01@@Z
??4_Crt_new_delete@std@@QAEAAU01@ABU01@@Z
??4_Facet_base@std@@QAEAAV01@ABV01@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??7ios_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBE_NXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDU_Mbstatet@@@std@@6B@
??_7?$codecvt@GDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_SDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_UDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Facet_base@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_F?$codecvt@DDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@GDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_SDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_UDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_WDU_Mbstatet@@@std@@QAEXXZ
??_F?$ctype@D@std@@QAEXXZ
??_F?$ctype@G@std@@QAEXXZ
??_F?$ctype@_W@std@@QAEXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F_Locinfo@std@@QAEXXZ
??_F_Timevec@std@@QAEXXZ
??_Fcodecvt_base@std@@QAEXXZ
??_Fctype_base@std@@QAEXXZ
??_Ffacet@locale@std@@QAEXXZ
??_Fid@locale@std@@QAEXXZ
??_Ftime_base@std@@QAEXXZ
?CaptureCallstack@platform@details@Concurrency@@YAIPAPAXII@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?GetNextAsyncId@platform@details@Concurrency@@YAIXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Addstd@ios_base@std@@SAXPAV12@@Z
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?_C_str@?$_Yarn@G@std@@QBEPBGXZ
?_C_str@?$_Yarn@_W@std@@QBEPB_WXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Callfns@ios_base@std@@AAEXW4event@12@@Z
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Clocptr@_Locimp@locale@std@@0PAV123@A
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Donarrow@?$ctype@G@std@@IBEDGD@Z
?_Donarrow@?$ctype@_W@std@@IBED_WD@Z
?_Dowiden@?$ctype@G@std@@IBEGD@Z
?_Dowiden@?$ctype@_W@std@@IBE_WD@Z
?_Empty@?$_Yarn@D@std@@QBE_NXZ
?_Empty@?$_Yarn@G@std@@QBE_NXZ
?_Empty@?$_Yarn@_W@std@@QBE_NXZ
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z
?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDI@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDI@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDI@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_SDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_UDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QBEHXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAHABV?$ctype@D@2@@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAHABV?$ctype@G@2@@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAHABV?$ctype@_W@2@@Z
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
?_Getptr@_Timevec@std@@QBEPAXXZ
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Index@ios_base@std@@0HA

Sections

.text
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/libs/nss3.dll
.dll windows:6 windows x86 arch:x86

91b2deacd206ef373baa926022d03ae2

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:6a:53:45:5c:c7:00:12:fa:23:ce:7a:80:f8:5e:47
Certificate

Issuer

CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-07-2013 12:00

Not After

22-10-2023 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-04-2021 00:00

Not After

19-06-2024 23:59

Subject

CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b3:41:92:84:b5:a4:64:ac:ab:bf:a1:fb:82:7b:a5:29:eb:2f:21:26:09:e4:51:1d:2f:1d:55:0b:8e:e3:1a:95
Signer

Actual PE Digest

b3:41:92:84:b5:a4:64:ac:ab:bf:a1:fb:82:7b:a5:29:eb:2f:21:26:09:e4:51:1d:2f:1d:55:0b:8e:e3:1a:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mozglue

_HeapAlloc@12
_HeapFree@12
_HeapReAlloc@16
_msize
calloc
free
malloc
realloc
strdup

advapi32

AddAccessAllowedAce
AllocateAndInitializeSid
CopySid
FreeSid
GetLengthSid
GetTokenInformation
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner

wsock32

WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
getpeername
getprotobyname
getprotobynumber
getsockname
getsockopt
htonl
htons
inet_ntoa
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

kernel32

AreFileApisANSI
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateMutexW
CreatePipe
CreateProcessA
CreateSemaphoreA
DebugBreak
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GlobalMemoryStatusEx
HeapCompact
HeapCreate
HeapDestroy
HeapSize
HeapValidate
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MoveFileA
MoveFileW
MultiByteToWideChar
OpenSemaphoreA
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
ResumeThread
SetEndOfFile
SetFilePointer
SetHandleInformation
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile

vcruntime140

__std_type_info_destroy_list
_except_handler3
_except_handler4_common
memchr
memcmp
memcpy
memmove
memset
strchr
strrchr
strstr

api-ms-win-crt-utility-l1-1-0

_byteswap_ulong
_byteswap_ushort
qsort

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_cexit
_configure_narrow_argv
_endthreadex
_errno
_execute_onexit_table
_exit
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
abort
strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_close
_wfopen
_wopen
fclose
feof
fflush
fgets
fopen
fputc
fputs
ftell
fwrite
setvbuf

api-ms-win-crt-environment-l1-1-0

__p__environ
_putenv
getenv

api-ms-win-crt-filesystem-l1-1-0

_access
_waccess
_wstat64i32

api-ms-win-crt-math-l1-1-0

_fdopen
acos
acosh
asin
asinh
atan
atan2
atanh
ceil
cos
cosh
exp
floor
fmod
log
pow
sin
sinh
sqrt
tan
tanh
trunc

api-ms-win-crt-time-l1-1-0

_localtime64_s
_mktime64
_time64
strftime

api-ms-win-crt-multibyte-l1-1-0

_mbsdec
_mbsinc

api-ms-win-crt-string-l1-1-0

_stricmp
isalnum
isalpha
isspace
strcat
strcmp
strcpy
strcspn
strlen
strncat
strncmp
strncpy
strpbrk
tolower
toupper

api-ms-win-crt-convert-l1-1-0

atoi
strtol
strtoul

Exports

Exports

ATOB_AsciiToData
ATOB_AsciiToData_Util
ATOB_ConvertAsciiToItem_Util
BTOA_ConvertItemToAscii_Util
BTOA_DataToAscii
BTOA_DataToAscii_Util
CERT_AddCertToListHead
CERT_AddCertToListTail
CERT_AddExtension
CERT_AddExtensionByOID
CERT_AsciiToName
CERT_CacheOCSPResponseFromSideChannel
CERT_CertChainFromCert
CERT_CertListFromCert
CERT_CertificateRequestTemplate
CERT_CertificateTemplate
CERT_ChangeCertTrust
CERT_CheckCertUsage
CERT_CheckCertValidTimes
CERT_CheckNameSpace
CERT_ClearOCSPCache
CERT_CompareCerts
CERT_CompareName
CERT_ConvertAndDecodeCertificate
CERT_CopyName
CERT_CopyRDN
CERT_CreateCertificate
CERT_CreateCertificateRequest
CERT_CreateSubjectCertList
CERT_CreateValidity
CERT_CrlTemplate
CERT_DecodeAVAValue
CERT_DecodeAltNameExtension
CERT_DecodeAuthInfoAccessExtension
CERT_DecodeAuthKeyID
CERT_DecodeBasicConstraintValue
CERT_DecodeCRLDistributionPoints
CERT_DecodeCertFromPackage
CERT_DecodeCertPackage
CERT_DecodeCertificatePoliciesExtension
CERT_DecodeNameConstraintsExtension
CERT_DecodeOidSequence
CERT_DecodePrivKeyUsagePeriodExtension
CERT_DecodeTrustString
CERT_DecodeUserNotice
CERT_DerNameToAscii
CERT_DestroyCertArray
CERT_DestroyCertList
CERT_DestroyCertificate
CERT_DestroyCertificateList
CERT_DestroyCertificatePoliciesExtension
CERT_DestroyCertificateRequest
CERT_DestroyName
CERT_DestroyOidSequence
CERT_DestroyUserNotice
CERT_DestroyValidity
CERT_DisableOCSPChecking
CERT_DisableOCSPDefaultResponder
CERT_DupCertificate
CERT_EnableOCSPChecking
CERT_EncodeAltNameExtension
CERT_EncodeAndAddBitStrExtension
CERT_EncodeAuthKeyID
CERT_EncodeBasicConstraintValue
CERT_EncodeCRLDistributionPoints
CERT_EncodeCertPoliciesExtension
CERT_EncodeInfoAccessExtension
CERT_EncodeInhibitAnyExtension
CERT_EncodeNameConstraintsExtension
CERT_EncodeNoticeReference
CERT_EncodePolicyConstraintsExtension
CERT_EncodePolicyMappingExtension
CERT_EncodeSubjectKeyID
CERT_EncodeUserNotice
CERT_ExtractPublicKey
CERT_FilterCertListByCANames
CERT_FilterCertListByUsage
CERT_FilterCertListForUserCerts
CERT_FindCertByDERCert
CERT_FindCertByIssuerAndSN
CERT_FindCertByName
CERT_FindCertByNickname
CERT_FindCertByNicknameOrEmailAddr
CERT_FindCertByNicknameOrEmailAddrCX
CERT_FindCertExtension
CERT_FindCertIssuer
CERT_FindKeyUsageExtension
CERT_FindUserCertByUsage
CERT_FindUserCertsByUsage
CERT_FinishCertificateRequestAttributes
CERT_FinishExtensions
CERT_ForcePostMethodForOCSP
CERT_FreeNicknames
CERT_GenTime2FormattedAscii_Util
CERT_GetCertChainFromCert
CERT_GetCertEmailAddress
CERT_GetCertIsPerm
CERT_GetCertKeyType
CERT_GetCertTimes
CERT_GetCertTrust
CERT_GetCertificateDer
CERT_GetCertificateRequestExtensions
CERT_GetCommonName
CERT_GetConstrainedCertificateNames
CERT_GetCountryName
CERT_GetDefaultCertDB
CERT_GetFirstEmailAddress
CERT_GetGeneralNameTypeFromString
CERT_GetImposedNameConstraints
CERT_GetLocalityName
CERT_GetNextEmailAddress
CERT_GetNextGeneralName
CERT_GetNextNameConstraint
CERT_GetOCSPAuthorityInfoAccessLocation
CERT_GetOidString
CERT_GetOrgName
CERT_GetOrgUnitName
CERT_GetStateName
CERT_Hexify
CERT_ImportCerts
CERT_IsCACert
CERT_IsUserCert
CERT_MakeCANickname
CERT_MergeExtensions
CERT_NameTemplate
CERT_NameToAscii
CERT_NewCertList
CERT_NewTempCertificate
CERT_NicknameStringsFromCertList
CERT_OCSPCacheSettings
CERT_RFC1485_EscapeAndQuote
CERT_RemoveCertListNode
CERT_SaveSMimeProfile
CERT_SequenceOfCertExtensionTemplate
CERT_SetOCSPFailureMode
CERT_SetOCSPTimeout
CERT_SignedCrlTemplate
CERT_SignedDataTemplate
CERT_StartCertExtensions
CERT_StartCertificateRequestAttributes
CERT_SubjectPublicKeyInfoTemplate
CERT_TimeChoiceTemplate
CERT_VerifyCertificate
CERT_VerifySignedDataWithPublicKeyInfo
DER_AsciiToTime_Util
DER_DecodeTimeChoice
DER_DecodeTimeChoice_Util
DER_Encode
DER_EncodeTimeChoice_Util
DER_Encode_Util
DER_GeneralizedTimeToTime
DER_GeneralizedTimeToTime_Util
DER_GetInteger
DER_GetInteger_Util
DER_SetUInteger
DER_UTCTimeToTime_Util
DSAU_DecodeDerSigToLen
DSAU_EncodeDerSigWithLen
DTLS_GetHandshakeTimeout
DTLS_ImportFD
GetExecutionEnvironment
HASH_Begin
HASH_Create
HASH_Destroy
HASH_End
HASH_GetHashObject
HASH_GetHashOidTagByHashType
HASH_GetHashTypeByOidTag
HASH_GetType
HASH_HashBuf
HASH_ResultLenByOidTag
HASH_Update
NSSBase64_EncodeItem_Util
NSSSMIME_GetVersion
NSSSSL_GetVersion
NSSUTIL_AddNSSFlagToModuleSpec
NSSUTIL_ArgDecodeNumber
NSSUTIL_ArgFetchValue
NSSUTIL_ArgGetLabel
NSSUTIL_ArgGetParamValue
NSSUTIL_ArgHasFlag
NSSUTIL_ArgIsBlank
NSSUTIL_ArgParseCipherFlags
NSSUTIL_ArgParseModuleSpec
NSSUTIL_ArgParseSlotFlags
NSSUTIL_ArgParseSlotInfo
NSSUTIL_ArgReadLong
NSSUTIL_ArgSkipParameter
NSSUTIL_ArgStrip
NSSUTIL_DoModuleDBFunction
NSSUTIL_GetVersion
NSSUTIL_MkModuleSpec
NSSUTIL_MkNSSString
NSSUTIL_MkSlotString
NSSUTIL_Quote
NSS_CMSContentInfo_GetContent
NSS_CMSContentInfo_GetContentTypeTag
NSS_CMSContentInfo_SetContent_SignedData
NSS_CMSEncoder_Finish
NSS_CMSEncoder_Start
NSS_CMSMessage_ContentLevel
NSS_CMSMessage_Create
NSS_CMSMessage_CreateFromDER
NSS_CMSMessage_Destroy
NSS_CMSMessage_GetContentInfo
NSS_CMSMessage_IsSigned
NSS_CMSSignedData_AddCertificate
NSS_CMSSignedData_CreateCertsOnly
NSS_CMSSignedData_Destroy
NSS_CMSSignedData_GetSignerInfo
NSS_CMSSignedData_SignerInfoCount
NSS_CMSSignerInfo_GetSigningCertificate
NSS_CMSSignerInfo_Verify
NSS_FindCertKEAType
NSS_GetAlgorithmPolicy
NSS_GetVersion
NSS_Get_CERT_CertificateRequestTemplate
NSS_Get_CERT_CertificateTemplate
NSS_Get_CERT_CrlTemplate
NSS_Get_CERT_NameTemplate
NSS_Get_CERT_SequenceOfCertExtensionTemplate
NSS_Get_CERT_SignedCrlTemplate
NSS_Get_CERT_SignedDataTemplate
NSS_Get_CERT_SubjectPublicKeyInfoTemplate
NSS_Get_CERT_TimeChoiceTemplate
NSS_Get_SECKEY_EncryptedPrivateKeyInfoTemplate
NSS_Get_SECKEY_RSAPSSParamsTemplate
NSS_Get_SECOID_AlgorithmIDTemplate
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SEC_BMPStringTemplate
NSS_Get_SEC_BitStringTemplate
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_BooleanTemplate_Util
NSS_Get_SEC_GeneralizedTimeTemplate_Util
NSS_Get_SEC_IA5StringTemplate
NSS_Get_SEC_IA5StringTemplate_Util
NSS_Get_SEC_IntegerTemplate
NSS_Get_SEC_IntegerTemplate_Util
NSS_Get_SEC_NullTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
NSS_Get_SEC_OctetStringTemplate
NSS_Get_SEC_OctetStringTemplate_Util
NSS_Get_SEC_SignedCertificateTemplate
NSS_Get_SEC_UTF8StringTemplate
NSS_Get_SEC_UTF8StringTemplate_Util
NSS_Init
NSS_InitContext
NSS_InitReadWrite
NSS_InitWithMerge
NSS_Initialize
NSS_IsInitialized
NSS_NoDB_Init
NSS_OptionGet
NSS_OptionSet
NSS_SMIMESignerInfo_SaveSMIMEProfile
NSS_SMIMEUtil_FindBulkAlgForRecipients
NSS_SecureMemcmp
NSS_SecureMemcmpZero
NSS_SetAlgorithmPolicy
NSS_SetDomesticPolicy
NSS_Shutdown
NSS_ShutdownContext
NSS_VersionCheck
PK11SDR_Decrypt
PK11SDR_Encrypt
PK11_AEADOp
PK11_AlgtagToMechanism
PK11_Authenticate
PK11_ChangePW
PK11_CheckUserPassword
PK11_CipherOp
PK11_ConfigurePKCS11
PK11_ConvertSessionSymKeyToTokenSymKey
PK11_CreateContextBySymKey
PK11_CreateDigestContext
PK11_CreateGenericObject
PK11_CreateMergeLog
PK11_CreatePBEV2AlgorithmID
PK11_DEREncodePublicKey
PK11_Decrypt
PK11_DeleteTokenCertAndKey
PK11_DeleteTokenPrivateKey
PK11_DeleteTokenPublicKey
PK11_DeleteTokenSymKey
PK11_Derive
PK11_DeriveWithFlags
PK11_DeriveWithTemplate
PK11_DestroyContext
PK11_DestroyGenericObject
PK11_DestroyMergeLog
PK11_DestroyObject
PK11_DestroyTokenObject
PK11_DigestBegin
PK11_DigestFinal
PK11_DigestOp
PK11_DoesMechanism
PK11_Encrypt
PK11_ExportDERPrivateKeyInfo
PK11_ExportEncryptedPrivKeyInfo
PK11_ExtractKeyValue
PK11_FindCertFromNickname
PK11_FindCertInSlot
PK11_FindCertsFromEmailAddress
PK11_FindCertsFromNickname
PK11_FindEncodedCertInSlot
PK11_FindKeyByAnyCert
PK11_FindKeyByDERCert
PK11_FindKeyByKeyID
PK11_FindRawCertsWithSubject
PK11_FindSlotByName
PK11_FindSlotsByNames
PK11_FreeSlot
PK11_FreeSlotList
PK11_FreeSlotListElement
PK11_FreeSymKey
PK11_GenerateKeyPair
PK11_GenerateKeyPairWithFlags
PK11_GenerateKeyPairWithOpFlags
PK11_GenerateRandom
PK11_GenerateRandomOnSlot
PK11_GetAllSlotsForCert
PK11_GetAllTokens
PK11_GetBestSlot
PK11_GetBestSlotMultiple
PK11_GetBlockSize
PK11_GetCertFromPrivateKey
PK11_GetCertsMatchingPrivateKey
PK11_GetDefaultArray
PK11_GetDefaultFlags
PK11_GetDisabledReason
PK11_GetFirstSafe
PK11_GetIVLength
PK11_GetInternalKeySlot
PK11_GetInternalSlot
PK11_GetKeyData
PK11_GetKeyGen
PK11_GetLowLevelKeyIDForPrivateKey
PK11_GetMechanism
PK11_GetModInfo
PK11_GetModuleURI
PK11_GetNextSafe
PK11_GetNextSymKey
PK11_GetPadMechanism
PK11_GetPrivateKeyNickname
PK11_GetPrivateModulusLen
PK11_GetSlotFromPrivateKey
PK11_GetSlotID
PK11_GetSlotInfo
PK11_GetSlotName
PK11_GetSlotSeries
PK11_GetSymKeyNickname
PK11_GetTokenInfo
PK11_GetTokenName
PK11_GetTokenURI
PK11_HPKE_Deserialize
PK11_HPKE_DestroyContext
PK11_HPKE_ExportSecret
PK11_HPKE_GetEncapPubKey
PK11_HPKE_NewContext
PK11_HPKE_Open
PK11_HPKE_Seal
PK11_HPKE_Serialize
PK11_HPKE_SetupR
PK11_HPKE_SetupS
PK11_HPKE_ValidateParameters
PK11_HasAttributeSet
PK11_HasRootCerts
PK11_HashBuf
PK11_ImportCRL
PK11_ImportCert
PK11_ImportCertForKey
PK11_ImportDERPrivateKeyInfoAndReturnKey
PK11_ImportDataKey
PK11_ImportEncryptedPrivateKeyInfoAndReturnKey
PK11_ImportPublicKey
PK11_ImportSymKey
PK11_InitPin
PK11_IsDisabled
PK11_IsFIPS
PK11_IsFriendly
PK11_IsHW
PK11_IsInternal
PK11_IsInternalKeySlot
PK11_IsLoggedIn
PK11_IsPresent
PK11_IsReadOnly
PK11_IsRemovable
PK11_KeyForCertExists
PK11_KeyGen
PK11_KeyGenWithTemplate
PK11_ListCerts
PK11_ListCertsInSlot
PK11_ListFixedKeysInSlot
PK11_ListPrivKeysInSlot
PK11_ListPrivateKeysInSlot
PK11_LoadPrivKey
PK11_Logout
PK11_LogoutAll
PK11_MakeIDFromPubKey
PK11_MapSignKeyType
PK11_MechanismToAlgtag
PK11_MergeTokens
PK11_NeedLogin
PK11_NeedUserInit
PK11_PBEKeyGen
PK11_ParamFromIV
PK11_PrivDecrypt
PK11_PrivDecryptPKCS1
PK11_ProtectedAuthenticationPath
PK11_PubDeriveWithKDF
PK11_PubEncrypt
PK11_PubEncryptPKCS1
PK11_PubUnwrapSymKey
PK11_PubWrapSymKey
PK11_RandomUpdate
PK11_ReadRawAttribute
PK11_ReferenceSlot
PK11_ReferenceSymKey
PK11_ResetToken
PK11_SetPasswordFunc
PK11_SetSymKeyNickname
PK11_Sign
PK11_SignWithMechanism
PK11_SignatureLen
PK11_TokenKeyGenWithFlags
PK11_UnwrapPrivKey
PK11_UnwrapSymKey
PK11_UpdateSlotAttribute
PK11_UserDisableSlot
PK11_UserEnableSlot
PK11_Verify
PK11_VerifyWithMechanism
PK11_WrapPrivKey
PK11_WrapSymKey
PL_ArenaAllocate
PL_ArenaFinish
PL_ArenaGrow
PL_ArenaRelease
PL_Base64Decode
PL_Base64Encode
PL_ClearArenaPool
PL_CompactArenaPool
PL_CompareStrings
PL_CompareValues
PL_CreateLongOptState
PL_CreateOptState
PL_DestroyOptState
PL_FPrintError
PL_FinishArenaPool
PL_FreeArenaPool
PL_GetNextOpt
PL_HashString
PL_HashTableAdd
PL_HashTableDestroy
PL_HashTableDump
PL_HashTableEnumerateEntries
PL_HashTableLookup
PL_HashTableLookupConst
PL_HashTableRawAdd
PL_HashTableRawLookup
PL_HashTableRawLookupConst
PL_HashTableRawRemove
PL_HashTableRemove
PL_InitArenaPool
PL_NewHashTable
PL_PrintError
PL_SizeOfArenaPoolExcludingPool
PL_strcasecmp
PL_strcaserstr
PL_strcasestr
PL_strcat
PL_strcatn
PL_strchr
PL_strcmp
PL_strcpy
PL_strdup
PL_strfree
PL_strlen
PL_strncasecmp
PL_strncaserstr
PL_strncasestr
PL_strncat
PL_strnchr
PL_strncmp
PL_strncpy
PL_strncpyz
PL_strndup
PL_strnlen
PL_strnpbrk
PL_strnprbrk
PL_strnrchr
PL_strnrstr
PL_strnstr
PL_strpbrk
PL_strprbrk
PL_strrchr
PL_strrstr
PL_strstr
PL_strtok_r

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/libs/softokn3.dll
.dll windows:6 windows x86 arch:x86

32ef7516974ac0c43943c0635266c6fd

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:6a:53:45:5c:c7:00:12:fa:23:ce:7a:80:f8:5e:47
Certificate

Issuer

CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-07-2013 12:00

Not After

22-10-2023 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-04-2021 00:00

Not After

19-06-2024 23:59

Subject

CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1e:92:f9:9c:43:75:2f:f6:9a:73:cd:1a:49:b4:e9:0e:20:f5:38:f3:9f:a8:be:ff:58:39:ba:41:a6:68:36:97
Signer

Actual PE Digest

1e:92:f9:9c:43:75:2f:f6:9a:73:cd:1a:49:b4:e9:0e:20:f5:38:f3:9f:a8:be:ff:58:39:ba:41:a6:68:36:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

nss3

DER_Encode_Util
DER_GetInteger_Util
DER_SetUInteger
NSSUTIL_ArgDecodeNumber
NSSUTIL_ArgFetchValue
NSSUTIL_ArgGetLabel
NSSUTIL_ArgHasFlag
NSSUTIL_ArgIsBlank
NSSUTIL_ArgSkipParameter
NSSUTIL_ArgStrip
NSSUTIL_DoModuleDBFunction
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
NSS_Get_SEC_OctetStringTemplate_Util
NSS_SecureMemcmp
PL_CompareValues
PL_HashTableAdd
PL_HashTableDestroy
PL_HashTableEnumerateEntries
PL_HashTableLookup
PL_HashTableLookupConst
PL_HashTableRemove
PL_NewHashTable
PL_strcasecmp
PL_strncasecmp
PORT_Alloc_Util
PORT_ArenaAlloc_Util
PORT_ArenaGrow_Util
PORT_ArenaZAlloc_Util
PORT_FreeArena_Util
PORT_Free_Util
PORT_GetError_Util
PORT_NewArena_Util
PORT_Realloc_Util
PORT_SetError_Util
PORT_Strdup_Util
PORT_ZAlloc_Util
PORT_ZFree_Util
PR_Access
PR_CallOnce
PR_DestroyLock
PR_DestroyMonitor
PR_EnterMonitor
PR_ExitMonitor
PR_FindFunctionSymbol
PR_Free
PR_GetCurrentThread
PR_GetDirectorySeparator
PR_GetEnv
PR_GetEnvSecure
PR_GetLibraryFilePathname
PR_IntervalNow
PR_LoadLibraryWithFlags
PR_Lock
PR_MillisecondsToInterval
PR_NewLock
PR_NewMonitor
PR_Now
PR_SecondsToInterval
PR_Sleep
PR_UnloadLibrary
PR_Unlock
PR_smprintf
PR_smprintf_free
PR_snprintf
SECITEM_AllocItem_Util
SECITEM_CompareItem_Util
SECITEM_CopyItem_Util
SECITEM_DupItem_Util
SECITEM_FreeItem_Util
SECITEM_HashCompare
SECITEM_ItemsAreEqual_Util
SECITEM_ZfreeItem_Util
SECOID_CopyAlgorithmID_Util
SECOID_DestroyAlgorithmID_Util
SECOID_FindOIDByMechanism
SECOID_GetAlgorithmTag_Util
SECOID_Init
SECOID_SetAlgorithmID_Util
SECOID_Shutdown
SEC_ASN1DecodeItem_Util
SEC_ASN1EncodeInteger_Util
SEC_ASN1EncodeItem_Util
SEC_QuickDERDecodeItem_Util
SGN_CreateDigestInfo_Util
SGN_DestroyDigestInfo_Util
UTIL_SetForkState
_NSSUTIL_Access
_NSSUTIL_EvaluateConfigDir
_NSSUTIL_UTF8ToWide
_SGN_VerifyPKCS1DigestInfo
sqlite3_bind_blob
sqlite3_bind_int
sqlite3_bind_text
sqlite3_busy_timeout
sqlite3_close
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_int
sqlite3_column_text
sqlite3_exec
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_mprintf
sqlite3_open_v2
sqlite3_prepare_v2
sqlite3_reset
sqlite3_step

kernel32

DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTempPathA
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memcmp
memcpy
memset
strrchr

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-filesystem-l1-1-0

_wchmod

api-ms-win-crt-convert-l1-1-0

atoi
strtoul

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

islower
isupper
strcmp
strcpy
strlen

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

C_GetFunctionList
C_GetInterface
C_GetInterfaceList
FC_GetFunctionList
FC_GetInterface
FC_GetInterfaceList
NSC_GetFunctionList
NSC_GetInterface
NSC_GetInterfaceList
NSC_ModuleDBFunc

Sections

.text
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/libs/sqlite3.dll
.dll windows:4 windows x86 arch:x86

e727d00364cd87d72f56e7ba919d1d40

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsGetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile

msvcrt

__dllonexit
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_iob
_lock
_onexit
localtime
calloc
cosh
fprintf
free
fwrite
malloc
memcmp
memmove
qsort
realloc
sinh
strcmp
strcspn
strlen
strncmp
strrchr
_unlock
abort
acos
asin
atan
tan
tanh
vfprintf

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_preupdate_blobwrite
sqlite3_preupdate_count
sqlite3_preupdate_depth
sqlite3_preupdate_hook
sqlite3_preupdate_new
sqlite3_preupdate_old
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
sqlite3changegroup_add
sqlite3changegroup_add_strm
sqlite3changegroup_delete
sqlite3changegroup_new
sqlite3changegroup_output
sqlite3changegroup_output_strm
sqlite3changeset_apply
sqlite3changeset_apply_strm
sqlite3changeset_apply_v2
sqlite3changeset_apply_v2_strm
sqlite3changeset_concat
sqlite3changeset_concat_strm
sqlite3changeset_conflict
sqlite3changeset_finalize
sqlite3changeset_fk_conflicts
sqlite3changeset_invert
sqlite3changeset_invert_strm
sqlite3changeset_new
sqlite3changeset_next
sqlite3changeset_old
sqlite3changeset_op
sqlite3changeset_pk
sqlite3changeset_start
sqlite3changeset_start_strm
sqlite3changeset_start_v2
sqlite3changeset_start_v2_strm
sqlite3rebaser_configure
sqlite3rebaser_create
sqlite3rebaser_delete
sqlite3rebaser_rebase
sqlite3rebaser_rebase_strm
sqlite3session_attach
sqlite3session_changeset
sqlite3session_changeset_size
sqlite3session_changeset_strm
sqlite3session_config
sqlite3session_create
sqlite3session_delete
sqlite3session_diff
sqlite3session_enable
sqlite3session_indirect
sqlite3session_isempty
sqlite3session_memory_used
sqlite3session_object_config
sqlite3session_patchset
sqlite3session_patchset_strm
sqlite3session_table_filter

Sections

.text
Size: 713KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 803B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/libs/vcruntime140.dll
.dll windows:6 windows x86 arch:x86

6a84b7445ccacd5d29ac27de2745f356

Code Sign

33:00:00:00:f7:dd:bf:34:e0:e4:d5:82:60:00:00:00:00:00:f7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-08-2018 20:20

Not After

23-11-2019 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:d7:b8:4e:f1:a7:57:48:17:cb:c3:93:a2:67:c3:2e:46:4a:27:4b:cb:08:bd:62:31:d4:f6:60:f8:b5:17:73
Signer

Actual PE Digest

21:d7:b8:4e:f1:a7:57:48:17:cb:c3:93:a2:67:c3:2e:46:4a:27:4b:cb:08:bd:62:31:d4:f6:60:f8:b5:17:73

Digest Algorithm

sha256

PE Digest Matches

true

ac:aa:0f:ae:ad:a2:e3:d8:31:28:34:f8:a0:ec:65:3b:03:4b:7f:b8
Signer

Actual PE Digest

ac:aa:0f:ae:ad:a2:e3:d8:31:28:34:f8:a0:ec:65:3b:03:4b:7f:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

api-ms-win-crt-runtime-l1-1-0

abort
terminate

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

DeleteCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
FreeLibrary
RtlUnwind
VirtualQuery
EncodePointer
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsFree

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_purecall
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_purecall_handler
_set_se_translator
_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/logs/downloads/index.php
Silver RAT V1.0/logs/index.php
Silver RAT V1.0/modules/TelegramBot.php
Silver RAT V1.0/modules/UserAgent.php
.ps1
Silver RAT V1.0/modules/index.php
Silver RAT V1.0/mscorlib.dll
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.data
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 16.2MB - Virtual size: 16.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Silver RAT V1.0/stats/dist/css/bootstrap.min.css
Silver RAT V1.0/stats/dist/css/daterangepicker.css
Silver RAT V1.0/stats/dist/css/font-awesome.min.css
Silver RAT V1.0/stats/dist/css/index.php
Silver RAT V1.0/stats/dist/css/select2.min.css
Silver RAT V1.0/stats/dist/css/style.css
Silver RAT V1.0/stats/dist/fonts/fontawesome/fontawesome-webfont5b62.eot
Silver RAT V1.0/stats/dist/fonts/fontawesome/fontawesome-webfont5b62.svg
.xml
Silver RAT V1.0/stats/dist/fonts/fontawesome/fontawesome-webfont5b62.ttf
Silver RAT V1.0/stats/dist/fonts/fontawesome/fontawesome-webfont5b62.woff
Silver RAT V1.0/stats/dist/fonts/fontawesome/fontawesome-webfont5b62.woff2
Silver RAT V1.0/stats/dist/fonts/fontawesome/fontawesome-webfontd41d.eot
Silver RAT V1.0/stats/dist/fonts/fontawesome/index.php
Silver RAT V1.0/stats/dist/fonts/index.php
Silver RAT V1.0/stats/dist/img/flags/ad.png
.png
Silver RAT V1.0/stats/dist/img/flags/ae.png
.png
Silver RAT V1.0/stats/dist/img/flags/af.png
.png
Silver RAT V1.0/stats/dist/img/flags/ag.png
.png
Silver RAT V1.0/stats/dist/img/flags/ai.png
.png
Silver RAT V1.0/stats/dist/img/flags/al.png
.png
Silver RAT V1.0/stats/dist/img/flags/am.png
.png
Silver RAT V1.0/stats/dist/img/flags/ao.png
.png
Silver RAT V1.0/stats/dist/img/flags/aq.png
.png
Silver RAT V1.0/stats/dist/img/flags/ar.png
.png
Silver RAT V1.0/stats/dist/img/flags/as.png
.png
Silver RAT V1.0/stats/dist/img/flags/at.png
.png
Silver RAT V1.0/stats/dist/img/flags/au.png
.png
Silver RAT V1.0/stats/dist/img/flags/aw.png
.png
Silver RAT V1.0/stats/dist/img/flags/ax.png
.png
Silver RAT V1.0/stats/dist/img/flags/az.png
.png
Silver RAT V1.0/stats/dist/img/flags/ba.png
.png
Silver RAT V1.0/stats/dist/img/flags/bb.png
.png
Silver RAT V1.0/stats/dist/img/flags/bd.png
.png
Silver RAT V1.0/stats/dist/img/flags/be.png
.png
Silver RAT V1.0/stats/dist/img/flags/bf.png
.png
Silver RAT V1.0/stats/dist/img/flags/bg.png
.png
Silver RAT V1.0/stats/dist/img/flags/bh.png
.png
Silver RAT V1.0/stats/dist/img/flags/bi.png
.png
Silver RAT V1.0/stats/dist/img/flags/bj.png
.png
Silver RAT V1.0/stats/dist/img/flags/bl.png
.png
Silver RAT V1.0/stats/dist/img/flags/bm.png
.png
Silver RAT V1.0/stats/dist/img/flags/bn.png
.png
Silver RAT V1.0/stats/dist/img/flags/bo.png
.png
Silver RAT V1.0/stats/dist/img/flags/bq.png
.png
Silver RAT V1.0/stats/dist/img/flags/br.png
.png
Silver RAT V1.0/stats/dist/img/flags/bs.png
.png
Silver RAT V1.0/stats/dist/img/flags/bt.png
.png
Silver RAT V1.0/stats/dist/img/flags/bv.png
.png
Silver RAT V1.0/stats/dist/img/flags/bw.png
.png
Silver RAT V1.0/stats/dist/img/flags/by.png
.png
Silver RAT V1.0/stats/dist/img/flags/bz.png
.png
Silver RAT V1.0/stats/dist/img/flags/ca.png
.png
Silver RAT V1.0/stats/dist/img/flags/cc.png
.png
Silver RAT V1.0/stats/dist/img/flags/cd.png
.png
Silver RAT V1.0/stats/dist/img/flags/cf.png
.png
Silver RAT V1.0/stats/dist/img/flags/cg.png
.png
Silver RAT V1.0/stats/dist/img/flags/ch.png
.png
Silver RAT V1.0/stats/dist/img/flags/ci.png
.png
Silver RAT V1.0/stats/dist/img/flags/ck.png
.png
Silver RAT V1.0/stats/dist/img/flags/cl.png
.png
Silver RAT V1.0/stats/dist/img/flags/cm.png
.png
Silver RAT V1.0/stats/dist/img/flags/cn.png
.png
Silver RAT V1.0/stats/dist/img/flags/co.png
.png
Silver RAT V1.0/stats/dist/img/flags/cr.png
.png
Silver RAT V1.0/stats/dist/img/flags/cu.png
.png
Silver RAT V1.0/stats/dist/img/flags/cv.png
.png
Silver RAT V1.0/stats/dist/img/flags/cw.png
.png
Silver RAT V1.0/stats/dist/img/flags/cx.png
.png
Silver RAT V1.0/stats/dist/img/flags/cy.png
.png
Silver RAT V1.0/stats/dist/img/flags/cz.png
.png
Silver RAT V1.0/stats/dist/img/flags/de.png
.png
Silver RAT V1.0/stats/dist/img/flags/dj.png
.png
Silver RAT V1.0/stats/dist/img/flags/dk.png
.png
Silver RAT V1.0/stats/dist/img/flags/dm.png
.png
Silver RAT V1.0/stats/dist/img/flags/do.png
.png
Silver RAT V1.0/stats/dist/img/flags/dz.png
.png
Silver RAT V1.0/stats/dist/img/flags/ec.png
.png
Silver RAT V1.0/stats/dist/img/flags/ee.png
.png
Silver RAT V1.0/stats/dist/img/flags/eg.png
.png
Silver RAT V1.0/stats/dist/img/flags/eh.png
.png
Silver RAT V1.0/stats/dist/img/flags/er.png
.png
Silver RAT V1.0/stats/dist/img/flags/es.png
.png
Silver RAT V1.0/stats/dist/img/flags/et.png
.png
Silver RAT V1.0/stats/dist/img/flags/fi.png
.png
Silver RAT V1.0/stats/dist/img/flags/fj.png
.png
Silver RAT V1.0/stats/dist/img/flags/fk.png
.png
Silver RAT V1.0/stats/dist/img/flags/fm.png
.png
Silver RAT V1.0/stats/dist/img/flags/fo.png
.png
Silver RAT V1.0/stats/dist/img/flags/fr.png
.png
Silver RAT V1.0/stats/dist/img/flags/ga.png
.png
Silver RAT V1.0/stats/dist/img/flags/gb-eng.png
.png
Silver RAT V1.0/stats/dist/img/flags/gb-nir.png
.png
Silver RAT V1.0/stats/dist/img/flags/gb-sct.png
.png
Silver RAT V1.0/stats/dist/img/flags/gb-wls.png
.png
Silver RAT V1.0/stats/dist/img/flags/gb.png
.png
Silver RAT V1.0/stats/dist/img/flags/gd.png
.png
Silver RAT V1.0/stats/dist/img/flags/ge.png
.png
Silver RAT V1.0/stats/dist/img/flags/gf.png
.png
Silver RAT V1.0/stats/dist/img/flags/gg.png
.png
Silver RAT V1.0/stats/dist/img/flags/gh.png
.png
Silver RAT V1.0/stats/dist/img/flags/gi.png
.png
Silver RAT V1.0/stats/dist/img/flags/gl.png
.png
Silver RAT V1.0/stats/dist/img/flags/gm.png
.png
Silver RAT V1.0/stats/dist/img/flags/gn.png
.png
Silver RAT V1.0/stats/dist/img/flags/gp.png
.png
Silver RAT V1.0/stats/dist/img/flags/gq.png
.png
Silver RAT V1.0/stats/dist/img/flags/gr.png
.png
Silver RAT V1.0/stats/dist/img/flags/gs.png
.png
Silver RAT V1.0/stats/dist/img/flags/gt.png
.png
Silver RAT V1.0/stats/dist/img/flags/gu.png
.png
Silver RAT V1.0/stats/dist/img/flags/gw.png
.png
Silver RAT V1.0/stats/dist/img/flags/gy.png
.png
Silver RAT V1.0/stats/dist/img/flags/hk.png
.png
Silver RAT V1.0/stats/dist/img/flags/hm.png
.png
Silver RAT V1.0/stats/dist/img/flags/hn.png
.png
Silver RAT V1.0/stats/dist/img/flags/hr.png
.png
Silver RAT V1.0/stats/dist/img/flags/ht.png
.png
Silver RAT V1.0/stats/dist/img/flags/hu.png
.png
Silver RAT V1.0/stats/dist/img/flags/id.png
.png
Silver RAT V1.0/stats/dist/img/flags/ie.png
.png
Silver RAT V1.0/stats/dist/img/flags/il.png
.png
Silver RAT V1.0/stats/dist/img/flags/im.png
.png
Silver RAT V1.0/stats/dist/img/flags/in.png
.png
Silver RAT V1.0/stats/dist/img/flags/index.php
Silver RAT V1.0/stats/dist/img/flags/io.png
.png
Silver RAT V1.0/stats/dist/img/flags/iq.png
.png
Silver RAT V1.0/stats/dist/img/flags/ir.png
.png
Silver RAT V1.0/stats/dist/img/flags/is.png
.png
Silver RAT V1.0/stats/dist/img/flags/it.png
.png
Silver RAT V1.0/stats/dist/img/flags/je.png
.png
Silver RAT V1.0/stats/dist/img/flags/jm.png
.png
Silver RAT V1.0/stats/dist/img/flags/jo.png
.png
Silver RAT V1.0/stats/dist/img/flags/jp.png
.png
Silver RAT V1.0/stats/dist/img/flags/ke.png
.png
Silver RAT V1.0/stats/dist/img/flags/kg.png
.png
Silver RAT V1.0/stats/dist/img/flags/kh.png
.png
Silver RAT V1.0/stats/dist/img/flags/ki.png
.png
Silver RAT V1.0/stats/dist/img/flags/km.png
.png
Silver RAT V1.0/stats/dist/img/flags/kn.png
.png
Silver RAT V1.0/stats/dist/img/flags/kp.png
.png
Silver RAT V1.0/stats/dist/img/flags/kr.png
.png
Silver RAT V1.0/stats/dist/img/flags/kw.png
.png
Silver RAT V1.0/stats/dist/img/flags/ky.png
.png
Silver RAT V1.0/stats/dist/img/flags/kz.png
.png
Silver RAT V1.0/stats/dist/img/flags/la.png
.png
Silver RAT V1.0/stats/dist/img/flags/lb.png
.png
Silver RAT V1.0/stats/dist/img/flags/lc.png
.png
Silver RAT V1.0/stats/dist/img/flags/li.png
.png
Silver RAT V1.0/stats/dist/img/flags/lk.png
.png
Silver RAT V1.0/stats/dist/img/flags/lr.png
.png
Silver RAT V1.0/stats/dist/img/flags/ls.png
.png
Silver RAT V1.0/stats/dist/img/flags/lt.png
.png
Silver RAT V1.0/stats/dist/img/flags/lu.png
.png
Silver RAT V1.0/stats/dist/img/flags/lv.png
.png
Silver RAT V1.0/stats/dist/img/flags/ly.png
.png
Silver RAT V1.0/stats/dist/img/flags/ma.png
.png
Silver RAT V1.0/stats/dist/img/flags/mc.png
.png
Silver RAT V1.0/stats/dist/img/flags/md.png
.png
Silver RAT V1.0/stats/dist/img/flags/me.png
.png
Silver RAT V1.0/stats/dist/img/flags/mf.png
.png
Silver RAT V1.0/stats/dist/img/flags/mg.png
.png
Silver RAT V1.0/stats/dist/img/flags/mh.png
.png
Silver RAT V1.0/stats/dist/img/flags/mk.png
.png
Silver RAT V1.0/stats/dist/img/flags/ml.png
.png
Silver RAT V1.0/stats/dist/img/flags/mm.png
.png
Silver RAT V1.0/stats/dist/img/flags/mn.png
.png
Silver RAT V1.0/stats/dist/img/flags/mo.png
.png
Silver RAT V1.0/stats/dist/img/flags/mp.png
.png
Silver RAT V1.0/stats/dist/img/flags/mq.png
.png
Silver RAT V1.0/stats/dist/img/flags/mr.png
.png
Silver RAT V1.0/stats/dist/img/flags/ms.png
.png
Silver RAT V1.0/stats/dist/img/flags/mt.png
.png
Silver RAT V1.0/stats/dist/img/flags/mu.png
.png
Silver RAT V1.0/stats/dist/img/flags/mv.png
.png
Silver RAT V1.0/stats/dist/img/flags/mw.png
.png
Silver RAT V1.0/stats/dist/img/flags/mx.png
.png
Silver RAT V1.0/stats/dist/img/flags/my.png
.png
Silver RAT V1.0/stats/dist/img/flags/mz.png
.png
Silver RAT V1.0/stats/dist/img/flags/na.png
.png
Silver RAT V1.0/stats/dist/img/flags/nc.png
.png
Silver RAT V1.0/stats/dist/img/flags/ne.png
.png
Silver RAT V1.0/stats/dist/img/flags/nf.png
.png
Silver RAT V1.0/stats/dist/img/flags/ng.png
.png
Silver RAT V1.0/stats/dist/img/flags/ni.png
.png
Silver RAT V1.0/stats/dist/img/flags/nl.png
.png
Silver RAT V1.0/stats/dist/img/flags/no.png
.png
Silver RAT V1.0/stats/dist/img/flags/np.png
.png
Silver RAT V1.0/stats/dist/img/flags/nr.png
.png
Silver RAT V1.0/stats/dist/img/flags/nu.png
.png
Silver RAT V1.0/stats/dist/img/flags/nz.png
.png
Silver RAT V1.0/stats/dist/img/flags/om.png
.png
Silver RAT V1.0/stats/dist/img/flags/pa.png
.png
Silver RAT V1.0/stats/dist/img/flags/pe.png
.png
Silver RAT V1.0/stats/dist/img/flags/pf.png
.png
Silver RAT V1.0/stats/dist/img/flags/pg.png
.png
Silver RAT V1.0/stats/dist/img/flags/ph.png
.png
Silver RAT V1.0/stats/dist/img/flags/pk.png
.png
Silver RAT V1.0/stats/dist/img/flags/pl.png
.png
Silver RAT V1.0/stats/dist/img/flags/pm.png
.png
Silver RAT V1.0/stats/dist/img/flags/pn.png
.png
Silver RAT V1.0/stats/dist/img/flags/pr.png
.png
Silver RAT V1.0/stats/dist/img/flags/ps.png
.png
Silver RAT V1.0/stats/dist/img/flags/pt.png
.png
Silver RAT V1.0/stats/dist/img/flags/pw.png
.png
Silver RAT V1.0/stats/dist/img/flags/py.png
.png
Silver RAT V1.0/stats/dist/img/flags/qa.png
.png
Silver RAT V1.0/stats/dist/img/flags/re.png
.png
Silver RAT V1.0/stats/dist/img/flags/ro.png
.png
Silver RAT V1.0/stats/dist/img/flags/rs.png
.png
Silver RAT V1.0/stats/dist/img/flags/ru.png
.png
Silver RAT V1.0/stats/dist/img/flags/rw.png
.png
Silver RAT V1.0/stats/dist/img/flags/sa.png
.png
Silver RAT V1.0/stats/dist/img/flags/sb.png
.png
Silver RAT V1.0/stats/dist/img/flags/sc.png
.png
Silver RAT V1.0/stats/dist/img/flags/sd.png
.png
Silver RAT V1.0/stats/dist/img/flags/se.png
.png
Silver RAT V1.0/stats/dist/img/flags/sg.png
.png
Silver RAT V1.0/stats/dist/img/flags/sh.png
.png
Silver RAT V1.0/stats/dist/img/flags/si.png
.png
Silver RAT V1.0/stats/dist/img/flags/sj.png
.png
Silver RAT V1.0/stats/dist/img/flags/sk.png
.png
Silver RAT V1.0/stats/dist/img/flags/sl.png
.png
Silver RAT V1.0/stats/dist/img/flags/sm.png
.png
Silver RAT V1.0/stats/dist/img/flags/sn.png
.png
Silver RAT V1.0/stats/dist/img/flags/so.png
.png
Silver RAT V1.0/stats/dist/img/flags/sr.png
.png
Silver RAT V1.0/stats/dist/img/flags/ss.png
.png
Silver RAT V1.0/stats/dist/img/flags/st.png
.png
Silver RAT V1.0/stats/dist/img/flags/sv.png
.png
Silver RAT V1.0/stats/dist/img/flags/sx.png
.png
Silver RAT V1.0/stats/dist/img/flags/sy.png
.png
Silver RAT V1.0/stats/dist/img/flags/sz.png
.png
Silver RAT V1.0/stats/dist/img/flags/tc.png
.png
Silver RAT V1.0/stats/dist/img/flags/td.png
.png
Silver RAT V1.0/stats/dist/img/flags/tf.png
.png
Silver RAT V1.0/stats/dist/img/flags/tg.png
.png
Silver RAT V1.0/stats/dist/img/flags/th.png
.png
Silver RAT V1.0/stats/dist/img/flags/tj.png
.png
Silver RAT V1.0/stats/dist/img/flags/tk.png
.png
Silver RAT V1.0/stats/dist/img/flags/tl.png
.png
Silver RAT V1.0/stats/dist/img/flags/tm.png
.png
Silver RAT V1.0/stats/dist/img/flags/tn.png
.png
Silver RAT V1.0/stats/dist/img/flags/to.png
.png
Silver RAT V1.0/stats/dist/img/flags/tr.png
.png
Silver RAT V1.0/stats/dist/img/flags/tt.png
.png
Silver RAT V1.0/stats/dist/img/flags/tv.png
.png
Silver RAT V1.0/stats/dist/img/flags/tw.png
.png
Silver RAT V1.0/stats/dist/img/flags/tz.png
.png
Silver RAT V1.0/stats/dist/img/flags/ua.png
.png
Silver RAT V1.0/stats/dist/img/flags/ug.png
.png
Silver RAT V1.0/stats/dist/img/flags/um.png
.png
Silver RAT V1.0/stats/dist/img/flags/un.png
.png
Silver RAT V1.0/stats/dist/img/flags/us.png
.png
Silver RAT V1.0/stats/dist/img/flags/uy.png
.png
Silver RAT V1.0/stats/dist/img/flags/uz.png
.png
Silver RAT V1.0/stats/dist/img/flags/va.png
.png
Silver RAT V1.0/stats/dist/img/flags/vc.png
.png
Silver RAT V1.0/stats/dist/img/flags/ve.png
.png
Silver RAT V1.0/stats/dist/img/flags/vg.png
.png
Silver RAT V1.0/stats/dist/img/flags/vi.png
.png
Silver RAT V1.0/stats/dist/img/flags/vn.png
.png
Silver RAT V1.0/stats/dist/img/flags/vu.png
.png
Silver RAT V1.0/stats/dist/img/flags/wf.png
.png
Silver RAT V1.0/stats/dist/img/flags/ws.png
.png
Silver RAT V1.0/stats/dist/img/flags/xk.png
.png
Silver RAT V1.0/stats/dist/img/flags/ye.png
.png
Silver RAT V1.0/stats/dist/img/flags/yt.png
.png
Silver RAT V1.0/stats/dist/img/flags/za.png
.png
Silver RAT V1.0/stats/dist/img/flags/zm.png
.png
Silver RAT V1.0/stats/dist/img/flags/zw.png
.png
Silver RAT V1.0/stats/dist/img/index.php
Silver RAT V1.0/stats/dist/img/summary/browsers/360 Browser.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/7Star.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Amigo.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Brave Wallet.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Brave.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Cent.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Chedot.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Chromium.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/CocCoc.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Comodo Dragon.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/CryptoTab.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/EpicPrivacyBrowser.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Google Chrome Canary.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Google Chrome.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Microsoft Edge.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Mozilla Firefox.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Opera Crypto Stable.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Opera GX Stable.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Opera Stable.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Pale Moon.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/QQBrowser.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Thunderbird.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Torch.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/Vivaldi.png
.png
Silver RAT V1.0/stats/dist/img/summary/browsers/index.php
Silver RAT V1.0/stats/dist/img/summary/files.png
.png
Silver RAT V1.0/stats/dist/img/summary/index.php
Silver RAT V1.0/stats/dist/img/summary/plugins/Auro Wallet(Mina Protocol).jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Authenticator.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Authy.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/BOLT X.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Binance Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Bitwarden.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Browserpass.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Byone.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/CLV Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Coin98 Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Coinbase Wallet extension.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/CommonKey.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Cyano Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/DAppPlay.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Dashlane.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/EOS Authenticator.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/EVER Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Enkrypt.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/GAuth Authenticator.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Goby.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Guarda.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/GuildWallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/ICONex.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Jaxx Liberty.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/KHC.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/KardiaChain Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/KeePassXC.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Keeper Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Keeper.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Keplr.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/LastPass.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Liquality Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/MEW CX.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/MYKI.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Maiar DeFi Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/MetaMask.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Nami.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/NeoLine.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/NordPass.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/OneKey.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Opera Wallet.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Oxygen.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Pali Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Phantom.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Polymesh Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Rabby.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/RoboForm.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Ronin Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Solflare Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Sollet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Splikity.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/SteemKeychain.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Temple.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Terra Station Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/TezBox.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Trezor Password Manager.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/TronLink.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/XDEFI Wallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Yoroi.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/Zoho Vault.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/iWallet.jpg
.jpg
Silver RAT V1.0/stats/dist/img/summary/plugins/index.php
Silver RAT V1.0/stats/dist/img/summary/soft/Discord.png
.png
Silver RAT V1.0/stats/dist/img/summary/soft/Outlook.png
.png
Silver RAT V1.0/stats/dist/img/summary/soft/Pidgin.png
.png
Silver RAT V1.0/stats/dist/img/summary/soft/Steam.png
.png
Silver RAT V1.0/stats/dist/img/summary/soft/Telegram.png
.png
Silver RAT V1.0/stats/dist/img/summary/soft/Tox.png
.png
Silver RAT V1.0/stats/dist/img/summary/soft/index.php
Silver RAT V1.0/stats/dist/img/summary/wallets/Atomic.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Binance.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Bitcoin Core.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Blockstream Green.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Coinomi.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Daedalus Mainnet.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Dogecoin.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Electrum.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/ElectrumLTC.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Ethereum.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Exodus.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Jaxx Desktop.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Jaxx Old.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/MultiDoge.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Raven Core.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/Wasabi Wallet.png
.png
Silver RAT V1.0/stats/dist/img/summary/wallets/index.php
Silver RAT V1.0/stats/dist/index.php
Silver RAT V1.0/stats/dist/js/bootstrap/index.php
Silver RAT V1.0/stats/dist/js/bootstrap/js/bootstrap.bundle.min.js
.js
Silver RAT V1.0/stats/dist/js/bootstrap/js/index.php
Silver RAT V1.0/stats/dist/js/daterangepicker-data.js
.js
Silver RAT V1.0/stats/dist/js/index.php
Silver RAT V1.0/stats/dist/js/noty/index.php
Silver RAT V1.0/stats/dist/js/noty/noty.css
Silver RAT V1.0/stats/dist/js/noty/noty.css.map
Silver RAT V1.0/stats/dist/js/noty/noty.js
.js
Silver RAT V1.0/stats/dist/js/noty/noty.js.map
.js
Silver RAT V1.0/stats/dist/js/noty/noty.min.js
.js
Silver RAT V1.0/stats/dist/js/noty/noty.min.js.map
.js
Silver RAT V1.0/stats/dist/js/noty/themes/index.php
Silver RAT V1.0/stats/dist/js/noty/themes/stealc.css
Silver RAT V1.0/stats/dist/js/select2/index.php
Silver RAT V1.0/stats/dist/js/select2/select2.min.js
.js
Silver RAT V1.0/stats/index.php
Silver RAT V1.0/stats/js/index.php
Silver RAT V1.0/stats/js/stats.js
.js
Silver RAT V1.0/stats/stats.php
.js
Silver RAT V1.0/stats/vendors/bootstrap/dist/css/bootstrap.min.css
Silver RAT V1.0/stats/vendors/bootstrap/dist/css/index.php
Silver RAT V1.0/stats/vendors/bootstrap/dist/index.php
Silver RAT V1.0/stats/vendors/bootstrap/index.php
Silver RAT V1.0/stats/vendors/daterangepicker/daterangepicker.css
Silver RAT V1.0/stats/vendors/daterangepicker/daterangepicker.js
.js
Silver RAT V1.0/stats/vendors/daterangepicker/index.php
Silver RAT V1.0/stats/vendors/echarts/dist/echarts-en.min.js
.js
Silver RAT V1.0/stats/vendors/echarts/dist/index.php
Silver RAT V1.0/stats/vendors/echarts/index.php
Silver RAT V1.0/stats/vendors/filesaver/FileSaver.min.js
.js
Silver RAT V1.0/stats/vendors/filesaver/index.php
Silver RAT V1.0/stats/vendors/index.php
Silver RAT V1.0/stats/vendors/jquery.counterup/index.php
Silver RAT V1.0/stats/vendors/jquery.counterup/jquery.counterup.min.js
.js
Silver RAT V1.0/stats/vendors/jquery/index.php
Silver RAT V1.0/stats/vendors/jquery/jquery.min.js
.js
Silver RAT V1.0/stats/vendors/moment/index.php
Silver RAT V1.0/stats/vendors/moment/min/index.php
Silver RAT V1.0/stats/vendors/moment/min/moment.min.js
.js
Silver RAT V1.0/stats/vendors/waypoints/index.php
Silver RAT V1.0/stats/vendors/waypoints/lib/index.php
Silver RAT V1.0/stats/vendors/waypoints/lib/jquery.waypoints.min.js
.js
Silver RAT V1.0/stats/vendors/zip/index.php
Silver RAT V1.0/stats/vendors/zip/jszip-utils.min.js
.js
Silver RAT V1.0/stats/vendors/zip/jszip.min.js
.js
Silver RAT V1.0/stub.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

Files

Password: hack1ngt0ols

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

Password: hack1ngt0ols

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 118KB - Virtual size: 118KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 512B - Virtual size: 12B

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 144KB - Virtual size: 144KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 43KB - Virtual size: 43KB

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 512B - Virtual size: 12B

Password: hack1ngt0ols

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:dbCertificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

fe:92:fd:79:78:5b:a1:7b:fc:09:41:72:94:be:f3:50:c7:5a:02:fbSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 118KB - Virtual size: 118KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2.9MB - Virtual size: 2.9MB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 144KB - Virtual size: 144KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 512B - Virtual size: 12B

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

fe:92:fd:79:78:5b:a1:7b:fc:09:41:72:94:be:f3:50:c7:5a:02:fb
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 210KB - Virtual size: 210KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 146KB - Virtual size: 146KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 149KB - Virtual size: 149KB

.textbss
Size: - Virtual size: 64KB

.rdata
Size: 324KB - Virtual size: 324KB

.data
Size: 512B - Virtual size: 68B

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 654KB - Virtual size: 653KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 311KB - Virtual size: 310KB