teamspeak3-server_win64-3[.]13[.]7[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

teamspeak3-server_win64-3.13.7.zip
Size

8.4MB
MD5

63eeb99c50aa0f050bd6355aed3d7df1
SHA1

5be7f7fc84202c274a6b98fce99e4a0b392e0429
SHA256

489f6f02b336f80812ad0307897e072c37042d1c39341e4efbe7c09d1e100f59
SHA512

e9916831b3244dfd1f3b9d365b58b17cd99fe8a69fa92dec5fea56b1748b5b4b224ff00b786635fc52dca5094f9f4010f5a3984d0e44f4a9ca495823a108cfda
SSDEEP

196608:THwW828DjMAmO43t0nH4yuU3SJsr5AOAo0sdgK4QTgioY9XiU1g483+IzfLPFG:cyK45vtu4Iisl00XXxo6yT+Ibc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/teamspeak3-server_win64/redist/maxminddb.dll

Files

teamspeak3-server_win64-3.13.7.zip
.zip
teamspeak3-server_win64/3rd_party_licenses.txt
teamspeak3-server_win64/changelog.txt
teamspeak3-server_win64/doc/accounting.txt
teamspeak3-server_win64/doc/permissiondoc.txt
teamspeak3-server_win64/doc/privilegekey_guide.txt
teamspeak3-server_win64/doc/server_quickstart.md
teamspeak3-server_win64/doc/server_upgrade.txt
teamspeak3-server_win64/doc/serverquery/TeamSpeak_Logo.png
.png
teamspeak3-server_win64/doc/serverquery/serverquery.html
teamspeak3-server_win64/doc/serverquery/stylesheet.css
teamspeak3-server_win64/doc/update_mysql_to_mariadb.txt
teamspeak3-server_win64/doc/webquery.md
teamspeak3-server_win64/license.txt
teamspeak3-server_win64/redist/libmariadb.dll
.dll windows:5 windows x64 arch:x64

5712b96c83a9500532a44b7dd3fa33d0

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-11-2020 00:00

Not After

08-11-2023 23:59

Subject

CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b0:6b:67:28:8e:7c:e2:49:90:55:50:e5:49:6b:50:59:07:c5:5d:e8
Signer

Actual PE Digest

b0:6b:67:28:8e:7c:e2:49:90:55:50:e5:49:6b:50:59:07:c5:5d:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner-PS\builds\17GNmMQr\0\teamspeak\teamspeak_server\build\64\out\Release_x64\libmariadb.dll.pdb

Imports

ws2_32

ioctlsocket
shutdown
send
recv
setsockopt
__WSAFDIsSet
WSACleanup
WSAStartup
getsockname
closesocket
select
getaddrinfo
socket
ntohs
connect
getservbyname
getsockopt
freeaddrinfo
WSAGetLastError

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

HeapSize
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
WriteConsoleW
HeapReAlloc
FlushFileBuffers
SetEndOfFile
SetStdHandle
ReadConsoleInputW
SetConsoleMode
GetOEMCP
IsDebuggerPresent
EnterCriticalSection
LoadLibraryExA
LeaveCriticalSection
InitializeCriticalSection
GetLastError
GetProcAddress
DeleteCriticalSection
FreeLibrary
FormatMessageA
GetWindowsDirectoryA
SetNamedPipeHandleState
WaitNamedPipeA
GetCurrentThreadId
CreateFileA
CloseHandle
GetCurrentProcessId
GetConsoleCP
GetACP
MultiByteToWideChar
CreateEventA
TlsSetValue
TlsAlloc
TlsGetValue
ReadFile
WriteFile
IsDBCSLeadByteEx
GetCPInfo
IsValidCodePage
LoadLibraryA
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsFree
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
SetEnvironmentVariableW
GetCurrentDirectoryW
GetDriveTypeW
GetFullPathNameW
FindClose
FindFirstFileExW
FindNextFileW
CreateFileW
GetFileType
SetFilePointerEx
GetModuleFileNameW
GetConsoleMode
ReadConsoleW
HeapFree
HeapAlloc
GetStdHandle
GetFileSizeEx
CompareStringW
LCMapStringW

Exports

Exports

get_tty_password
load_defaults
mariadb_connection
mariadb_convert_string
mariadb_dyncol_check
mariadb_dyncol_column_cmp_named
mariadb_dyncol_column_count
mariadb_dyncol_create_many_named
mariadb_dyncol_create_many_num
mariadb_dyncol_exists_named
mariadb_dyncol_exists_num
mariadb_dyncol_free
mariadb_dyncol_get_named
mariadb_dyncol_get_num
mariadb_dyncol_has_names
mariadb_dyncol_json
mariadb_dyncol_list_named
mariadb_dyncol_list_num
mariadb_dyncol_unpack
mariadb_dyncol_update_many_named
mariadb_dyncol_update_many_num
mariadb_dyncol_val_double
mariadb_dyncol_val_long
mariadb_dyncol_val_str
myodbc_remove_escape
mysql_affected_rows
mysql_autocommit
mysql_change_user
mysql_character_set_name
mysql_close
mysql_commit
mysql_data_seek
mysql_debug
mysql_dump_debug_info
mysql_eof
mysql_errno
mysql_error
mysql_escape_string
mysql_fetch_field
mysql_fetch_field_direct
mysql_fetch_fields
mysql_fetch_lengths
mysql_fetch_row
mysql_field_count
mysql_field_seek
mysql_field_tell
mysql_free_result
mysql_get_character_set_info
mysql_get_charset_by_name
mysql_get_charset_by_nr
mysql_get_client_info
mysql_get_client_version
mysql_get_host_info
mysql_get_parameters
mysql_get_proto_info
mysql_get_server_info
mysql_get_server_name
mysql_get_server_version
mysql_get_ssl_cipher
mysql_hex_string
mysql_info
mysql_init
mysql_insert_id
mysql_kill
mysql_list_dbs
mysql_list_fields
mysql_list_processes
mysql_list_tables
mysql_more_results
mysql_next_result
mysql_num_fields
mysql_num_rows
mysql_options
mysql_optionsv
mysql_ping
mysql_ps_fetch_functions
mysql_query
mysql_read_query_result
mysql_real_connect
mysql_real_escape_string
mysql_real_query
mysql_refresh
mysql_rollback
mysql_row_seek
mysql_row_tell
mysql_select_db
mysql_send_query
mysql_server_end
mysql_server_init
mysql_set_character_set
mysql_set_local_infile_default
mysql_set_local_infile_handler
mysql_set_server_option
mysql_shutdown
mysql_sqlstate
mysql_ssl_set
mysql_stat
mysql_stmt_affected_rows
mysql_stmt_attr_get
mysql_stmt_attr_set
mysql_stmt_bind_param
mysql_stmt_bind_result
mysql_stmt_close
mysql_stmt_data_seek
mysql_stmt_errno
mysql_stmt_error
mysql_stmt_execute
mysql_stmt_fetch
mysql_stmt_fetch_column
mysql_stmt_field_count
mysql_stmt_free_result
mysql_stmt_init
mysql_stmt_insert_id
mysql_stmt_more_results
mysql_stmt_next_result
mysql_stmt_num_rows
mysql_stmt_param_count
mysql_stmt_param_metadata
mysql_stmt_prepare
mysql_stmt_reset
mysql_stmt_result_metadata
mysql_stmt_row_seek
mysql_stmt_row_tell
mysql_stmt_send_long_data
mysql_stmt_sqlstate
mysql_stmt_store_result
mysql_store_result
mysql_thread_end
mysql_thread_id
mysql_thread_init
mysql_thread_safe
mysql_use_result
mysql_warning_count

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/redist/maxminddb.dll
.dll windows:6 windows x64 arch:x64

917ddbc0ad9e6cbafe6698c55f9ca899

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\src\maxminddb\projects\VS12\x64\Release\libmaxminddb.pdb

Imports

kernel32

CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
MultiByteToWideChar
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

ws2_32

getaddrinfo
WSACleanup
freeaddrinfo
WSAStartup

vcruntime140

memcmp
memcpy
memset
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vfprintf
fputs

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_initialize_onexit_table
_errno
_cexit
_initterm_e

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free

api-ms-win-crt-convert-l1-1-0

strtol

Exports

Exports

MMDB_aget_value
MMDB_close
MMDB_dump_entry_data_list
MMDB_free_entry_data_list
MMDB_get_entry_data_list
MMDB_get_metadata_as_entry_data_list
MMDB_get_value
MMDB_lookup_sockaddr
MMDB_lookup_string
MMDB_open
MMDB_read_node
MMDB_strerror
MMDB_vget_value

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/serverquerydocs/apikeyadd.txt
teamspeak3-server_win64/serverquerydocs/apikeydel.txt
teamspeak3-server_win64/serverquerydocs/apikeylist.txt
teamspeak3-server_win64/serverquerydocs/banadd.txt
teamspeak3-server_win64/serverquerydocs/banclient.txt
teamspeak3-server_win64/serverquerydocs/bandel.txt
teamspeak3-server_win64/serverquerydocs/bandelall.txt
teamspeak3-server_win64/serverquerydocs/banlist.txt
teamspeak3-server_win64/serverquerydocs/bindinglist.txt
teamspeak3-server_win64/serverquerydocs/channeladdperm.txt
teamspeak3-server_win64/serverquerydocs/channelclientaddperm.txt
teamspeak3-server_win64/serverquerydocs/channelclientdelperm.txt
teamspeak3-server_win64/serverquerydocs/channelclientpermlist.txt
teamspeak3-server_win64/serverquerydocs/channelcreate.txt
teamspeak3-server_win64/serverquerydocs/channeldelete.txt
teamspeak3-server_win64/serverquerydocs/channeldelperm.txt
teamspeak3-server_win64/serverquerydocs/channeledit.txt
teamspeak3-server_win64/serverquerydocs/channelfind.txt
teamspeak3-server_win64/serverquerydocs/channelgroupadd.txt
teamspeak3-server_win64/serverquerydocs/channelgroupaddperm.txt
teamspeak3-server_win64/serverquerydocs/channelgroupclientlist.txt
teamspeak3-server_win64/serverquerydocs/channelgroupcopy.txt
teamspeak3-server_win64/serverquerydocs/channelgroupdel.txt
teamspeak3-server_win64/serverquerydocs/channelgroupdelperm.txt
teamspeak3-server_win64/serverquerydocs/channelgrouplist.txt
teamspeak3-server_win64/serverquerydocs/channelgrouppermlist.txt
teamspeak3-server_win64/serverquerydocs/channelgrouprename.txt
teamspeak3-server_win64/serverquerydocs/channelinfo.txt
teamspeak3-server_win64/serverquerydocs/channellist.txt
teamspeak3-server_win64/serverquerydocs/channelmove.txt
teamspeak3-server_win64/serverquerydocs/channelpermlist.txt
teamspeak3-server_win64/serverquerydocs/clientaddperm.txt
teamspeak3-server_win64/serverquerydocs/clientaddservergroup.txt
teamspeak3-server_win64/serverquerydocs/clientdbdelete.txt
teamspeak3-server_win64/serverquerydocs/clientdbedit.txt
teamspeak3-server_win64/serverquerydocs/clientdbfind.txt
teamspeak3-server_win64/serverquerydocs/clientdbinfo.txt
teamspeak3-server_win64/serverquerydocs/clientdblist.txt
teamspeak3-server_win64/serverquerydocs/clientdelperm.txt
teamspeak3-server_win64/serverquerydocs/clientdelservergroup.txt
teamspeak3-server_win64/serverquerydocs/clientedit.txt
teamspeak3-server_win64/serverquerydocs/clientfind.txt
teamspeak3-server_win64/serverquerydocs/clientgetdbidfromuid.txt
teamspeak3-server_win64/serverquerydocs/clientgetids.txt
teamspeak3-server_win64/serverquerydocs/clientgetnamefromdbid.txt
teamspeak3-server_win64/serverquerydocs/clientgetnamefromuid.txt
teamspeak3-server_win64/serverquerydocs/clientgetuidfromclid.txt
teamspeak3-server_win64/serverquerydocs/clientinfo.txt
teamspeak3-server_win64/serverquerydocs/clientkick.txt
teamspeak3-server_win64/serverquerydocs/clientlist.txt
teamspeak3-server_win64/serverquerydocs/clientmove.txt
teamspeak3-server_win64/serverquerydocs/clientpermlist.txt
teamspeak3-server_win64/serverquerydocs/clientpoke.txt
teamspeak3-server_win64/serverquerydocs/clientsetserverquerylogin.txt
teamspeak3-server_win64/serverquerydocs/clientupdate.txt
teamspeak3-server_win64/serverquerydocs/complainadd.txt
teamspeak3-server_win64/serverquerydocs/complaindel.txt
teamspeak3-server_win64/serverquerydocs/complaindelall.txt
teamspeak3-server_win64/serverquerydocs/complainlist.txt
teamspeak3-server_win64/serverquerydocs/customdelete.txt
teamspeak3-server_win64/serverquerydocs/custominfo.txt
teamspeak3-server_win64/serverquerydocs/customsearch.txt
teamspeak3-server_win64/serverquerydocs/customset.txt
teamspeak3-server_win64/serverquerydocs/ftcreatedir.txt
teamspeak3-server_win64/serverquerydocs/ftdeletefile.txt
teamspeak3-server_win64/serverquerydocs/ftgetfileinfo.txt
teamspeak3-server_win64/serverquerydocs/ftgetfilelist.txt
teamspeak3-server_win64/serverquerydocs/ftinitdownload.txt
teamspeak3-server_win64/serverquerydocs/ftinitupload.txt
teamspeak3-server_win64/serverquerydocs/ftlist.txt
teamspeak3-server_win64/serverquerydocs/ftrenamefile.txt
teamspeak3-server_win64/serverquerydocs/ftstop.txt
teamspeak3-server_win64/serverquerydocs/gm.txt
teamspeak3-server_win64/serverquerydocs/help.txt
teamspeak3-server_win64/serverquerydocs/hostinfo.txt
teamspeak3-server_win64/serverquerydocs/instanceedit.txt
teamspeak3-server_win64/serverquerydocs/instanceinfo.txt
teamspeak3-server_win64/serverquerydocs/logadd.txt
teamspeak3-server_win64/serverquerydocs/login.txt
teamspeak3-server_win64/serverquerydocs/logout.txt
teamspeak3-server_win64/serverquerydocs/logview.txt
teamspeak3-server_win64/serverquerydocs/messageadd.txt
teamspeak3-server_win64/serverquerydocs/messagedel.txt
teamspeak3-server_win64/serverquerydocs/messageget.txt
teamspeak3-server_win64/serverquerydocs/messagelist.txt
teamspeak3-server_win64/serverquerydocs/messageupdateflag.txt
teamspeak3-server_win64/serverquerydocs/permfind.txt
teamspeak3-server_win64/serverquerydocs/permget.txt
teamspeak3-server_win64/serverquerydocs/permidgetbyname.txt
teamspeak3-server_win64/serverquerydocs/permissionlist.txt
teamspeak3-server_win64/serverquerydocs/permoverview.txt
teamspeak3-server_win64/serverquerydocs/permreset.txt
teamspeak3-server_win64/serverquerydocs/privilegekeyadd.txt
teamspeak3-server_win64/serverquerydocs/privilegekeydelete.txt
teamspeak3-server_win64/serverquerydocs/privilegekeylist.txt
teamspeak3-server_win64/serverquerydocs/privilegekeyuse.txt
teamspeak3-server_win64/serverquerydocs/queryloginadd.txt
teamspeak3-server_win64/serverquerydocs/querylogindel.txt
teamspeak3-server_win64/serverquerydocs/queryloginlist.txt
teamspeak3-server_win64/serverquerydocs/quit.txt
teamspeak3-server_win64/serverquerydocs/sendtextmessage.txt
teamspeak3-server_win64/serverquerydocs/servercreate.txt
teamspeak3-server_win64/serverquerydocs/serverdelete.txt
teamspeak3-server_win64/serverquerydocs/serveredit.txt
teamspeak3-server_win64/serverquerydocs/servergroupadd.txt
teamspeak3-server_win64/serverquerydocs/servergroupaddclient.txt
teamspeak3-server_win64/serverquerydocs/servergroupaddperm.txt
teamspeak3-server_win64/serverquerydocs/servergroupautoaddperm.txt
teamspeak3-server_win64/serverquerydocs/servergroupautodelperm.txt
teamspeak3-server_win64/serverquerydocs/servergroupclientlist.txt
teamspeak3-server_win64/serverquerydocs/servergroupcopy.txt
teamspeak3-server_win64/serverquerydocs/servergroupdel.txt
teamspeak3-server_win64/serverquerydocs/servergroupdelclient.txt
teamspeak3-server_win64/serverquerydocs/servergroupdelperm.txt
teamspeak3-server_win64/serverquerydocs/servergrouplist.txt
teamspeak3-server_win64/serverquerydocs/servergrouppermlist.txt
teamspeak3-server_win64/serverquerydocs/servergrouprename.txt
teamspeak3-server_win64/serverquerydocs/servergroupsbyclientid.txt
teamspeak3-server_win64/serverquerydocs/serveridgetbyport.txt
teamspeak3-server_win64/serverquerydocs/serverinfo.txt
teamspeak3-server_win64/serverquerydocs/serverlist.txt
teamspeak3-server_win64/serverquerydocs/servernotifyregister.txt
teamspeak3-server_win64/serverquerydocs/servernotifyunregister.txt
teamspeak3-server_win64/serverquerydocs/serverprocessstop.txt
teamspeak3-server_win64/serverquerydocs/serverrequestconnectioninfo.txt
teamspeak3-server_win64/serverquerydocs/serversnapshotcreate.txt
teamspeak3-server_win64/serverquerydocs/serversnapshotdeploy.txt
teamspeak3-server_win64/serverquerydocs/serverstart.txt
teamspeak3-server_win64/serverquerydocs/serverstop.txt
teamspeak3-server_win64/serverquerydocs/servertemppasswordadd.txt
teamspeak3-server_win64/serverquerydocs/servertemppassworddel.txt
teamspeak3-server_win64/serverquerydocs/servertemppasswordlist.txt
teamspeak3-server_win64/serverquerydocs/setclientchannelgroup.txt
teamspeak3-server_win64/serverquerydocs/tokenadd.txt
teamspeak3-server_win64/serverquerydocs/tokendelete.txt
teamspeak3-server_win64/serverquerydocs/tokenlist.txt
teamspeak3-server_win64/serverquerydocs/tokenuse.txt
teamspeak3-server_win64/serverquerydocs/use.txt
teamspeak3-server_win64/serverquerydocs/version.txt
teamspeak3-server_win64/serverquerydocs/whoami.txt
teamspeak3-server_win64/sql/api_key_delete.sql
teamspeak3-server_win64/sql/api_key_insert.sql
teamspeak3-server_win64/sql/api_key_list.sql
teamspeak3-server_win64/sql/ban_delete.sql
teamspeak3-server_win64/sql/ban_insert.sql
teamspeak3-server_win64/sql/ban_list.sql
teamspeak3-server_win64/sql/binding_delete.sql
teamspeak3-server_win64/sql/bindings_insert.sql
teamspeak3-server_win64/sql/bindings_list.sql
teamspeak3-server_win64/sql/channel_delete.sql
teamspeak3-server_win64/sql/channel_delete_bulk.sql
teamspeak3-server_win64/sql/channel_insert.sql
teamspeak3-server_win64/sql/channel_insert_bulk.sql
teamspeak3-server_win64/sql/channel_insert_bulk_fixup.sql
teamspeak3-server_win64/sql/channel_insert_bulk_mapping.sql
teamspeak3-server_win64/sql/channel_properties_bulk_insert.sql
teamspeak3-server_win64/sql/channel_server_list.sql
teamspeak3-server_win64/sql/channel_server_list_properties_bulk.sql
teamspeak3-server_win64/sql/channel_update_parentid.sql
.vbs
teamspeak3-server_win64/sql/client_clear_traffic_stats.sql
teamspeak3-server_win64/sql/client_count_by_serverid.sql
teamspeak3-server_win64/sql/client_count_queries.sql
teamspeak3-server_win64/sql/client_count_queries_per_server.sql
teamspeak3-server_win64/sql/client_delete.sql
teamspeak3-server_win64/sql/client_delete_prune.sql
teamspeak3-server_win64/sql/client_get.sql
teamspeak3-server_win64/sql/client_get_by_id.sql
teamspeak3-server_win64/sql/client_get_by_name_or_uid.sql
teamspeak3-server_win64/sql/client_get_by_serverid.sql
teamspeak3-server_win64/sql/client_get_by_serverid_bulk.sql
teamspeak3-server_win64/sql/client_get_by_serverid_limit.sql
teamspeak3-server_win64/sql/client_get_by_uid.sql
teamspeak3-server_win64/sql/client_get_queries_limit.sql
teamspeak3-server_win64/sql/client_get_queries_per_server_limit.sql
teamspeak3-server_win64/sql/client_insert.sql
teamspeak3-server_win64/sql/client_insert_bulk.sql
teamspeak3-server_win64/sql/client_insert_bulk_mapping.sql
teamspeak3-server_win64/sql/client_insert_query.sql
teamspeak3-server_win64/sql/client_properties_bulk_insert.sql
teamspeak3-server_win64/sql/client_remove_query_login.sql
teamspeak3-server_win64/sql/client_update_login_info.sql
teamspeak3-server_win64/sql/client_update_name.sql
teamspeak3-server_win64/sql/client_update_stats.sql
teamspeak3-server_win64/sql/client_update_traffic_stats.sql
teamspeak3-server_win64/sql/clientid_get_by_name_pw.sql
teamspeak3-server_win64/sql/clientid_get_by_name_pw_serverid.sql
teamspeak3-server_win64/sql/complain_delete.sql
teamspeak3-server_win64/sql/complain_delete_all.sql
teamspeak3-server_win64/sql/complain_delete_prune.sql
teamspeak3-server_win64/sql/complain_get_by_serverid.sql
teamspeak3-server_win64/sql/complain_insert.sql
teamspeak3-server_win64/sql/create_mariadb/create_tables.sql
teamspeak3-server_win64/sql/create_mariadb/drop_tables.sql
teamspeak3-server_win64/sql/create_postgresql/after_defaults.sql
teamspeak3-server_win64/sql/create_postgresql/channel_insert_bulk_fixup.sql
teamspeak3-server_win64/sql/create_postgresql/client_get_by_serverid_bulk.sql
teamspeak3-server_win64/sql/create_postgresql/create_tables.sql
teamspeak3-server_win64/sql/create_postgresql/drop_tables.sql
teamspeak3-server_win64/sql/create_sqlite/create_tables.sql
teamspeak3-server_win64/sql/create_sqlite/drop_tables.sql
teamspeak3-server_win64/sql/custom_delete.sql
teamspeak3-server_win64/sql/custom_get_by_id.sql
teamspeak3-server_win64/sql/custom_get_by_ident.sql
teamspeak3-server_win64/sql/custom_insert.sql
teamspeak3-server_win64/sql/custom_update.sql
teamspeak3-server_win64/sql/defaults.sql
teamspeak3-server_win64/sql/group_delete.sql
teamspeak3-server_win64/sql/group_id_get_by_name.sql
teamspeak3-server_win64/sql/group_insert.sql
teamspeak3-server_win64/sql/group_insert_bulk_snapshot.sql
teamspeak3-server_win64/sql/group_insert_bulk_snapshot_get_mapping.sql
teamspeak3-server_win64/sql/group_member_delete.sql
teamspeak3-server_win64/sql/group_member_delete_by_groupid.sql
teamspeak3-server_win64/sql/group_member_detail_get_by_groupid.sql
teamspeak3-server_win64/sql/group_member_get.sql
teamspeak3-server_win64/sql/group_member_insert.sql
teamspeak3-server_win64/sql/group_member_insert_bulk.sql
teamspeak3-server_win64/sql/group_members_get_by_groupid.sql
teamspeak3-server_win64/sql/group_members_get_by_id.sql
teamspeak3-server_win64/sql/group_members_get_by_serverid.sql
teamspeak3-server_win64/sql/group_rename.sql
.vbs
teamspeak3-server_win64/sql/groups_get.sql
teamspeak3-server_win64/sql/groups_get_by_serverid.sql
teamspeak3-server_win64/sql/groups_get_by_serverid_type.sql
teamspeak3-server_win64/sql/info_delete.sql
teamspeak3-server_win64/sql/info_get_by_ident.sql
teamspeak3-server_win64/sql/info_insert.sql
teamspeak3-server_win64/sql/integration_action_delete.sql
teamspeak3-server_win64/sql/integration_action_insert.sql
teamspeak3-server_win64/sql/integration_action_list.sql
teamspeak3-server_win64/sql/integration_delete.sql
teamspeak3-server_win64/sql/integration_insert.sql
teamspeak3-server_win64/sql/integration_list.sql
teamspeak3-server_win64/sql/message_delete.sql
teamspeak3-server_win64/sql/message_get_by_clientid.sql
teamspeak3-server_win64/sql/message_get_unread_by_clientid.sql
teamspeak3-server_win64/sql/message_insert.sql
teamspeak3-server_win64/sql/message_list_by_clientid.sql
teamspeak3-server_win64/sql/message_update_flag.sql
teamspeak3-server_win64/sql/perm_copy_default_permissions.sql
teamspeak3-server_win64/sql/perm_delete_by_groupid.sql
teamspeak3-server_win64/sql/perm_delete_by_permid.sql
teamspeak3-server_win64/sql/perm_delete_by_serverid.sql
teamspeak3-server_win64/sql/perm_get_by_id.sql
teamspeak3-server_win64/sql/perm_get_by_serverid.sql
teamspeak3-server_win64/sql/perm_group_copy.sql
teamspeak3-server_win64/sql/perm_group_get_mapping.sql
teamspeak3-server_win64/sql/perm_group_perm_copy.sql
teamspeak3-server_win64/sql/perm_insert.sql
teamspeak3-server_win64/sql/perm_insert_bulk.sql
teamspeak3-server_win64/sql/perm_rename.sql
teamspeak3-server_win64/sql/perm_update_get_groups.sql
teamspeak3-server_win64/sql/permission_load_channel_group_total.sql
teamspeak3-server_win64/sql/permission_load_other.sql
teamspeak3-server_win64/sql/permission_load_server_and_channel_group_total.sql
teamspeak3-server_win64/sql/permission_load_server_group_total.sql
teamspeak3-server_win64/sql/properties_delete_by_id.sql
teamspeak3-server_win64/sql/properties_delete_by_string_id.sql
teamspeak3-server_win64/sql/properties_insert_by_id.sql
teamspeak3-server_win64/sql/properties_insert_by_string_id.sql
teamspeak3-server_win64/sql/properties_list_by_id.sql
teamspeak3-server_win64/sql/properties_list_by_string_id.sql
teamspeak3-server_win64/sql/revocations_delete.sql
teamspeak3-server_win64/sql/revocations_getlist.sql
teamspeak3-server_win64/sql/revocations_insert_bulk.sql
teamspeak3-server_win64/sql/server_clear_traffic_stats.sql
teamspeak3-server_win64/sql/server_delete.sql
teamspeak3-server_win64/sql/server_delete_get_qa_clients.sql
teamspeak3-server_win64/sql/server_get_byid.sql
teamspeak3-server_win64/sql/server_get_byport.sql
teamspeak3-server_win64/sql/server_insert.sql
teamspeak3-server_win64/sql/server_list.sql
teamspeak3-server_win64/sql/server_list_by_machine_id.sql
teamspeak3-server_win64/sql/server_list_by_machine_id_detailed.sql
teamspeak3-server_win64/sql/server_list_detailed.sql
teamspeak3-server_win64/sql/server_snapshot_delete.sql
teamspeak3-server_win64/sql/server_snapshot_delete_failed.sql
teamspeak3-server_win64/sql/server_update_autostart.sql
teamspeak3-server_win64/sql/server_update_machine_id.sql
teamspeak3-server_win64/sql/server_update_port.sql
teamspeak3-server_win64/sql/server_update_traffic_stats.sql
teamspeak3-server_win64/sql/temporary_password_delete.sql
teamspeak3-server_win64/sql/temporary_password_insert.sql
teamspeak3-server_win64/sql/temporary_password_list.sql
teamspeak3-server_win64/sql/token_delete_by_key.sql
teamspeak3-server_win64/sql/token_get_by_key.sql
teamspeak3-server_win64/sql/token_insert.sql
teamspeak3-server_win64/sql/token_list.sql
teamspeak3-server_win64/sql/update_12.sql
teamspeak3-server_win64/sql/update_13.sql
teamspeak3-server_win64/sql/update_14.sql
teamspeak3-server_win64/sql/update_15.sql
teamspeak3-server_win64/sql/update_16.sql
teamspeak3-server_win64/sql/update_17.sql
teamspeak3-server_win64/sql/update_18.sql
teamspeak3-server_win64/sql/update_19.sql
teamspeak3-server_win64/sql/update_20.sql
teamspeak3-server_win64/sql/update_21.sql
teamspeak3-server_win64/sql/update_22.sql
teamspeak3-server_win64/sql/update_23.sql
teamspeak3-server_win64/sql/update_24.sql
teamspeak3-server_win64/sql/update_25.sql
teamspeak3-server_win64/sql/update_26.sql
teamspeak3-server_win64/sql/update_27.sql
teamspeak3-server_win64/sql/update_28.sql
teamspeak3-server_win64/sql/update_29.sql
teamspeak3-server_win64/sql/update_30.sql
teamspeak3-server_win64/sql/update_31.sql
teamspeak3-server_win64/sql/update_32.sql
teamspeak3-server_win64/sql/update_33.sql
teamspeak3-server_win64/sql/update_34.sql
teamspeak3-server_win64/sql/update_database_version.sql
teamspeak3-server_win64/sql/update_mariadb_26.sql
teamspeak3-server_win64/sql/update_mariadb_27.sql
teamspeak3-server_win64/sql/update_mariadb_28.sql
teamspeak3-server_win64/sql/update_mariadb_29.sql
teamspeak3-server_win64/sql/update_mariadb_32.sql
teamspeak3-server_win64/sql/update_mariadb_33.sql
teamspeak3-server_win64/sql/update_permissions_12.sql
teamspeak3-server_win64/sql/update_postgresql_33.sql
teamspeak3-server_win64/sql/update_sqlite_27.sql
teamspeak3-server_win64/sql/update_sqlite_28.sql
teamspeak3-server_win64/sql/update_sqlite_29.sql
teamspeak3-server_win64/sql/update_sqlite_32.sql
teamspeak3-server_win64/sql/update_sqlite_33.sql
teamspeak3-server_win64/sql/updates_and_fixes/convert_mysql_to_mariadb.sql
teamspeak3-server_win64/sql/updates_and_fixes/mariadb_fix_latin_utf8.sql
teamspeak3-server_win64/ts3_ssh.dll
.dll windows:5 windows x64 arch:x64

ee0c6e5af46853c4e9c0a9c7b888d0ef

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-11-2020 00:00

Not After

08-11-2023 23:59

Subject

CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e1:6d:5b:65:e7:9b:38:84:b3:64:5e:a7:5c:f4:e0:de:ca:e0:1e:b4
Signer

Actual PE Digest

e1:6d:5b:65:e7:9b:38:84:b3:64:5e:a7:5c:f4:e0:de:ca:e0:1e:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner-PS\builds\17GNmMQr\0\teamspeak\teamspeak_server\build\64\out\Release_x64\ts3_ssh.dll.pdb

Imports

ws2_32

htonl
accept
listen
WSACleanup
WSAStartup
ioctlsocket
select
WSAStringToAddressA
gethostname
getsockname
send
recv
__WSAFDIsSet
bind
closesocket
gethostbyname
WSASetLastError
inet_addr
gethostbyaddr
getservbyport
socket
connect
inet_ntoa
getservbyname
getsockopt
setsockopt
WSAGetLastError
ntohl
ntohs
htons

shell32

SHGetSpecialFolderPathA

advapi32

CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
GetUserNameA

kernel32

GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetCurrentDirectoryW
DeleteFileW
CreateDirectoryW
GetFileAttributesExW
GetTimeZoneInformation
WideCharToMultiByte
GetFileSizeEx
FlushFileBuffers
SetFilePointerEx
MultiByteToWideChar
SetStdHandle
HeapReAlloc
HeapSize
SetEndOfFile
Sleep
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
FormatMessageA
GetStdHandle
SetConsoleMode
GetConsoleMode
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WriteConsoleW
GetLastError
RtlUnwindEx
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
CloseHandle
ReadFile
ReadConsoleW
CreateFileW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
WriteFile
GetConsoleCP
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW

Exports

Exports

_ssh_log
buffer_free
buffer_get
buffer_get_len
buffer_new
channel_accept_x11
channel_change_pty_size
channel_close
channel_forward_accept
channel_forward_cancel
channel_forward_listen
channel_free
channel_get_exit_status
channel_get_session
channel_is_closed
channel_is_eof
channel_is_open
channel_new
channel_open_forward
channel_open_session
channel_poll
channel_read
channel_read_buffer
channel_read_nonblocking
channel_request_env
channel_request_exec
channel_request_pty
channel_request_pty_size
channel_request_send_signal
channel_request_sftp
channel_request_shell
channel_request_subsystem
channel_request_x11
channel_select
channel_send_eof
channel_set_blocking
channel_write
channel_write_stderr
create_host_rsa_key
privatekey_free
privatekey_from_file
publickey_free
publickey_from_file
publickey_from_privatekey
publickey_to_string
ssh_accept
ssh_add_channel_callbacks
ssh_auth_list
ssh_basename
ssh_bind_accept
ssh_bind_accept_fd
ssh_bind_fd_toaccept
ssh_bind_free
ssh_bind_get_fd
ssh_bind_listen
ssh_bind_new
ssh_bind_options_set
ssh_bind_set_blocking
ssh_bind_set_callbacks
ssh_bind_set_fd
ssh_blocking_flush
ssh_buffer_add_data
ssh_buffer_free
ssh_buffer_get
ssh_buffer_get_data
ssh_buffer_get_len
ssh_buffer_new
ssh_buffer_reinit
ssh_channel_accept_forward
ssh_channel_accept_x11
ssh_channel_cancel_forward
ssh_channel_change_pty_size
ssh_channel_close
ssh_channel_free
ssh_channel_get_exit_status
ssh_channel_get_session
ssh_channel_is_closed
ssh_channel_is_eof
ssh_channel_is_open
ssh_channel_listen_forward
ssh_channel_new
ssh_channel_open_auth_agent
ssh_channel_open_forward
ssh_channel_open_reverse_forward
ssh_channel_open_session
ssh_channel_open_x11
ssh_channel_poll
ssh_channel_poll_timeout
ssh_channel_read
ssh_channel_read_nonblocking
ssh_channel_read_timeout
ssh_channel_request_auth_agent
ssh_channel_request_env
ssh_channel_request_exec
ssh_channel_request_pty
ssh_channel_request_pty_size
ssh_channel_request_send_break
ssh_channel_request_send_exit_signal
ssh_channel_request_send_exit_status
ssh_channel_request_send_signal
ssh_channel_request_sftp
ssh_channel_request_shell
ssh_channel_request_subsystem
ssh_channel_request_x11
ssh_channel_select
ssh_channel_send_eof
ssh_channel_set_blocking
ssh_channel_set_counter
ssh_channel_window_size
ssh_channel_write
ssh_channel_write_stderr
ssh_clean_pubkey_hash
ssh_connect
ssh_connector_free
ssh_connector_new
ssh_connector_set_in_channel
ssh_connector_set_in_fd
ssh_connector_set_out_channel
ssh_connector_set_out_fd
ssh_copyright
ssh_dirname
ssh_disconnect
ssh_disconnect_with_message
ssh_dump_knownhost
ssh_event_add_connector
ssh_event_add_fd
ssh_event_add_session
ssh_event_dopoll
ssh_event_free
ssh_event_new
ssh_event_remove_connector
ssh_event_remove_fd
ssh_event_remove_session
ssh_execute_message_callbacks
ssh_finalize
ssh_forward_accept
ssh_forward_cancel
ssh_forward_listen
ssh_free
ssh_get_cipher_in
ssh_get_cipher_out
ssh_get_clientbanner
ssh_get_disconnect_message
ssh_get_error
ssh_get_error_code
ssh_get_fd
ssh_get_fingerprint_hash
ssh_get_hexa
ssh_get_hmac_in
ssh_get_hmac_out
ssh_get_issue_banner
ssh_get_kex_algo
ssh_get_log_callback
ssh_get_log_level
ssh_get_log_userdata
ssh_get_openssh_version
ssh_get_poll_flags
ssh_get_pubkey
ssh_get_pubkey_hash
ssh_get_publickey
ssh_get_publickey_hash
ssh_get_random
ssh_get_server_publickey
ssh_get_serverbanner
ssh_get_status
ssh_get_version
ssh_getpass
ssh_handle_key_exchange
ssh_init
ssh_is_blocking
ssh_is_connected
ssh_is_server_known
ssh_key_cmp
ssh_key_free
ssh_key_is_private
ssh_key_is_public
ssh_key_new
ssh_key_type
ssh_key_type_from_name
ssh_key_type_to_char
ssh_known_hosts_parse_line
ssh_knownhosts_entry_free
ssh_log
ssh_message_auth_interactive_request
ssh_message_auth_kbdint_is_response
ssh_message_auth_password
ssh_message_auth_pubkey
ssh_message_auth_publickey
ssh_message_auth_publickey_state
ssh_message_auth_reply_pk_ok
ssh_message_auth_reply_pk_ok_simple
ssh_message_auth_reply_success
ssh_message_auth_set_methods
ssh_message_auth_user
ssh_message_channel_request_channel
ssh_message_channel_request_command
ssh_message_channel_request_env_name
ssh_message_channel_request_env_value
ssh_message_channel_request_open_destination
ssh_message_channel_request_open_destination_port
ssh_message_channel_request_open_originator
ssh_message_channel_request_open_originator_port
ssh_message_channel_request_open_reply_accept
ssh_message_channel_request_pty_height
ssh_message_channel_request_pty_pxheight
ssh_message_channel_request_pty_pxwidth
ssh_message_channel_request_pty_term
ssh_message_channel_request_pty_width
ssh_message_channel_request_reply_success
ssh_message_channel_request_subsystem
ssh_message_channel_request_x11_auth_cookie
ssh_message_channel_request_x11_auth_protocol
ssh_message_channel_request_x11_screen_number
ssh_message_channel_request_x11_single_connection
ssh_message_free
ssh_message_get
ssh_message_global_request_address
ssh_message_global_request_port
ssh_message_global_request_reply_success
ssh_message_reply_default
ssh_message_retrieve
ssh_message_service_reply_success
ssh_message_service_service
ssh_message_subtype
ssh_message_type
ssh_mkdir
ssh_new
ssh_options_copy
ssh_options_get
ssh_options_get_port
ssh_options_getopt
ssh_options_parse_config
ssh_options_set
ssh_pcap_file_close
ssh_pcap_file_free
ssh_pcap_file_new
ssh_pcap_file_open
ssh_pki_copy_cert_to_privkey
ssh_pki_export_privkey_base64
ssh_pki_export_privkey_file
ssh_pki_export_privkey_to_pubkey
ssh_pki_export_pubkey_base64
ssh_pki_export_pubkey_file
ssh_pki_generate
ssh_pki_import_cert_base64
ssh_pki_import_cert_file
ssh_pki_import_privkey_base64
ssh_pki_import_privkey_file
ssh_pki_import_pubkey_base64
ssh_pki_import_pubkey_file
ssh_pki_key_ecdsa_name
ssh_print_hash
ssh_print_hexa
ssh_privatekey_type
ssh_publickey_to_file
ssh_remove_channel_callbacks
ssh_scp_accept_request
ssh_scp_close
ssh_scp_deny_request
ssh_scp_free
ssh_scp_init
ssh_scp_leave_directory
ssh_scp_new
ssh_scp_pull_request
ssh_scp_push_directory
ssh_scp_push_file
ssh_scp_push_file64
ssh_scp_read
ssh_scp_request_get_filename
ssh_scp_request_get_permissions
ssh_scp_request_get_size
ssh_scp_request_get_size64
ssh_scp_request_get_warning
ssh_scp_write
ssh_select
ssh_send_debug
ssh_send_ignore
ssh_send_keepalive
ssh_server_init_kex
ssh_service_request
ssh_session_export_known_hosts_entry
ssh_session_get_known_hosts_entry
ssh_session_has_known_hosts_entry
ssh_session_is_known_server
ssh_session_update_known_hosts
ssh_set_auth_methods
ssh_set_blocking
ssh_set_callbacks
ssh_set_channel_callbacks
ssh_set_counters
ssh_set_fd_except
ssh_set_fd_toread
ssh_set_fd_towrite
ssh_set_log_callback
ssh_set_log_level
ssh_set_log_userdata
ssh_set_message_callback
ssh_set_pcap_file
ssh_set_server_callbacks
ssh_silent_disconnect
ssh_string_burn
ssh_string_copy
ssh_string_data
ssh_string_fill
ssh_string_free
ssh_string_free_char
ssh_string_from_char
ssh_string_get_char
ssh_string_len
ssh_string_new
ssh_string_to_char
ssh_threads_get_noop
ssh_threads_set_callbacks
ssh_try_publickey_from_file
ssh_userauth_autopubkey
ssh_userauth_gssapi
ssh_userauth_kbdint
ssh_userauth_kbdint_getanswer
ssh_userauth_kbdint_getinstruction
ssh_userauth_kbdint_getname
ssh_userauth_kbdint_getnanswers
ssh_userauth_kbdint_getnprompts
ssh_userauth_kbdint_getprompt
ssh_userauth_kbdint_setanswer
ssh_userauth_list
ssh_userauth_none
ssh_userauth_offer_pubkey
ssh_userauth_password
ssh_userauth_privatekey_file
ssh_userauth_pubkey
ssh_userauth_publickey
ssh_userauth_publickey_auto
ssh_userauth_try_publickey
ssh_version
ssh_write_knownhost
string_burn
string_copy
string_data
string_fill
string_free
string_from_char
string_len
string_new
string_to_char

Sections

.text
Size: 515KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/ts3db_mariadb.dll
.dll windows:5 windows x64 arch:x64

a579d9873393559d4597ef9ee4cea936

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-11-2020 00:00

Not After

08-11-2023 23:59

Subject

CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

11:bc:b7:b3:63:41:09:71:d2:9f:c6:c4:38:98:c2:31:9d:3f:aa:0a
Signer

Actual PE Digest

11:bc:b7:b3:63:41:09:71:d2:9f:c6:c4:38:98:c2:31:9d:3f:aa:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner-PS\builds\17GNmMQr\0\teamspeak\teamspeak_server\build\64\out\Release_x64\ts3db_mariadb.dll.pdb

Imports

libmariadb

mysql_real_query
mysql_error
mysql_init
mysql_use_result
mysql_num_fields
mysql_fetch_fields
mysql_fetch_row
mysql_query
mysql_free_result
mysql_server_init
mysql_server_end
mysql_close
mysql_affected_rows
mysql_fetch_lengths
mysql_options
mysql_real_connect
mysql_errno
mysql_store_result
mysql_list_tables
mysql_insert_id
mysql_num_rows

kernel32

WriteConsoleW
SetEndOfFile
ReadConsoleW
ReadFile
HeapSize
CreateFileW
SetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
WideCharToMultiByte
CloseHandle
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetCurrentThreadId
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
SetEvent
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
InterlockedFlushSList
FindNextFileW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetModuleHandleExW
ExitProcess
HeapAlloc
HeapFree
GetStdHandle
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
HeapReAlloc
FindClose
FindFirstFileExW

Exports

Exports

ts3dbplugin_apiversion
ts3dbplugin_bulk_insert
ts3dbplugin_connect
ts3dbplugin_disconnect
ts3dbplugin_exec
ts3dbplugin_getlasterror
ts3dbplugin_init
ts3dbplugin_name
ts3dbplugin_open
ts3dbplugin_shortname
ts3dbplugin_shutdown
ts3dbplugin_tableexists
ts3dbplugin_version

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/ts3db_postgresql.dll
.dll windows:5 windows x64 arch:x64

8f0d9d1e9ffd734b407d37f7c66b69f5

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-11-2020 00:00

Not After

08-11-2023 23:59

Subject

CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

19:c8:9e:d2:65:05:d2:e6:56:17:e6:45:31:82:70:e2:81:d9:23:1f
Signer

Actual PE Digest

19:c8:9e:d2:65:05:d2:e6:56:17:e6:45:31:82:70:e2:81:d9:23:1f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner-PS\builds\17GNmMQr\0\teamspeak\teamspeak_server\build\64\out\Release_x64\ts3db_postgresql.dll.pdb

Imports

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
WideCharToMultiByte
CloseHandle
WaitForSingleObjectEx
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetCurrentThreadId
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
InterlockedFlushSList
WriteConsoleW
SetEndOfFile
ReadConsoleW
ReadFile
HeapSize
CreateFileW
SetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
GetStdHandle
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
RaiseException
RtlPcToFileHeader
RtlUnwindEx

libpq

ord106
ord37
ord47
ord35
ord65
ord46
ord48
ord44
ord34
ord92
ord95
ord33
ord45
ord1
ord4
ord24
ord19
ord155
ord101
ord98
ord21
ord18
ord72
ord15
ord20
ord22
ord113
ord26
ord14
ord5
ord23

Exports

Exports

ts3dbplugin_apiversion
ts3dbplugin_bulk_insert
ts3dbplugin_connect
ts3dbplugin_disconnect
ts3dbplugin_exec
ts3dbplugin_getlasterror
ts3dbplugin_init
ts3dbplugin_name
ts3dbplugin_open
ts3dbplugin_shortname
ts3dbplugin_shutdown
ts3dbplugin_tableexists
ts3dbplugin_version

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/ts3db_sqlite3.dll
.dll windows:5 windows x64 arch:x64

5b1e92e3031f733985d37e1c85058236

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-11-2020 00:00

Not After

08-11-2023 23:59

Subject

CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ec:a5:f4:bd:4c:d8:89:3f:7d:00:f8:0a:df:7e:50:e8:4d:56:3b:ae
Signer

Actual PE Digest

ec:a5:f4:bd:4c:d8:89:3f:7d:00:f8:0a:df:7e:50:e8:4d:56:3b:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner-PS\builds\17GNmMQr\0\teamspeak\teamspeak_server\build\64\out\Release_x64\ts3db_sqlite3.dll.pdb

Imports

kernel32

Sleep
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
GetVersionExW
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
WriteConsoleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetFilePointerEx
SetStdHandle
GetConsoleCP
GetConsoleMode

Exports

Exports

ts3dbplugin_apiversion
ts3dbplugin_bulk_insert
ts3dbplugin_connect
ts3dbplugin_disconnect
ts3dbplugin_exec
ts3dbplugin_getlasterror
ts3dbplugin_init
ts3dbplugin_name
ts3dbplugin_open
ts3dbplugin_shortname
ts3dbplugin_shutdown
ts3dbplugin_tableexists
ts3dbplugin_version

Sections

.text
Size: 875KB - Virtual size: 874KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/ts3server.exe
.exe windows:5 windows x64 arch:x64

c8e9a25b0ef1f8e0416fbd1dd4d1cb13

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-11-2020 00:00

Not After

08-11-2023 23:59

Subject

CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:0c:df:c2:31:a1:55:20:3a:8a:08:f9:6c:9a:33:90:51:b6:54:76
Signer

Actual PE Digest

c1:0c:df:c2:31:a1:55:20:3a:8a:08:f9:6c:9a:33:90:51:b6:54:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\GitLab-Runner-PS\builds\17GNmMQr\0\teamspeak\teamspeak_server\build\64\out\Release_x64\ts3server.exe.pdb

Imports

ts3_ssh

ssh_disconnect
ssh_message_channel_request_reply_success
ssh_message_reply_default
ssh_disconnect_with_message
ssh_message_get
ssh_set_message_callback
ssh_message_subtype
ssh_channel_free
ssh_message_auth_user
ssh_get_status
ssh_channel_window_size
ssh_set_blocking
ssh_handle_key_exchange
ssh_message_auth_reply_success
ssh_message_channel_request_open_reply_accept
ssh_free
ssh_message_channel_request_pty_height
ssh_message_auth_set_methods
ssh_channel_close
ssh_channel_read_timeout
ssh_message_auth_password
ssh_message_channel_request_pty_width
ssh_silent_disconnect
ssh_channel_write
ssh_message_free
ssh_blocking_flush
ssh_message_channel_request_pty_term
ssh_channel_set_blocking
ssh_message_type
ssh_channel_send_eof
ssh_options_set
ssh_new
create_host_rsa_key
ssh_bind_options_set
ssh_bind_accept_fd
ssh_init
ssh_bind_new
ssh_bind_free

dbghelp

MiniDumpWriteDump

gdi32

CreateFontIndirectA
DeleteObject
GetObjectA
SetTextColor

user32

PostQuitMessage
TrackPopupMenuEx
RegisterClassExA
SetForegroundWindow
LoadIconA
SendMessageA
TranslateMessage
CreateWindowExA
DestroyMenu
DefWindowProcA
MessageBoxA
GetCursorInfo
GetSubMenu
GetSystemMetrics
DestroyWindow
DispatchMessageA
GetMessageA
LoadMenuA
CreateDialogParamA
SetDlgItemTextA
SendDlgItemMessageA
SetDlgItemTextW
IsDialogMessageA
ShowWindow
PtInRect
GetSysColorBrush
GetDlgItem
SetCursor
ClientToScreen
LoadCursorA
GetWindowRect
LoadImageA
SetClipboardData
LoadBitmapA
EmptyClipboard
CloseClipboard
GetDlgItemTextA
OpenClipboard

advapi32

RegCloseKey
CryptEncrypt
CryptDecrypt
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
CryptDestroyKey
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CryptSetKeyParam
CryptImportKey

crypt32

CryptStringToBinaryA
CryptBinaryToStringA

bcrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider

ws2_32

send
recv
WSAStartup
WSACleanup
WSAEnumProtocolsW
WSAGetLastError
htons
htonl
WSAAddressToStringW
ntohs
WSASetLastError
ntohl
setsockopt
ioctlsocket
getsockopt
WSARecv
getsockname
getpeername
WSASocketW
WSAStringToAddressW
listen
shutdown
WSASend
closesocket
bind
WSARecvFrom
WSASendTo
select
WSAIoctl
connect
accept
__WSAFDIsSet
freeaddrinfo
getaddrinfo
socket

shell32

Shell_NotifyIconA
SHGetFolderPathA
ShellExecuteA

mswsock

GetAcceptExSockaddrs
AcceptEx

secur32

InitSecurityInterfaceW

kernel32

GetConsoleCP
ReadConsoleW
SetEnvironmentVariableW
ReadFile
ExitThread
GetFileType
GetModuleHandleExW
ExitProcess
RtlUnwindEx
GetStdHandle
FlushFileBuffers
GetDateFormatW
GetConsoleMode
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
SetStdHandle
HeapReAlloc
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
GetLocaleInfoW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
WriteConsoleW
OpenEventA
RtlUnwind
WaitForMultipleObjectsEx
GetProcessHeap
LCMapStringW
CompareStringW
GetCPInfo
GetStringTypeW
GetNativeSystemInfo
GetExitCodeThread
TryEnterCriticalSection
RaiseException
DecodePointer
EncodePointer
RtlPcToFileHeader
GetSystemTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
ResetEvent
VirtualQueryEx
CreateSemaphoreW
CreateThread
LoadLibraryW
ResumeThread
GetProcessId
RtlCaptureContext
GetCurrentThread
SetThreadPriority
InitializeCriticalSection
FormatMessageW
QueryPerformanceCounter
QueryPerformanceFrequency
AreFileApisANSI
CreateDirectoryExW
GetFileTime
CopyFileW
GetModuleHandleW
MoveFileExW
GetWindowsDirectoryW
GetCurrentDirectoryW
DeleteFileW
GetFileAttributesW
GetModuleFileNameW
GetLastError
GetCurrentProcess
lstrlenA
GetCurrentThreadId
CreateFileA
CloseHandle
FreeConsole
lstrcpynA
GetCurrentProcessId
AllocConsole
SetUnhandledExceptionFilter
GetModuleHandleA
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalUnlock
GetSystemTimeAsFileTime
LocalFree
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
TlsAlloc
TlsFree
GetFileAttributesExW
SetEvent
WaitForSingleObjectEx
WideCharToMultiByte
CreateEventA
HeapFree
HeapAlloc
VirtualQuery
SetWaitableTimer
TlsSetValue
VerifyVersionInfoA
SetLastError
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
WaitForSingleObject
MultiByteToWideChar
TerminateThread
QueueUserAPC
DeleteCriticalSection
VerSetConditionMask
VerifyVersionInfoW
TlsGetValue
CreateIoCompletionPort
GetSystemInfo
CreateEventW
CreateWaitableTimerA
SleepEx
LoadLibraryA
GetProcAddress
FreeLibrary
GetFileSizeEx
FindFirstFileA
ReleaseSemaphore
WriteFile
FindNextFileA
SetEndOfFile
FindClose
CreateMutexA
UnmapViewOfFile
DuplicateHandle
SwitchToThread
SetFilePointerEx
CreateFileMappingA
RemoveDirectoryA
CreateDirectoryA
CreateSemaphoreA
GetTickCount
MapViewOfFileEx
GetProcessTimes
ReleaseMutex
Sleep
CreateDirectoryW
FindFirstFileW
FindNextFileW
DeviceIoControl
RemoveDirectoryW
GetEnvironmentVariableW
CreateFileW

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.4MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/tsdns/readme.txt
teamspeak3-server_win64/tsdns/tsdns_settings.ini.sample
teamspeak3-server_win64/tsdns/tsdnsserver.exe
.exe windows:5 windows x64 arch:x64

31ece51ce268469988f4a00aa97a4fc5

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-11-2020 00:00

Not After

08-11-2023 23:59

Subject

CN=TeamSpeak Systems GmbH,O=TeamSpeak Systems GmbH,L=Krün,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

91:9e:58:b7:02:dc:34:c1:c8:08:d9:31:2e:ed:d0:99:0f:b7:06:a2
Signer

Actual PE Digest

91:9e:58:b7:02:dc:34:c1:c8:08:d9:31:2e:ed:d0:99:0f:b7:06:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\GitLab-Runner-PS\builds\17GNmMQr\0\teamspeak\teamspeak_server\build\64\out\Release_x64\tsdnsserver.exe.pdb

Imports

ws2_32

setsockopt
WSACleanup
bind
closesocket
WSASend
listen
WSASetLastError
WSAStringToAddressW
WSASocketW
WSAStartup
WSAAddressToStringW
WSARecv
htons
ioctlsocket
WSAGetLastError

mswsock

GetAcceptExSockaddrs
AcceptEx

advapi32

RegCloseKey
RegQueryValueExA
InitializeSecurityDescriptor
RegOpenKeyExA
SetSecurityDescriptorDacl

kernel32

GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
SetStdHandle
FindNextFileW
FindFirstFileExW
HeapReAlloc
ReadConsoleW
ReadFile
CreateFileW
HeapSize
WriteConsoleW
IsValidCodePage
GetModuleHandleW
SetWaitableTimer
GetFileSizeEx
FindFirstFileA
GetCurrentProcess
ReleaseSemaphore
FindNextFileA
SetEndOfFile
FindClose
CreateMutexA
UnmapViewOfFile
DuplicateHandle
CreateFileA
SwitchToThread
SetFilePointerEx
CreateFileMappingA
LocalFree
RemoveDirectoryA
CreateDirectoryA
CreateSemaphoreA
GetTickCount
MapViewOfFileEx
GetProcessTimes
TlsSetValue
VerifyVersionInfoA
SetLastError
EnterCriticalSection
WriteFile
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetQueuedCompletionStatus
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetModuleHandleA
PostQueuedCompletionStatus
CreateEventW
MultiByteToWideChar
Sleep
GetLastError
SetEvent
TerminateThread
TlsAlloc
CloseHandle
GetSystemInfo
QueueUserAPC
CreateWaitableTimerA
GetProcAddress
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
WideCharToMultiByte
SleepEx
TlsGetValue
GetSystemTimeAsFileTime
TlsFree
FormatMessageA
CreateIoCompletionPort
TryEnterCriticalSection
GetCurrentThreadId
WaitForSingleObjectEx
GetCurrentThread
GetExitCodeThread
QueryPerformanceCounter
RtlUnwind
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
ResetEvent
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
EnumSystemLocalesW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
ExitProcess
GetModuleHandleExW
ExitThread
SetConsoleCtrlHandler
GetStdHandle
GetCommandLineA
GetCommandLineW
GetFileType
HeapAlloc
HeapFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsValidLocale
GetUserDefaultLCID

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
teamspeak3-server_win64/tsdns/usage.txt

Sharing

General

Malware Config

Signatures

Files

5712b96c83a9500532a44b7dd3fa33d0

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

b0:6b:67:28:8e:7c:e2:49:90:55:50:e5:49:6b:50:59:07:c5:5d:e8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 243KB - Virtual size: 243KB

.rdata Size: 99KB - Virtual size: 98KB

.data Size: 16KB - Virtual size: 82KB

.pdata Size: 11KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

917ddbc0ad9e6cbafe6698c55f9ca899

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 36B

ee0c6e5af46853c4e9c0a9c7b888d0ef

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

e1:6d:5b:65:e7:9b:38:84:b3:64:5e:a7:5c:f4:e0:de:ca:e0:1e:b4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

b0:6b:67:28:8e:7c:e2:49:90:55:50:e5:49:6b:50:59:07:c5:5d:e8
Signer

.text
Size: 243KB - Virtual size: 243KB

.rdata
Size: 99KB - Virtual size: 98KB

.data
Size: 16KB - Virtual size: 82KB

.pdata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 36B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

e1:6d:5b:65:e7:9b:38:84:b3:64:5e:a7:5c:f4:e0:de:ca:e0:1e:b4
Signer

.text
Size: 515KB - Virtual size: 514KB

.rdata
Size: 266KB - Virtual size: 265KB

.data
Size: 11KB - Virtual size: 26KB

.pdata
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

11:bc:b7:b3:63:41:09:71:d2:9f:c6:c4:38:98:c2:31:9d:3f:aa:0a
Signer

.text
Size: 190KB - Virtual size: 190KB

.rdata
Size: 90KB - Virtual size: 89KB

.data
Size: 5KB - Virtual size: 15KB

.pdata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:01:2e:b9:8c:70:3a:a9:b0:6d:26:43:55:e9:fe:39
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

19:c8:9e:d2:65:05:d2:e6:56:17:e6:45:31:82:70:e2:81:d9:23:1f
Signer

.text
Size: 276KB - Virtual size: 275KB

.rdata
Size: 128KB - Virtual size: 128KB